Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: xLp1+f1t7ZdPv5EFQ9clLSh2nphVyAjpbrkJbl9BbXM=
Subject key identifier: 96:43:89:74:26:BD:57:0C:EB:D8:4C:D7:56:FF:53:5B:C3:DA:B6:CA
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019770756C97169B3373CAECD72F07E8DE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 0931
Signing time: Sat 14 Jun 2025 22:00:32 +0000
Manifest this update: Sat 14 Jun 2025 22:00:32 +0000
Manifest next update: Sun 15 Jun 2025 22:00:32 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: O6LbkhdmNYzyCTb9OhmGQzOtLVOtlnxiaf5TkUp8Czo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:6c:97:16:9b:33:73:ca:ec:d7:2f:07:e8:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Jun 14 22:00:32 2025 GMT
Not After : Jun 15 22:00:32 2025 GMT
Subject: CN=9643897426bd570cebd84cd756ff535bc3dab6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:91:0c:5d:57:ba:67:7f:f9:67:97:cc:2c:
9b:11:6a:0e:db:20:a5:0c:f6:f6:87:0c:05:a1:53:
f8:98:f5:ef:f0:cd:66:1d:21:6e:10:01:10:2e:ed:
a6:9b:e6:39:05:69:cf:ca:7a:e5:43:f4:5b:f3:c2:
7a:65:98:04:c1:7b:ef:ee:ea:7a:aa:36:2a:b8:2d:
05:73:db:f8:57:c9:4e:eb:87:0b:a0:e8:48:5a:ad:
e2:24:fd:10:63:88:17:7d:b0:b9:cb:3c:12:2c:9a:
56:00:4c:16:5f:20:d5:dd:ab:44:7d:93:e5:ab:98:
7e:69:7a:75:7f:f2:21:9e:74:27:43:78:c7:57:b2:
d8:19:8d:79:d7:72:d7:9f:44:e0:fd:d8:89:ec:78:
1f:3f:5d:cc:6b:ac:15:d0:ce:f9:dc:52:aa:67:67:
60:96:ad:c6:24:a1:a7:29:bb:b5:4a:80:ab:e6:4e:
1c:70:5d:4d:9e:13:e4:80:ee:59:c8:82:f1:87:00:
05:8e:24:61:4e:d7:74:e7:ce:c0:5f:35:b1:1d:82:
a4:6f:ec:34:4e:50:23:3f:35:ee:83:f1:f8:62:f6:
ff:6a:c8:b3:2d:ec:79:2a:84:83:db:a0:23:68:5a:
82:96:76:f8:de:00:de:66:70:38:27:76:f1:78:e0:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:89:74:26:BD:57:0C:EB:D8:4C:D7:56:FF:53:5B:C3:DA:B6:CA
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:6d:97:ea:16:8c:76:6b:ee:e3:47:91:14:aa:bf:48:32:
2d:51:9e:34:e1:b4:c5:be:1d:8e:97:fe:0d:2b:de:ef:11:ec:
82:64:a3:2f:73:4d:01:a4:17:f4:ab:8e:a1:41:28:04:fa:9a:
9d:b5:a0:2e:4e:3d:90:6b:86:ec:86:ed:d3:a5:6c:75:27:3e:
0a:88:1a:91:b7:c5:1f:06:67:37:73:b6:a1:f8:7f:bf:ed:c0:
4b:42:4a:31:94:0c:74:2f:1f:72:37:b9:29:fe:a9:1d:dc:2d:
21:54:0c:e8:3b:63:bb:3a:86:3a:24:aa:34:af:f7:38:12:da:
53:ab:fa:a2:7c:50:17:68:c2:b7:4a:95:9b:e7:1e:c4:1c:9d:
1b:fb:47:59:d6:87:4f:b5:7d:09:65:97:8d:d7:97:b5:5f:8d:
c5:09:4f:dd:07:92:6c:2c:ba:36:c5:4d:b7:0a:90:2d:eb:5a:
e2:1d:1b:d9:6d:1a:65:47:e9:e6:27:18:91:ba:0d:d4:b2:75:
c4:3c:7d:80:72:e4:4c:4f:e0:2d:f1:29:63:62:ce:b8:50:c3:
e2:7e:40:5c:c4:ef:10:2a:5b:ee:08:35:2e:c9:3b:55:6f:2b:
db:e9:41:17:71:46:97:95:80:1b:a3:d5:12:6d:2d:f6:53:57:
7f:e7:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:04 2025 by rpki-client