Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
File: IyYoKFK1RzuXS_-ersILA6XyAQ4.mft (raw, json)
Hash identifier: +abaI7qrSPezEdvZfJvF8LodbvoCb/2Ef1DoeUWMe0w=
Subject key identifier: 97:DE:95:13:AA:74:FA:7D:D8:96:0D:16:4D:4B:7C:C4:08:74:C1:B9
Authority key identifier: 23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
Certificate issuer: /CN=2326282852b5473b974bff9eaec20b03a5f2010e
Certificate serial: 01974FA150526C36C09B29E79A050989A033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
Manifest number: 027E
Signing time: Sun 08 Jun 2025 13:01:01 +0000
Manifest this update: Sun 08 Jun 2025 13:01:01 +0000
Manifest next update: Mon 09 Jun 2025 13:01:01 +0000
Files and hashes: 1: IyYoKFK1RzuXS_-ersILA6XyAQ4.crl (hash: 9HjFvPjfRoNf69SDVOA+j5URplsCybbzF0/2PfR4BTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:50:52:6c:36:c0:9b:29:e7:9a:05:09:89:a0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326282852b5473b974bff9eaec20b03a5f2010e
Validity
Not Before: Jun 8 13:01:01 2025 GMT
Not After : Jun 9 13:01:01 2025 GMT
Subject: CN=97de9513aa74fa7dd8960d164d4b7cc40874c1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:3e:9d:35:44:e1:58:ff:1d:a8:1d:cf:83:
6e:e4:38:ce:c2:7c:3f:70:ee:23:e4:a4:fe:f2:69:
fe:83:60:71:d1:60:65:bb:dd:e4:d2:ce:69:b6:6b:
fd:8a:d1:b0:2b:eb:83:fb:5f:7a:86:dc:95:a9:47:
9a:f5:e4:cf:4f:61:93:91:e4:85:87:e6:ea:39:77:
ff:68:9b:4d:1b:47:31:12:93:bc:1d:b2:ed:8c:50:
2a:61:74:9d:73:5b:89:cd:91:4f:ac:3e:69:6e:a5:
37:f5:35:ef:9a:7e:7d:cc:8b:bb:54:e1:0d:bb:81:
b3:f3:62:b3:51:8f:92:3f:59:26:ec:b2:83:70:5e:
3f:27:56:04:53:08:a4:ad:50:ec:93:4a:d1:1a:1e:
37:b2:55:9b:82:f5:c2:9a:14:3f:b3:a4:c2:86:ff:
c6:a1:a9:03:94:0b:5b:1a:3b:96:eb:4f:c1:aa:a1:
ed:07:09:09:57:92:58:d4:59:41:d9:10:ba:ef:3c:
48:c8:fe:51:a1:ca:00:77:6e:c6:90:5a:0b:33:99:
8f:3e:21:28:00:c8:9f:7d:4d:57:fe:8e:b5:d9:6e:
48:e0:30:50:05:91:68:b2:e6:c0:61:19:5d:7f:82:
b4:f2:53:99:33:6e:53:fb:b6:dc:bb:77:ef:96:e5:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:95:13:AA:74:FA:7D:D8:96:0D:16:4D:4B:7C:C4:08:74:C1:B9
X509v3 Authority Key Identifier:
keyid:23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c0:95:48:b4:8e:26:76:1d:fa:a5:c5:d6:18:82:bf:d4:b2:
33:a6:b3:89:39:5b:80:c3:35:0c:40:3e:de:e8:43:c5:66:c1:
96:c3:4c:e6:19:87:58:22:c1:31:35:af:0c:db:47:4f:41:76:
3e:b5:66:74:85:cd:b3:99:35:24:c4:df:3b:04:05:1a:4d:ec:
c8:62:80:37:b0:ef:29:a3:c2:a2:ee:ce:20:8e:a9:68:c3:d7:
9d:3d:79:67:cf:9b:5a:02:d5:1e:f0:2c:90:c3:e9:89:b0:a5:
64:e6:1f:4e:8d:33:da:40:d7:e3:bb:9e:fc:c2:12:e7:25:85:
79:19:19:0c:c1:27:10:57:ae:de:81:5e:06:5a:52:ba:81:ee:
e4:99:51:68:91:5c:4f:0d:02:e8:88:0c:5a:a4:b6:89:4e:f0:
e0:51:d4:80:9d:af:a3:6f:65:94:a0:f0:15:cc:d0:fe:86:f3:
0a:a9:07:6e:5d:f4:f1:82:21:a9:cb:40:c2:47:dc:60:48:cf:
80:01:41:aa:9b:96:35:44:a6:1f:1c:da:5f:cc:bb:83:64:c1:
cc:6e:08:1e:01:e5:a0:51:cb:08:bc:9b:5c:f8:c1:5a:5e:f1:
a6:98:63:22:0f:c0:f3:9c:0a:d1:0b:49:eb:3f:f9:4e:a1:ea:
fe:3a:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:28 2025 by rpki-client