Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
File: iwUOQskY3jwnNm3vQzph8Tw7FrI.mft (raw, json)
Hash identifier: nfwppDd6fV321Ol0pInQHXrY+CMM3X27D0Mc+4PF7Ks=
Subject key identifier: D2:C9:10:BD:EE:D4:E2:04:4B:A4:9F:1D:2F:E7:41:FA:29:F8:FA:86
Authority key identifier: 8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
Certificate issuer: /CN=8b050e42c918de3c27366def433a61f13c3b16b2
Certificate serial: 0197B6A20A7CC0D8EC84F867420E358ED8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: iwUOQskY3jwnNm3vQzph8Tw7FrI.crl (hash: s8OI2Goo3EAzS8GQ2Vzr/3Ur/R37xtb7YVijiXueGhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0a:7c:c0:d8:ec:84:f8:67:42:0e:35:8e:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b050e42c918de3c27366def433a61f13c3b16b2
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=d2c910bdeed4e2044ba49f1d2fe741fa29f8fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:d0:19:b4:50:fa:23:ba:cc:27:8b:87:ee:
9b:5d:b1:77:7a:fb:c5:d4:cb:69:5a:64:ca:95:0d:
1e:1e:50:91:69:94:25:64:82:39:e7:1b:1d:35:3e:
80:bf:17:98:f3:d7:64:15:46:61:0f:47:20:6d:1f:
b4:2d:37:e3:44:d7:ba:09:9e:1a:99:7e:ef:14:90:
85:f9:8e:15:1f:50:5e:2f:59:55:4c:e6:33:23:31:
de:bd:77:d8:15:5c:20:92:19:05:b6:74:eb:6f:0f:
6c:7c:a5:35:70:f2:ef:f1:fe:4e:2d:e3:e7:ad:5b:
93:6b:7c:42:f0:1d:bb:75:ce:57:ec:99:6b:94:75:
bd:70:78:62:86:a1:5d:fd:5b:c3:4b:78:7b:86:6d:
c2:32:7c:4d:21:e9:e9:1c:ae:92:9d:11:5f:16:b5:
a2:2c:f6:5b:c2:44:ae:81:da:0e:fc:1c:07:8e:08:
4f:ce:89:24:c6:6b:fa:e5:9d:36:73:e4:a8:f2:5d:
83:a2:54:57:0b:d1:2f:17:c0:89:b0:f6:71:fc:37:
d2:94:88:62:c1:c3:4b:67:26:f8:29:98:3e:99:a8:
27:a1:93:92:99:1f:75:60:c9:31:c2:f7:60:28:3e:
dc:7d:39:54:5c:8e:cf:07:47:c0:fc:ad:40:a9:c9:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:10:BD:EE:D4:E2:04:4B:A4:9F:1D:2F:E7:41:FA:29:F8:FA:86
X509v3 Authority Key Identifier:
keyid:8B:05:0E:42:C9:18:DE:3C:27:36:6D:EF:43:3A:61:F1:3C:3B:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwUOQskY3jwnNm3vQzph8Tw7FrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4a6c6d-b855-4b46-b32f-cac2cfff6779/1/iwUOQskY3jwnNm3vQzph8Tw7FrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a0:51:d2:74:c1:54:c6:73:fb:80:a6:98:be:d8:ac:76:f8:
ca:8d:59:1e:7a:b2:9e:d6:38:f9:0f:e1:2a:19:f6:00:62:38:
a9:3b:13:d4:db:b1:29:e9:94:dc:42:13:00:d7:e2:61:11:02:
4e:b4:f0:be:a9:03:02:8f:91:c8:ad:00:45:e2:a7:03:e2:b9:
da:6a:68:d8:f2:82:0a:c0:c8:76:34:68:47:9e:5c:d2:6f:df:
38:05:30:bb:d2:4d:76:d4:21:cd:8d:78:00:15:74:c2:9f:b1:
4d:24:c9:3b:c5:ca:bb:10:c7:bd:00:c0:b5:4e:8e:4e:cf:f4:
b2:bf:87:79:bf:5b:6f:85:aa:56:e3:7e:c8:72:bb:27:3d:d3:
8a:22:4d:c1:71:48:cb:ca:00:09:8f:85:3e:cf:41:b5:67:54:
f9:b6:a6:ec:09:0a:c6:a7:4b:43:94:77:91:a3:3a:5d:03:af:
3b:e5:79:ff:93:e0:0c:2d:71:35:2e:fc:b4:ed:0c:15:da:1d:
79:9b:5b:78:e0:a5:95:1f:e6:42:7c:17:40:69:c5:02:24:fd:
e3:bc:44:f9:ac:1c:c3:39:99:f9:6b:d5:b9:c3:78:78:ed:96:
e4:4d:6d:08:9c:2f:f2:b3:d6:1b:14:80:c3:fe:ae:82:72:f7:
73:ad:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:13 2025 by rpki-client