Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: bLM62MG1JeFhUVwrP9NKIQpzKQlo8o7YWByULNVZNyw=
Subject key identifier: 20:1B:EC:49:81:D7:29:7B:90:2F:E7:B0:97:A6:9D:9C:58:BA:46:E3
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 0197B74583BD5C814B9AF8D9E5EA55696DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: t4yMAvcwWsnGlIZOq4MAUje6VaziJhEYdzqciIeovyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:83:bd:5c:81:4b:9a:f8:d9:e5:ea:55:69:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=201bec4981d7297b902fe7b097a69d9c58ba46e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:62:ad:2b:ea:f8:38:3e:28:87:b6:21:96:
1d:09:b0:9a:88:58:2f:b2:9f:32:1c:9a:48:fb:9c:
d0:49:51:1b:de:d3:0f:ed:c3:57:eb:08:63:7b:c3:
6f:ab:26:b7:d4:23:84:8e:88:65:7f:3a:b1:9b:b8:
39:d3:1b:75:b8:76:57:c9:ae:e7:47:97:48:0f:dc:
f9:0f:59:e8:64:cc:80:21:83:48:b5:69:7c:f7:04:
98:1c:de:c3:3e:79:61:4b:66:49:df:35:5a:cd:6f:
7d:d9:d5:17:21:71:46:7b:04:f6:c8:bb:a2:67:87:
a1:00:e3:ab:36:39:c9:de:24:fe:31:8d:33:ce:db:
33:56:51:41:48:e2:41:d3:b3:3c:17:aa:29:a3:6a:
11:c3:12:ef:8d:b3:17:92:0c:46:68:6c:e0:76:27:
30:11:16:9e:06:47:c4:07:56:94:c9:a0:41:c3:59:
cf:89:5e:3e:6d:0c:62:9a:34:46:24:ff:b4:cf:2b:
71:ca:9c:10:5c:72:1f:af:d1:03:42:af:46:2d:0a:
83:9a:b4:2d:21:76:35:56:94:38:52:dc:fd:9a:fd:
5c:33:f9:02:50:7e:fd:82:53:f0:9f:0b:25:85:56:
9b:d0:ae:4d:3c:6d:b8:c4:6d:9d:02:b6:b8:59:25:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:EC:49:81:D7:29:7B:90:2F:E7:B0:97:A6:9D:9C:58:BA:46:E3
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:4b:46:32:6d:f1:fc:89:5a:ad:42:89:0c:bf:5b:68:2e:
d8:05:f0:bd:3f:88:af:8c:0b:39:2f:39:67:0d:a9:28:5f:6c:
7a:f0:4b:e9:e9:a9:f8:26:8e:d9:3b:94:2e:fc:c0:bd:93:90:
e5:43:8c:d8:78:98:93:5a:5d:6e:1c:dc:2c:00:22:c9:49:0c:
c6:65:ca:09:bb:38:ce:fc:a5:af:f1:d3:0d:3d:99:f2:20:17:
6a:2b:c5:c5:65:1b:91:98:4d:b3:0b:bb:50:45:b5:5a:a6:fd:
cd:5c:b2:0c:3b:80:d4:b6:8b:4d:05:92:99:b6:d9:73:ce:7c:
06:b4:d3:de:d9:4f:36:91:c9:85:ed:e6:26:d9:2a:fa:ac:a9:
fb:14:fd:37:70:0c:28:d6:41:dd:64:66:35:0a:86:2d:f9:53:
8e:09:67:2d:e2:b0:9f:fa:83:63:a1:75:22:83:2c:44:2a:ae:
1a:b1:29:f1:dd:60:54:7e:12:93:d2:4a:28:af:f6:de:a5:bd:
5d:2a:f7:e2:c5:f4:08:59:5e:c7:28:f8:24:e0:34:78:81:d3:
45:a4:58:2c:7b:60:92:35:06:3a:d9:51:d9:48:c7:2a:21:c2:
6f:ea:eb:e0:be:66:13:10:86:e1:74:94:cb:67:be:33:14:93:
cd:96:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:47 2025 by rpki-client