Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: OBwPZFeIP2I4EyYLM/JW2fTGGLqu9N92R49rV0ZdKH8=
Subject key identifier: 03:51:AB:73:BC:4E:AD:2E:25:90:F9:2D:DF:6B:38:2D:F8:D2:51:AC
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 0198D706397B343B9B1FED6A1CB6EFBD81D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:45 +0000
Manifest this update: Sat 23 Aug 2025 13:02:45 +0000
Manifest next update: Sun 24 Aug 2025 13:02:45 +0000
Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: gE5/bGiQdoLuLoh8/o6mApwiclRyu1gyMgMQVqCxrPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:39:7b:34:3b:9b:1f:ed:6a:1c:b6:ef:bd:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Aug 23 13:02:45 2025 GMT
Not After : Aug 24 13:02:45 2025 GMT
Subject: CN=0351ab73bc4ead2e2590f92ddf6b382df8d251ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:d1:44:1b:47:25:a0:e2:3d:50:1f:4f:6d:
80:06:f1:db:ae:55:2c:07:4c:21:ff:d7:37:0a:36:
ce:15:04:70:cc:98:19:9d:ca:af:23:41:0d:0c:01:
18:1a:0e:e5:56:f4:eb:fc:8d:1b:72:c1:79:df:67:
5e:7a:98:45:b2:2d:2e:dc:c9:a6:82:f4:40:04:e0:
a2:43:5a:87:7e:da:6d:10:56:c0:e9:fc:c6:ab:c8:
d6:8f:db:ef:a6:3f:e0:da:6d:bc:4f:4d:bd:4a:bd:
49:00:ff:40:80:ae:0b:7e:88:3d:9e:09:3d:a2:0e:
c8:3c:3f:d4:b9:1b:0d:61:b8:b1:ae:d5:5c:e0:24:
71:45:85:86:c7:8f:8f:c6:20:1f:15:76:67:40:5d:
41:ea:0f:1c:35:d7:dd:f0:da:f1:82:5e:08:de:17:
4a:7d:09:0a:0c:9e:f8:55:b3:1e:13:9b:1e:21:28:
d4:e7:45:94:b4:e8:70:89:1b:83:83:81:ce:3e:6d:
5f:58:1d:99:ed:e5:af:51:e3:21:39:84:aa:95:0e:
ee:35:df:a5:cb:f3:af:da:d8:97:59:01:f0:86:7d:
9b:fd:1f:65:da:80:e7:63:f4:17:07:5e:a2:46:46:
ae:58:60:f4:67:ba:7e:e9:ae:fe:d8:c1:f9:4c:ef:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:AB:73:BC:4E:AD:2E:25:90:F9:2D:DF:6B:38:2D:F8:D2:51:AC
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:a4:68:31:20:cf:25:0f:ae:96:bf:c2:c0:b4:c4:13:fe:
0a:53:a1:72:c0:b9:bb:06:3a:b2:8f:f1:c2:54:c0:54:5e:d9:
bb:38:c8:78:da:38:b6:dd:08:ab:79:02:10:53:ff:aa:19:8e:
62:e0:0d:7e:80:d7:7c:4d:89:9c:51:7f:fc:ec:eb:84:ab:f5:
d6:c4:b9:8b:de:02:6f:40:5c:92:e1:aa:74:b5:58:2d:7c:ed:
ae:9b:6f:dd:13:90:3e:92:66:81:c1:5a:89:5c:7d:62:51:46:
21:06:af:47:46:ad:f6:ae:08:01:de:03:45:93:6c:c2:71:be:
4c:82:64:29:b7:5f:68:76:11:21:cd:59:8b:96:5b:e5:4a:37:
52:19:b1:0a:bf:90:03:93:fb:e8:4f:00:26:57:45:66:f3:e2:
00:99:b1:79:a1:0b:bb:8c:c5:85:ad:ac:27:8a:bc:b2:72:d0:
be:e5:25:d9:78:1a:c6:f1:10:ed:41:db:dd:79:68:fc:b0:b9:
3d:2d:2f:ed:e9:ce:05:bb:11:32:01:23:23:d5:90:d3:fc:10:
f5:6a:bc:83:a0:ba:a4:9b:3d:d5:81:90:fa:b6:39:01:8f:55:
42:1b:5f:24:9d:69:16:28:5e:b0:a1:57:0a:61:d6:cf:53:de:
7b:c6:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:16 2025 by rpki-client