Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: R7mLXG/o7hbtNKImmeAFtNaWit2cWSouDe2YdzRUtzM=
Subject key identifier: 89:8A:92:87:39:69:B1:A5:AD:B5:01:42:30:A8:28:5A:AA:CA:64:FF
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 0197C613ABB40F515A9125A5600119688FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 05AA
Signing time: Tue 01 Jul 2025 13:01:07 +0000
Manifest this update: Tue 01 Jul 2025 13:01:07 +0000
Manifest next update: Wed 02 Jul 2025 13:01:07 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: 2R4Gm/QOLkePGZG5WEUheEsBvCLMauvpuKT1LZcDadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:ab:b4:0f:51:5a:91:25:a5:60:01:19:68:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Jul 1 13:01:07 2025 GMT
Not After : Jul 2 13:01:07 2025 GMT
Subject: CN=898a92873969b1a5adb5014230a8285aaaca64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:bb:2e:20:62:c0:71:a3:eb:14:97:03:39:
6f:ff:cc:32:f7:e0:8f:32:a1:b4:ea:06:d7:b1:dd:
fb:cc:22:78:56:1d:16:17:10:96:86:0a:10:8b:96:
c8:71:99:3c:11:e9:36:be:78:28:20:bb:cf:6a:f4:
de:2f:e4:56:1a:b4:1d:e8:54:82:84:03:bc:7d:58:
7c:01:5f:27:2a:19:7c:64:2d:1d:a8:7d:15:24:50:
28:3d:03:0d:df:8d:f1:cf:3f:04:63:97:f0:07:d2:
71:ef:76:fa:6f:bc:2e:93:c2:ca:2f:0e:da:cf:91:
b5:ac:a7:91:d2:ca:28:f0:3c:39:76:34:01:37:10:
14:1b:d6:db:ee:2a:f8:f3:48:50:4b:f7:b7:21:62:
3a:79:16:a4:8e:b1:80:41:30:78:16:d1:b7:ba:3d:
f5:13:a2:e1:d5:21:44:52:0d:ef:21:60:51:a2:75:
bb:e2:7f:43:76:8f:f2:3b:00:67:14:9c:c2:b0:50:
7e:ff:1c:b7:8e:76:36:45:60:90:49:de:05:43:01:
7e:1b:68:84:d8:3c:8a:e9:68:70:70:a5:94:b7:b2:
94:04:e5:99:5f:0d:23:73:3e:1f:41:1d:cb:a0:e5:
34:b5:2f:48:25:3c:32:96:3d:ae:5f:62:cd:c4:7e:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:92:87:39:69:B1:A5:AD:B5:01:42:30:A8:28:5A:AA:CA:64:FF
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:f8:c9:f5:1e:76:4d:ed:73:ad:8d:c8:74:f3:35:39:f0:
e6:84:e1:12:3d:25:a7:9b:21:81:6c:36:dd:cd:23:49:96:19:
7d:2b:26:e7:11:dc:a8:76:1f:40:ba:a8:5c:a2:b5:6a:80:b9:
99:2c:47:99:4a:cf:29:2b:27:e4:7d:10:2b:1d:0a:4e:92:15:
84:3d:75:60:c0:3b:8c:3e:ff:3c:5f:c3:20:95:52:94:c8:7b:
45:8a:6b:55:3f:1a:31:28:85:21:1a:d8:92:33:c4:a0:92:fd:
75:22:17:92:48:d3:6c:53:7c:ff:bb:19:95:01:ad:02:bd:77:
eb:d7:f1:98:bf:cb:ed:c5:32:57:ce:7e:93:0b:ae:6a:32:56:
30:24:6f:c1:ae:a7:da:ae:25:7f:a7:21:48:2b:9c:90:97:b9:
0d:7f:93:96:75:c8:c4:2b:d6:a2:78:17:f9:16:08:47:58:1c:
98:f0:a2:a9:fd:e2:01:60:12:57:45:6a:fb:d0:8a:b6:53:65:
68:ef:4a:0d:e3:8f:35:76:9a:21:7c:38:be:77:07:08:a4:82:
78:b9:73:b7:ff:07:15:df:39:56:f0:75:db:7e:bb:a2:84:4b:
91:c6:d9:6e:a7:96:81:ae:67:33:34:ab:cd:a2:60:99:04:24:
ca:54:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:25 2025 by rpki-client