Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File: Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier: F7w5+4PCK7BatGhpPI8IY/K/V2nCFyXsK1xKGJScf0k=
Subject key identifier: CE:AE:1D:F2:3C:00:7F:6C:C4:43:5B:E3:CF:D9:29:A1:79:B9:54:8D
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer: /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial: 0197B6A1572168B497E82B13E3FEAEB8465F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number: 14D4
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: bey3PcNHAFWau2ejMY8HNKwZhZGFiJ57MFL9cRNFtQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:57:21:68:b4:97:e8:2b:13:e3:fe:ae:b8:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=ceae1df23c007f6cc4435be3cfd929a179b9548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:1b:83:f0:8e:e5:52:a2:53:8e:10:67:0b:
eb:a4:0b:85:3a:31:5e:bc:8c:fc:bd:a7:3e:b5:e3:
e4:88:43:71:c5:ba:a8:b3:c8:de:a3:80:eb:6e:c7:
62:47:94:b7:8e:83:0a:db:ce:10:15:6d:a8:60:2e:
c2:22:03:0e:ba:cd:59:4b:01:bf:50:04:30:66:0b:
d7:87:45:66:df:4f:5b:03:37:ff:56:78:d8:b8:3c:
10:b1:e3:02:8f:95:82:9a:41:ca:b1:2e:b4:82:59:
70:f2:b9:55:45:07:0b:12:73:f3:35:d5:f2:8d:44:
99:2f:f7:8c:60:4b:dc:cc:7b:1c:0c:83:49:86:88:
b6:74:86:87:f6:5e:b2:46:27:82:56:ad:bf:2f:77:
84:9a:73:53:64:04:68:e6:cf:a1:57:53:49:d6:b6:
28:11:07:4c:c2:b7:39:32:56:c3:0f:2a:9b:19:6e:
87:44:41:38:2e:68:be:47:3d:46:f5:e5:d4:9f:9a:
92:c2:cb:5a:db:78:ef:2c:09:48:85:6f:3e:16:78:
ed:23:cf:fd:de:0c:05:73:6d:33:01:dc:9e:2d:2c:
65:f6:ce:88:b2:81:ad:4f:4f:b6:7d:0c:d5:ff:fd:
10:94:42:ee:a6:30:35:63:ac:e7:7d:52:9f:cd:47:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:1D:F2:3C:00:7F:6C:C4:43:5B:E3:CF:D9:29:A1:79:B9:54:8D
X509v3 Authority Key Identifier:
keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:9e:0d:e0:47:d0:8d:f6:d8:a7:f2:14:ad:07:0b:e2:db:
be:7e:33:a9:7c:96:a4:3e:ad:d2:0b:13:6d:dd:65:4f:93:2f:
7b:54:d5:b2:b2:bf:5c:e4:d3:5a:a1:93:5f:11:f2:68:2b:e0:
fa:3b:f7:e7:1f:4b:45:42:92:47:1a:04:7a:f1:a8:9b:40:1c:
d0:4f:32:4c:2f:35:6c:1c:10:f0:62:cf:3a:78:dc:33:99:ba:
a3:f9:3a:e1:e6:f5:a2:8a:95:08:8b:ad:62:21:de:18:c6:a9:
48:9e:a1:dd:76:4d:2d:6e:ab:eb:8b:29:22:64:9b:48:06:4e:
4c:9d:65:a0:02:73:2e:86:f1:2a:c4:b8:2e:5a:8f:15:5f:f7:
d9:56:26:0a:99:f1:ed:4d:be:0b:c4:a8:ae:c9:5a:13:d7:f5:
90:b1:18:b1:02:68:a8:dc:d1:5f:ac:0c:ab:85:bf:20:4f:4f:
c5:07:95:50:09:fb:21:63:95:1d:59:39:8c:6a:d5:2c:2b:a2:
31:1e:cf:89:c7:6e:8b:63:37:32:48:ac:ac:db:2b:97:62:08:
fd:0d:b4:7f:ea:1f:3d:2f:7c:5d:69:d8:18:e1:58:e7:a1:9f:
2b:d2:16:7a:ff:1f:ee:08:d7:ab:17:f6:b7:54:7b:eb:44:68:
db:02:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:13 2025 by rpki-client