Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: 3zFPdNh2We3RuavugrZ+tsrvhRxvDVPljx9qaAG2+e8=
Subject key identifier: 69:97:CA:84:61:13:92:A3:03:D7:41:3F:D9:68:54:A3:23:B8:87:A2
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0197B745499D3C92E6CE0436133B4A147241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: CrpE7zUqe02U2b6CRFOvXD6ryo+r8P/70nPN/+nKgr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:49:9d:3c:92:e6:ce:04:36:13:3b:4a:14:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=6997ca84611392a303d7413fd96854a323b887a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d3:87:4a:e5:a3:1a:e5:88:d4:4b:ca:29:
6e:c3:68:8f:40:43:91:9d:74:07:60:52:4b:a1:eb:
84:2f:e2:d5:10:1f:c1:04:db:3e:e6:fa:da:29:75:
bc:92:53:08:4f:56:4e:27:82:99:b5:46:f3:c0:4d:
06:1b:49:37:73:86:bc:4a:e6:a7:91:65:b4:22:11:
04:05:95:27:2e:76:09:9d:b6:c0:d4:67:9b:80:40:
1c:22:31:6b:0f:aa:3c:01:ee:0b:19:6d:7a:fe:b0:
fe:56:f1:10:64:ac:af:d4:54:93:02:85:ba:f5:f1:
b7:6a:ba:d9:03:68:57:a1:c5:1f:db:2b:fe:5a:e3:
03:01:68:ce:e5:1b:17:71:8b:d5:a1:b1:1f:cc:d0:
4c:29:4c:7d:bf:48:9f:f4:f8:4c:6c:30:48:f7:e6:
33:d8:3a:7b:ab:03:68:0b:f3:a1:eb:a5:fb:f2:b6:
b7:3c:cd:e0:b1:aa:5b:01:bf:f2:b3:7c:62:47:04:
15:05:2d:5c:aa:75:75:b9:a5:bb:f0:23:66:0f:13:
c0:12:72:2b:31:2d:39:08:f5:5b:c9:58:ab:51:4d:
63:7c:42:16:27:44:c4:f3:7f:b3:ab:c0:11:26:52:
23:0f:e1:da:16:55:eb:07:2b:d5:f3:b0:9e:17:8d:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:CA:84:61:13:92:A3:03:D7:41:3F:D9:68:54:A3:23:B8:87:A2
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:08:af:eb:91:2c:1e:86:ac:7e:21:90:9b:3f:a2:a8:03:
cd:d7:61:ff:1c:86:10:db:55:f9:f9:54:4b:0b:f4:d4:9b:1e:
25:bf:e4:83:93:9e:99:3e:92:69:d8:36:f4:6c:c9:a5:8c:2d:
64:ee:6f:7f:b4:02:b6:37:5a:b8:b6:5f:89:1b:18:b2:dd:e7:
9a:d7:13:66:2d:db:e7:08:58:23:c4:26:3f:4d:d0:42:a8:d3:
69:22:c8:bc:f2:db:6e:57:cf:96:32:11:cf:0f:14:f0:ed:32:
99:b0:dc:0b:47:49:af:b5:54:5b:d1:20:97:80:19:15:45:cc:
3f:7d:9c:f9:50:25:2d:bf:2d:e2:66:8a:9d:d2:c6:ad:91:8d:
48:56:5d:de:b9:a9:82:a8:3d:10:bc:1c:89:72:bb:06:07:dc:
31:f2:65:18:01:64:51:1a:7c:b9:f7:c7:2b:dd:d1:a1:f7:69:
43:59:e8:b6:aa:a8:fc:61:ee:38:97:e7:f2:b4:98:21:fd:1b:
54:c5:3a:08:4f:9c:ed:35:9a:ce:dd:9b:af:75:18:0f:2e:d2:
4c:ab:8c:13:5f:55:51:9c:73:46:6e:52:ed:11:a9:de:9f:db:
e0:6a:61:42:02:a7:33:2c:f5:89:f3:4c:a3:04:84:eb:35:00:
17:b6:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:19 2025 by rpki-client