Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File: IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier: NcNFCRxNYBmnecEX2attsYiC4LYYvrh7ggSa172SlDc=
Subject key identifier: 2B:BD:41:E8:D9:D4:F7:F0:64:F0:B3:78:98:10:8B:FA:77:44:BA:5A
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer: /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial: 0198D515D80EA2F573BC146AC32C58B4E344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number: 0CF0
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: MwUMueAst4U8LTnmrCxQpuEsg1kAuQP91RWu1CCmIHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d8:0e:a2:f5:73:bc:14:6a:c3:2c:58:b4:e3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=2bbd41e8d9d4f7f064f0b37898108bfa7744ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:04:32:0c:27:37:12:bd:0e:e6:f5:a2:72:
d9:12:fc:9f:a9:a1:73:8c:44:f2:3b:aa:af:26:3c:
9a:81:90:3a:21:21:5b:8f:c1:c0:c5:d0:85:7a:c8:
0a:2d:4b:51:2f:1d:57:b3:6f:ba:f7:ab:14:3d:5b:
fb:4f:66:29:54:7d:c0:95:97:3a:13:24:7e:90:03:
d9:32:ba:9d:59:ad:79:9d:7a:13:ba:c4:91:24:b4:
bb:23:1c:55:0c:05:97:a6:a1:98:88:28:8e:36:da:
d1:59:30:80:67:ce:e2:b4:3f:57:84:b6:90:c4:ca:
74:d0:ee:07:41:a3:fe:b9:83:00:68:62:0d:0d:47:
81:fe:b5:64:a4:ab:d0:e5:76:91:6f:e2:0b:51:67:
75:59:d6:5a:82:86:82:98:0b:e3:96:0f:9e:1c:d6:
09:96:b0:8c:15:58:1c:0b:45:d7:39:9e:e1:8d:2c:
dc:bd:72:dd:8c:16:f7:ab:8e:e1:6a:76:7d:5d:91:
e2:c4:3c:ef:58:84:77:16:76:6f:3b:ef:2d:0d:4c:
16:40:79:0b:c6:7e:46:3e:5c:f0:ec:08:fe:a8:26:
68:ab:5f:fa:3c:80:55:f9:d9:f0:d9:99:d5:ee:c1:
29:c7:97:44:a0:5e:f3:7f:7e:60:be:5b:9c:c3:bf:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:41:E8:D9:D4:F7:F0:64:F0:B3:78:98:10:8B:FA:77:44:BA:5A
X509v3 Authority Key Identifier:
keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:00:8e:9a:da:de:c9:6f:e9:61:c1:19:cf:67:93:7c:dd:
4b:58:27:47:86:bc:12:e3:5b:ad:1c:2c:76:93:5b:37:b1:e3:
85:76:05:ae:4a:2f:ff:e6:25:c4:a3:18:de:e4:e4:9f:9e:a3:
67:28:1c:79:f6:0a:87:44:33:f7:19:e2:8a:5a:ad:a3:cf:36:
83:00:16:6a:04:8a:45:e1:58:d7:44:78:9d:84:50:cc:3c:de:
52:ff:13:ef:db:eb:7c:d7:b5:f6:aa:90:5d:4a:8d:00:ba:d5:
3a:8f:d2:a8:08:6a:1b:be:66:0a:1f:1b:c7:7a:67:1d:b4:dc:
94:52:b5:01:9f:f0:4a:50:84:c0:3d:65:db:9a:03:8b:2b:19:
7c:2e:c1:59:9f:c7:c5:32:41:b6:0c:ce:ad:1c:8b:0a:7a:25:
75:a9:f5:19:81:9b:0a:81:23:80:15:df:b1:3e:b6:17:49:2d:
a6:cf:4e:d7:f2:26:b2:9a:ac:e7:bb:54:6f:4f:7b:db:e2:c8:
4b:d3:4a:f0:c1:f4:87:1d:89:37:c8:bd:9a:bf:c5:22:72:bb:
c2:7e:e4:e3:41:80:e3:55:2f:29:ff:d1:ae:eb:d3:ff:65:af:
d0:ba:eb:cd:c3:f6:9e:e0:d2:8d:ca:97:35:a1:a5:fe:9a:36:
d4:95:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:27 2025 by rpki-client