Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier: 3WXHVkQAHZDIW7qYAw71bS2CKlgKnnVivEkPevgZZPE=
Subject key identifier: 66:7D:78:42:DA:EA:60:7B:C2:BE:16:40:5B:49:A0:18:21:DB:EF:17
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial: 0197B6A130CFD97CA01036FBCBEB2C741B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number: 1002
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: OF0ZwfgLfov+xtgzwpe8oX8rtacGyu11DB8rzZ9tCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:30:cf:d9:7c:a0:10:36:fb:cb:eb:2c:74:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=667d7842daea607bc2be16405b49a01821dbef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:e4:6f:14:07:8f:02:8b:85:e6:21:35:df:
ab:45:d4:8a:2c:db:3d:8b:4c:a9:58:0d:01:cd:a5:
d6:a2:8e:9f:b2:7f:b2:26:10:1f:25:b4:80:b6:e6:
a2:0e:3a:72:99:73:91:04:ae:0f:65:33:d5:c8:7a:
9c:41:71:0e:2e:1d:7e:4b:09:7a:cc:41:82:c8:6f:
6a:2f:78:46:6c:53:1f:eb:9e:1e:ab:79:1b:aa:cf:
4c:b5:40:0b:ae:d5:aa:be:db:58:d4:3e:98:46:c1:
53:5c:29:a8:24:3f:c0:79:15:10:73:23:ad:85:31:
8e:c9:05:bb:20:cb:7d:66:8c:33:81:17:7a:67:a4:
7c:ec:5a:ff:d8:2a:4d:5e:a9:ea:2b:89:11:f7:0f:
ae:a7:63:e2:9a:1f:e3:30:cc:13:6b:8e:dc:92:14:
16:1a:8c:5b:b5:37:dd:8c:64:6e:ea:3a:46:f0:94:
3e:e3:b1:95:d1:3a:65:b6:7a:b7:99:e1:e5:b4:7c:
dc:b9:db:17:4e:63:56:47:3c:f8:7c:0f:4f:dd:20:
51:51:59:b4:8a:4b:12:7b:3c:1f:c8:b2:59:b3:f5:
6f:e5:b2:03:70:03:f7:6f:3f:91:d8:3f:8f:63:3d:
d8:5e:30:42:fc:3b:19:70:e2:b9:8e:e7:1e:9b:bb:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:78:42:DA:EA:60:7B:C2:BE:16:40:5B:49:A0:18:21:DB:EF:17
X509v3 Authority Key Identifier:
keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:c6:85:69:e4:3e:33:14:9b:95:38:02:9b:3a:b2:61:1c:
d9:cb:f6:89:e2:b5:d4:01:f3:d5:4b:27:61:5e:16:f3:f2:e0:
03:f2:4b:92:aa:d6:1e:0e:83:c6:cb:03:b2:f9:36:c7:cc:8d:
59:e7:95:e3:eb:b1:cf:7b:24:e7:46:98:c5:49:4b:7e:7f:4d:
cb:e3:6b:b2:8f:8e:a4:e4:5a:4c:c9:f3:67:c6:a0:68:d7:82:
b8:a6:a5:a2:4a:68:3a:f1:fa:d4:cb:49:55:f1:fe:53:df:ec:
1d:28:d8:53:a8:e2:81:83:72:a7:36:81:8e:3c:e0:26:e6:b3:
74:19:13:34:ec:9e:d4:9b:3c:62:f3:a2:b7:80:a9:de:0c:92:
0c:33:ea:23:e9:ad:27:94:5d:86:47:a9:09:a4:bd:a9:07:bb:
6c:87:49:89:af:5b:60:c1:81:62:90:46:9a:e6:4c:f9:9d:21:
e9:c8:72:b8:dd:84:aa:6b:7f:26:15:cf:c1:7f:37:27:1e:3c:
f3:e8:db:e1:7b:14:47:a8:b1:8f:70:f2:aa:cf:cc:db:ce:46:
eb:7f:36:48:a8:58:54:9c:86:25:6a:af:5f:a2:38:b2:33:4c:
e1:9f:5d:e8:14:2d:7b:2d:c0:15:ba:c6:f3:1f:4a:f8:a0:4b:
f5:6a:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:56 2025 by rpki-client