Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: lKU0tOJ/lrcyxSvfczcsakwjNgY1bzOrY5UOZdp+BGg=
Subject key identifier: 1C:E9:40:AC:A8:25:69:62:7B:05:56:CB:44:6C:35:2E:E5:9B:89:4D
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 0198D660689BA39985EA665B2F69D64B98E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: uFnZ76KdCIrttAkc8VDzR3vk3fFlTBJMLmnV0L7//W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:68:9b:a3:99:85:ea:66:5b:2f:69:d6:4b:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=1ce940aca82569627b0556cb446c352ee59b894d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:17:d4:7e:87:fd:8a:fb:eb:e4:7f:91:c2:
1a:e4:38:1a:ba:c4:85:cd:1a:58:02:81:39:10:d6:
90:72:4a:52:f0:5f:ef:98:b3:bf:13:07:ea:4c:0a:
07:0a:45:f2:31:de:21:8a:66:b4:6a:f1:c8:c5:df:
c1:c0:46:b4:ad:87:40:bc:ac:c1:e8:10:c8:86:86:
5f:02:b6:52:bf:f9:80:ae:b6:8a:80:c0:bc:72:6a:
19:f2:f4:4b:9e:e4:cd:de:b9:7a:c2:d7:d1:89:45:
7c:c2:b8:8e:33:b2:fb:de:bc:01:46:85:8b:c4:19:
c8:3d:0f:b6:02:76:2a:55:bb:1f:e3:66:ed:aa:b3:
ef:5d:0f:37:88:bb:8b:3b:cb:86:cf:a4:1b:01:63:
61:c7:b9:65:aa:ff:94:fd:96:99:f2:37:d9:10:2a:
df:71:e6:62:a8:09:25:2e:41:41:97:d4:e2:cf:0c:
af:b5:c4:92:19:c3:cc:05:27:6b:13:f5:6d:b5:b5:
b9:ef:79:08:13:f2:9e:0f:c3:49:b9:9d:eb:e6:f3:
44:e8:b4:89:41:25:8c:fc:a3:2e:b5:c5:0c:17:1f:
c8:bb:3a:9a:2e:9b:fc:78:d4:3b:d1:08:70:79:93:
d1:b1:55:22:4b:73:f0:90:7f:1b:94:29:40:ac:32:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:40:AC:A8:25:69:62:7B:05:56:CB:44:6C:35:2E:E5:9B:89:4D
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:d7:9d:da:71:93:ec:40:f9:67:82:37:17:6c:a1:5e:12:
51:f5:e2:65:6e:21:f8:61:0c:bf:86:8d:7b:ee:a4:06:81:6b:
ec:00:9c:e3:4a:e5:fc:89:d5:2c:0a:e0:db:36:2f:10:ee:fc:
c5:4a:4f:6b:1f:0f:7b:c7:17:e4:9b:da:f5:ca:4b:2a:62:5d:
70:9e:25:4e:df:7a:1e:96:d8:d7:23:28:f6:4b:1d:0a:46:99:
07:87:82:f3:38:a4:23:4d:26:bc:a0:53:e0:d3:1c:c4:9a:52:
61:f5:d8:54:42:2e:62:3a:56:3f:fb:04:b3:2b:5d:2e:53:51:
e7:35:fb:e8:44:ac:7a:ef:2a:e8:49:5e:e5:d1:4c:18:97:dc:
03:77:d8:97:6b:2d:99:ee:7f:78:b8:fb:10:af:c9:cf:4d:fb:
7b:57:2a:d8:72:54:50:a2:c9:29:72:5b:57:9f:f0:75:f1:13:
c7:98:e7:fa:67:aa:dc:e9:cf:1f:36:a7:49:1a:83:fe:e4:ee:
35:64:ef:4c:70:bc:ad:d6:85:9c:78:79:1e:93:ad:84:b7:29:
01:03:fd:b1:d6:7e:11:80:f5:52:d8:05:f1:7e:10:72:5f:1d:
c2:a9:5e:47:b2:67:8b:3c:e7:3d:26:51:36:ad:b7:a4:49:89:
ad:00:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:52 2025 by rpki-client