Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: v30pCSG/knE0p2SLzJEbSLFrx5WVmRCuXua8sZiKDtI=
Subject key identifier: B2:83:4E:BF:B4:70:48:7A:FA:E1:8B:BE:60:FB:D0:64:21:32:5E:BE
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 0197B6D7393D311A3818C34B1803DA59544A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: vg24ffyk911rySuLob1pSYuif5KOiEV0JUHoEyiO9II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:39:3d:31:1a:38:18:c3:4b:18:03:da:59:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=b2834ebfb470487afae18bbe60fbd06421325ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:af:5f:54:b4:b1:e2:3d:37:cb:01:91:35:
97:26:23:d6:d9:bb:1b:68:66:60:d6:e8:50:84:4b:
9b:73:92:62:a0:71:77:91:6a:7c:00:77:2d:00:e1:
1f:61:2a:c6:4d:6f:19:bc:20:52:ec:db:be:c6:e1:
e5:df:ba:b6:05:34:2d:15:df:7d:1c:7e:fd:f0:72:
91:27:fa:d1:2e:6c:56:da:79:3f:63:d0:52:d0:84:
8c:3d:c2:d1:d3:b1:0b:aa:5f:f7:7e:a5:95:ba:c5:
d3:f8:1b:a4:4d:c8:b7:03:d9:4b:2e:f9:af:01:8f:
f1:6c:66:94:f8:8d:07:de:07:9b:f4:a8:a8:0d:e6:
00:a5:10:cd:3c:d0:70:19:b9:f0:1c:6e:ff:bf:bd:
d4:e7:19:83:c9:c0:c8:bb:31:77:1e:23:d5:a5:57:
ff:61:09:3a:27:02:74:95:18:3e:f8:38:d1:14:80:
dc:47:06:94:87:b0:59:40:9d:e4:41:d6:af:b7:dd:
5f:75:f9:93:94:c0:f2:89:5e:21:f9:6f:77:de:99:
b1:b9:6c:da:ac:d1:38:73:41:94:03:43:14:1b:10:
a0:87:c9:49:85:43:84:20:69:22:15:73:f7:1c:b5:
c5:4c:0d:d5:a3:7e:88:a3:2b:71:a9:26:32:94:cf:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:4E:BF:B4:70:48:7A:FA:E1:8B:BE:60:FB:D0:64:21:32:5E:BE
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:07:db:97:9b:02:50:56:2e:01:34:bf:9a:7d:26:3f:d7:
3f:2b:5c:17:a9:e7:df:f4:d9:b9:0f:9f:84:ab:ac:52:68:88:
28:20:7f:39:30:e4:e0:8e:6c:03:41:18:bd:aa:29:6f:d0:eb:
9b:49:b7:fb:fd:b9:66:a4:3e:e1:ce:f0:6f:a3:a4:f8:bc:94:
13:bd:38:ee:e8:30:44:5b:c8:78:d6:95:78:aa:7c:d4:e6:50:
17:12:ad:6f:fa:9d:63:7c:4e:aa:9e:f8:53:73:ce:b1:22:a0:
83:05:0c:9b:64:f6:ab:4c:29:53:e0:b4:35:d0:2a:c0:6a:87:
86:da:e2:88:f1:48:fc:68:bb:ba:52:94:f9:88:b9:83:61:67:
8d:99:8b:a8:f5:b8:c5:e3:fc:a1:68:c5:21:12:26:c2:23:50:
42:5b:bf:c7:26:5e:02:8a:87:ab:d3:6e:e7:77:ea:e1:4c:df:
98:fd:c4:2f:ae:ea:51:1b:4e:1c:b9:6b:cb:de:a2:b4:b9:6c:
1d:5d:d4:aa:bb:aa:e0:15:84:53:24:a9:87:d1:7c:25:7a:8b:
90:c9:8e:00:06:ff:80:b5:ab:cc:b6:e3:15:b2:d9:6d:5b:aa:
8e:05:c1:13:29:f1:bf:e6:6f:6a:fb:3c:b6:22:1f:c9:d7:95:
e3:06:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:33 2025 by rpki-client