Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: 5AesQeOGS7j2WXaF4rxjm5PNuYxdtyTQNMn28M/HAZg=
Subject key identifier: 79:2C:37:4D:05:DD:4F:8D:EF:A0:39:C9:04:DD:8C:33:E5:C1:FE:1D
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 0196B220F320537B0D547B7CA950A4B486EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 23:00:25 +0000
Manifest this update: Thu 08 May 2025 23:00:25 +0000
Manifest next update: Fri 09 May 2025 23:00:25 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: B7JsOYOVEPfghVtXEy4M1vCFNpsyxip22Pav2Gbc5/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:f3:20:53:7b:0d:54:7b:7c:a9:50:a4:b4:86:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: May 8 23:00:25 2025 GMT
Not After : May 9 23:00:25 2025 GMT
Subject: CN=792c374d05dd4f8defa039c904dd8c33e5c1fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:ed:86:1c:d5:b9:32:38:f5:01:d2:72:66:
8b:bc:7a:b5:32:b3:0d:0f:b4:6e:a0:8d:90:36:5a:
38:ad:d4:e7:96:15:99:17:b0:45:59:5c:83:7d:df:
e1:63:e2:34:06:95:c7:eb:d5:71:35:0e:c9:9b:40:
c3:94:c3:bb:a5:67:e1:89:57:d8:64:d8:83:68:02:
fe:1d:d5:f7:64:01:0f:31:5e:f7:a9:4f:96:bc:d9:
d0:56:3c:54:11:5b:0c:c6:4c:1d:4c:11:9c:f7:91:
ef:5b:1f:bc:ec:4e:4d:0d:eb:2a:19:7d:b2:60:aa:
a2:1e:97:70:eb:56:76:20:6d:1d:d5:f8:53:8c:66:
40:9c:9a:3d:19:06:f5:76:54:0e:67:6c:25:57:8a:
03:fd:97:be:a5:31:8c:97:fe:ab:e1:d5:ab:90:98:
0a:77:0f:ca:16:90:bf:39:e3:ad:9c:24:d8:9d:a8:
cb:e0:f4:be:19:2d:32:fa:a2:5e:3c:e5:6f:b1:c4:
99:58:82:ad:23:37:3c:da:5e:19:96:9c:2f:a0:c3:
4e:e5:0d:14:44:e5:05:5d:0e:74:c6:1e:7c:8d:7c:
5c:48:90:2d:7d:64:e7:62:05:ab:a5:bf:9e:d6:0f:
90:d6:8a:4c:5d:db:6f:75:cc:9c:5d:6e:ce:96:b7:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:37:4D:05:DD:4F:8D:EF:A0:39:C9:04:DD:8C:33:E5:C1:FE:1D
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e8:32:50:5a:25:f2:60:5f:dc:41:82:4c:dc:78:69:76:5b:
e8:06:72:d4:68:fc:ad:34:c6:d8:f8:bb:0a:d1:76:d4:a9:96:
26:fd:61:ca:b5:e2:ea:1c:18:63:78:7b:e0:a6:8c:43:b9:aa:
61:a9:de:96:b0:1c:f8:03:81:17:7f:1e:60:6d:80:28:04:da:
db:9c:49:2a:67:79:41:ba:94:3e:95:fa:f1:cf:40:7e:e3:a2:
42:a4:c0:c9:2d:fc:ca:21:40:9f:21:a4:c0:f6:23:92:a3:da:
ff:02:e6:b2:13:82:ed:a5:13:e7:05:78:04:f4:5f:ee:b6:05:
0e:82:ab:b4:2c:97:7f:c3:49:69:7f:40:14:ec:ee:01:69:ef:
fc:2e:a5:bd:f3:8d:91:56:6f:51:ec:97:96:aa:2a:d0:68:e4:
2c:2c:63:ae:c3:69:12:11:a0:c2:88:ff:32:eb:d5:60:31:54:
f3:75:72:55:66:7f:1e:20:07:71:bf:18:45:36:3d:32:f7:df:
ab:4c:66:8e:74:99:b0:6b:63:30:cc:43:b6:3d:51:5b:58:25:
3f:c1:57:85:98:7f:29:7c:49:05:12:9c:1f:ca:70:3c:5a:28:
bd:c0:b5:e6:f7:fb:7a:0d:5b:a7:96:51:d2:a7:fe:04:26:28:
f5:82:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:00:58 2025 by rpki-client