Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: 1gUfA61H4lKjzHcbrz8x7rUbnF2z4Qz+HYVxMFpARig=
Subject key identifier: 5B:A0:19:3B:61:C0:AC:9E:AA:34:DD:3D:2F:10:7E:6B:47:C1:16:BC
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 0197B70E6DAEB61A414A27B9DE42434FBF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 09E0
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: tIrAsw1Htkk99Z/6iwfFoeMHRRvdjsMDPp7Jdv0CJSg=)
2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6d:ae:b6:1a:41:4a:27:b9:de:42:43:4f:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=5ba0193b61c0ac9eaa34dd3d2f107e6b47c116bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:a6:c6:d5:8d:f5:c6:9a:a9:5f:b9:53:bc:
bc:99:bb:23:e6:5c:84:fc:68:b6:27:a1:c6:99:54:
29:65:7e:de:f0:6d:87:76:b9:4d:18:14:62:21:60:
3e:d2:55:9c:db:f4:66:b1:b7:23:b4:94:3f:70:f2:
70:be:3a:7e:98:60:11:9c:7d:9c:f1:b8:f3:8f:62:
91:b2:c4:01:93:9c:b3:15:5f:07:58:7f:8f:cc:43:
3a:17:4f:d5:e0:8e:d3:6f:75:3a:0a:91:2a:92:74:
df:d2:09:50:65:1d:fe:2b:09:83:9f:92:6a:0c:96:
9b:70:1b:75:88:6d:20:73:16:c1:66:07:fd:72:d5:
e8:47:82:42:eb:30:55:0b:fb:bc:d7:fc:94:a0:2f:
4e:e6:d9:90:75:5b:3b:d0:34:68:0e:8e:98:35:c2:
bc:e0:77:67:bb:c8:43:4f:cc:76:c6:2f:b9:de:ef:
3a:9f:77:80:23:da:4b:fa:85:f6:8b:57:73:5b:31:
22:de:42:89:e9:3b:c5:fa:6a:66:05:93:a0:19:e6:
fa:5b:98:16:4d:48:c0:b2:61:18:19:a5:f0:80:01:
6c:08:45:67:7f:fb:50:ac:87:6e:fd:7e:54:a9:45:
81:41:62:6e:ca:bd:29:98:93:20:61:14:69:63:3a:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:19:3B:61:C0:AC:9E:AA:34:DD:3D:2F:10:7E:6B:47:C1:16:BC
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8c:42:b3:b1:21:fa:29:2a:c1:d1:09:ce:54:c2:7a:c5:e6:
71:06:95:2e:f6:71:ef:d4:d9:37:10:be:04:af:06:29:54:78:
8c:cd:4d:19:d2:7b:f6:9c:85:5e:e9:62:83:da:1e:50:37:e2:
26:15:17:18:a4:62:09:25:2f:a7:81:cc:a7:3c:74:ee:7e:a3:
68:bb:27:9a:4b:f6:fc:0a:66:b5:95:23:0c:06:db:58:7f:93:
44:e3:3e:3b:69:68:6a:54:b8:eb:55:52:9d:33:e5:e4:7f:47:
22:db:52:98:c9:88:5f:0d:32:45:1a:5a:11:e3:0d:b3:e6:d2:
1e:3d:6a:d9:b3:9b:3f:46:11:63:bb:90:03:1b:e9:8c:cf:69:
63:c6:35:24:cc:5b:23:42:ab:46:8a:d5:7a:d4:61:3a:9b:93:
7f:87:90:c1:a9:6b:d7:2b:35:28:8e:06:a5:8e:44:69:99:f6:
12:a8:eb:87:7f:9f:c3:73:4f:e7:8e:e6:ba:04:8b:4e:2a:8c:
6c:70:89:30:1c:0c:41:13:fb:ff:2b:4b:65:2a:6e:0b:4a:cd:
4e:b3:7f:b2:aa:8e:a1:3d:34:51:96:4b:30:27:70:44:1f:ec:
2e:14:82:b2:23:f4:1e:07:b9:a4:4a:ed:bd:a6:f3:8a:74:2e:
9d:2e:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:30 2025 by rpki-client