Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: czZ2ON5gf13q/61IU1knKtY8v4xI32t6QPtuqK7/I/Q=
Subject key identifier: 18:36:4B:4E:12:D9:7D:66:27:54:A1:37:3C:2C:21:A4:E7:95:FB:53
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 0197B77C75DA91D05CB03AB06B51A72D66DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 14A6
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: 7ydWL+zPdZgiCdPA/4BDxcGQs2m7O2dZaMrMu93fc24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:75:da:91:d0:5c:b0:3a:b0:6b:51:a7:2d:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=18364b4e12d97d662754a1373c2c21a4e795fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:20:35:af:66:b9:ac:68:5a:46:2f:0d:0a:a8:
0f:1f:fb:b5:61:a6:51:4e:63:7c:34:31:46:48:97:
5e:f7:06:6f:2a:00:37:7a:df:e7:6b:ed:0e:bb:d4:
dc:27:9a:ec:76:91:dc:6a:6e:ce:8a:79:c5:80:ce:
bb:9f:23:24:37:72:87:92:85:65:4c:31:a3:14:87:
c9:03:7e:52:d0:af:a2:72:41:80:b1:4a:b8:6d:16:
55:e1:c3:fd:30:c3:d5:12:18:ba:6d:54:73:4b:9f:
3c:a8:ad:9a:66:11:cc:e7:a6:99:eb:fc:51:82:57:
85:8d:2f:c2:dd:78:46:4f:b2:ce:b1:8d:69:ed:92:
03:a5:24:00:11:91:82:28:ff:c7:59:14:9a:56:79:
17:1b:f8:3f:39:7f:f2:b8:a3:81:b8:c7:a4:c2:6d:
2c:12:e0:c9:b5:fe:61:7a:1e:4a:e0:90:a4:c5:23:
97:0d:ae:b1:1b:73:1e:18:ae:d7:33:e0:af:f6:0d:
45:89:c4:6c:6e:75:74:e9:cf:05:19:26:df:af:0d:
28:35:a9:4f:6b:df:d2:81:3d:9e:f6:05:76:ea:46:
7c:31:89:e8:b8:ea:68:57:7e:ba:d4:e2:7a:9b:d2:
b4:3f:6a:f3:ea:a3:6f:69:8a:36:91:51:04:fd:8d:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:36:4B:4E:12:D9:7D:66:27:54:A1:37:3C:2C:21:A4:E7:95:FB:53
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4d:1a:2d:55:78:44:30:56:7d:cc:38:5a:a3:62:92:38:95:
9f:bb:bc:ac:8e:f6:af:42:1c:f2:86:d7:88:ef:df:68:8c:d6:
09:c2:b9:9e:3e:ac:ea:5a:c6:b4:8e:e0:77:99:98:fd:07:1f:
07:0a:de:6d:88:9f:fe:a0:30:74:ba:c9:fb:c2:5b:64:81:2c:
a8:ce:a5:f3:fa:1b:5c:6c:2d:82:3b:4b:a1:d2:6e:9a:30:4d:
c3:c5:47:45:38:28:1f:46:85:a9:f2:9d:42:a6:8f:e8:1d:1e:
dc:81:3d:cf:d6:33:cf:2f:61:9f:1f:20:b9:88:46:1c:73:cb:
e4:8a:0d:25:60:24:63:64:0e:2f:dd:ca:20:41:2c:2b:f1:57:
02:18:11:28:8f:ab:1c:06:96:1e:87:3b:1b:27:3b:47:86:46:
9a:f6:03:a1:89:ee:ca:6d:39:b7:39:b4:62:d3:26:28:ec:09:
42:f9:21:32:a2:89:53:7a:72:46:c1:e5:cc:a5:fe:e1:53:66:
72:22:51:f2:55:55:40:6a:b2:8f:95:48:1d:c7:13:20:bc:d6:
6f:92:0e:c5:50:3e:a8:9a:8e:26:c6:ac:c4:6f:a5:e3:e2:71:
80:bf:c2:a6:f1:04:10:21:8f:45:50:43:d7:aa:ad:cf:93:6c:
a1:7c:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:00 2025 by rpki-client