Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: qgpzGzy4YImblyzeKzpAVJKDhpg8nMa2NwwJmI3/P8s=
Subject key identifier: DB:8C:A1:E5:1E:35:73:F8:47:4F:81:F2:5F:60:92:AC:13:97:61:1B
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 0197B6A0B8CBBF67989BBE18A94387409C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 1132
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: 8ycRtm3O8OD3RBobtdN3h04MVNmsFuecgYO7KBgX/CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b8:cb:bf:67:98:9b:be:18:a9:43:87:40:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=db8ca1e51e3573f8474f81f25f6092ac1397611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:f3:56:cb:2c:a8:80:94:b2:a2:5e:fd:f1:
47:ac:88:01:e8:a6:bc:7a:9e:08:b8:a3:35:e8:87:
8c:58:3f:2a:67:e1:bb:76:bd:c4:39:64:e3:26:73:
38:74:bb:0e:96:5b:f6:43:dd:62:f1:cb:f4:3d:a3:
0f:d9:d0:43:ee:9c:f7:3f:ba:8c:7b:d3:f1:f8:40:
f8:32:d2:ca:02:84:2d:b6:40:5c:7f:81:49:b1:6d:
c1:d5:bf:32:3a:4d:39:2b:be:7e:03:fa:aa:29:6d:
50:7e:c6:d5:5b:cd:87:36:63:b0:cd:54:50:2c:a6:
7a:c7:4c:f4:90:68:95:72:05:d4:d2:7e:8d:ff:82:
13:de:01:f0:de:0b:6c:d5:36:10:bc:d9:f4:59:6a:
9a:4c:39:ae:32:83:68:de:60:49:67:df:60:90:36:
62:c1:1a:ec:61:bc:5b:13:4b:7d:4d:b8:8e:d4:b0:
d1:27:c3:b9:89:1d:89:38:e0:9e:f0:1d:00:76:82:
72:e7:44:0e:7b:9e:0d:80:4d:b8:7f:62:ac:2a:bf:
49:4e:06:4e:00:db:a9:a7:02:de:b0:ea:2f:09:60:
50:7e:2d:3a:b6:28:18:37:d4:f0:dc:9f:89:24:ed:
64:a5:07:8d:53:69:e2:03:ae:91:4a:d6:63:ae:02:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:A1:E5:1E:35:73:F8:47:4F:81:F2:5F:60:92:AC:13:97:61:1B
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:9d:3a:00:34:6a:82:87:8e:d2:73:27:6a:fe:c5:59:6f:
59:1d:6c:65:b5:f9:16:42:1e:f7:a9:9b:3f:db:a0:db:be:dc:
bd:24:ca:d8:76:a9:d0:b9:66:30:55:72:c7:f3:2e:23:cb:80:
51:9d:f8:78:00:70:e1:17:6d:c0:20:e4:9f:11:4c:03:5a:84:
29:fa:36:68:c3:2d:cb:c6:b9:5c:1d:58:e4:ef:83:ad:0f:1d:
37:10:00:14:50:6f:c4:69:7d:d0:22:59:c2:ab:dd:17:0f:46:
51:f2:ac:b4:75:3a:b9:ca:a1:36:45:22:23:f8:47:e5:6f:b4:
1d:a3:f6:3f:2b:e7:bf:e3:2a:9e:70:b7:5d:a9:c5:f6:b1:18:
93:40:57:0e:fc:c9:0f:e9:0c:88:e5:18:71:2d:23:42:e6:ae:
f1:e1:d4:9b:d4:70:50:bb:12:dc:06:20:43:65:20:d1:a7:81:
e2:d0:eb:98:e5:9b:cc:24:76:cb:71:18:05:3f:b0:d7:6b:1b:
73:e7:9a:7f:58:14:79:91:63:9e:cd:43:0c:64:2b:b0:77:7f:
6b:79:70:54:ae:37:ad:fc:1e:8c:72:8c:70:fb:58:a0:65:6c:
cb:88:d7:62:4e:d3:21:fe:2d:ce:60:de:6d:e0:64:81:58:d6:
f0:00:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:04 2025 by rpki-client