Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: 0XV6ngvqgennldQbl0OVrJFDn9wwsVWHw9XZtQOOhTI=
Subject key identifier: F4:23:4A:EA:89:65:DE:EE:D8:48:30:30:BC:16:64:51:B1:8B:2D:81
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 0197B70ECBF648EF8374760511853E455788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 0551
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: M/+jqAUgLuttffyohPPr0kBVA96b5h2qFhwgndyH3S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cb:f6:48:ef:83:74:76:05:11:85:3e:45:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=f4234aea8965deeed8483030bc166451b18b2d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:b0:2c:f9:c1:ab:2d:bb:88:1d:bd:40:b1:
80:94:d0:49:64:35:98:99:fa:02:93:39:f1:c8:6a:
4b:01:51:f9:0f:58:d1:d1:be:71:d9:0c:8a:b7:02:
66:c2:fa:d1:11:95:bf:10:ce:dd:43:f2:6b:d7:c2:
86:d8:40:18:3f:96:e2:19:28:ef:f3:e3:a0:8c:c0:
ce:1e:57:88:44:ee:7d:e5:c9:da:d2:cf:c9:5c:c4:
ae:0d:24:e1:ca:f2:d3:15:c2:d9:8f:2f:3c:11:59:
ab:61:c2:64:87:92:0e:f9:f8:19:20:e3:f3:a4:0a:
61:d8:1e:8a:ed:d7:59:92:2d:b5:47:ab:b1:04:12:
b8:98:81:d0:21:df:99:aa:c4:fc:e9:01:dc:2d:7b:
e7:db:a3:d0:fa:95:b5:0c:21:87:0a:2d:9e:4a:d2:
37:e9:3d:74:a6:b7:a3:04:1d:d3:01:da:8c:22:fa:
f9:73:63:58:36:bd:62:55:e8:63:bf:9a:8c:9d:5a:
e3:30:c4:1c:f4:54:38:5e:ac:df:70:7e:5b:c6:21:
74:85:f5:7d:71:9e:6f:d3:07:c7:87:9e:09:a4:8f:
7b:af:aa:38:b6:25:43:f4:b2:bf:66:a2:20:24:58:
88:f6:1f:51:84:2e:54:e3:92:2c:70:60:e6:e1:ef:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:23:4A:EA:89:65:DE:EE:D8:48:30:30:BC:16:64:51:B1:8B:2D:81
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:e3:41:c7:4f:e7:00:58:c6:a6:48:16:89:6a:13:0d:27:
e5:d4:a2:2a:b5:4c:db:8b:9c:d0:0b:0d:aa:ca:bd:d8:7e:36:
bc:0f:33:07:f0:b7:46:2c:03:47:7f:f5:18:97:65:59:b1:e6:
d1:47:10:2b:7c:a5:83:82:21:5f:01:dd:6f:32:25:e1:d3:9c:
e9:f7:51:85:db:c5:3a:32:ef:df:7d:0a:db:da:36:45:6d:b8:
5b:ef:75:e6:66:98:d8:e3:ba:a6:05:e2:3f:b9:dc:73:0c:af:
8e:ba:bc:b3:2e:7c:55:2d:40:87:e0:a6:9b:38:97:82:81:84:
4c:44:4c:00:5f:11:9f:64:7f:09:48:bc:fd:62:21:60:96:99:
31:93:0a:cd:b9:bd:84:03:f8:e6:e8:80:ab:d2:25:a1:a4:75:
6f:01:00:42:05:18:19:ba:5d:0b:5c:b8:92:54:3e:15:61:08:
19:8e:50:8b:b9:74:8b:5d:f1:94:59:0f:1c:5a:75:88:99:fa:
2b:5f:6a:51:74:ad:4e:ed:8d:54:37:96:76:3b:f7:17:fe:41:
a6:95:ad:93:33:56:20:3e:fa:ee:dc:99:91:31:95:91:be:74:
09:0d:ed:ba:e2:bb:1b:68:9c:ef:43:f7:30:a8:c7:ca:d9:ac:
80:0d:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:09 2025 by rpki-client