Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: Ony8dcFcKZX9p3vCteXBvH8t075HR4Ap+Rfv2dmgbHs=
Subject key identifier: AD:15:FF:32:EB:56:14:0B:EC:6B:B7:C5:95:AA:4E:6D:CD:17:30:D3
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 0197B6A06DA0F59D86EF03981709546BC552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: j7nuxjiRlC7pHATnejALVKq5JAfy0QVb5uU/yNJxZnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6d:a0:f5:9d:86:ef:03:98:17:09:54:6b:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=ad15ff32eb56140bec6bb7c595aa4e6dcd1730d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:e7:4c:6a:ca:0f:5f:5a:e5:1a:7c:18:0d:
cd:52:04:2a:b6:04:94:34:04:e9:5a:70:c5:de:16:
ab:3a:5e:ff:95:63:a1:ad:8f:28:4c:75:af:4d:40:
1d:88:6a:80:e7:32:e6:36:41:bf:6c:97:c6:b9:fa:
7d:48:d3:98:25:3e:7c:92:1b:cc:dd:4c:6c:50:81:
eb:0b:c6:ed:14:0b:44:39:27:63:49:10:02:c9:dc:
1a:0a:40:19:bc:99:98:2e:25:d9:5b:7d:f1:82:d0:
89:61:b4:73:c5:3e:63:c3:70:95:59:71:a4:3f:c7:
b5:90:54:98:e6:79:30:b3:86:95:ba:ab:23:52:28:
ef:6a:db:fc:7a:19:19:c4:96:46:d5:5a:b8:29:3f:
d8:01:d0:a0:79:c6:26:6d:38:50:31:cf:89:60:da:
5a:ce:ea:76:e5:07:71:5f:6a:fa:c4:c7:cf:d2:ac:
8e:0e:eb:c8:ea:8e:86:55:d4:e8:b9:6f:f9:46:d1:
4f:64:3a:6c:dd:a3:3a:d3:6f:2c:11:af:78:e0:19:
08:b0:d0:6e:50:23:6d:cf:7e:c4:c3:5b:1c:7d:4e:
26:98:bd:96:21:17:f2:07:a5:70:36:4a:d2:35:f9:
71:1b:b7:54:e6:f0:ae:4f:fd:a2:16:9a:fe:aa:ce:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:15:FF:32:EB:56:14:0B:EC:6B:B7:C5:95:AA:4E:6D:CD:17:30:D3
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:45:8b:47:6a:77:45:b2:da:c6:e2:55:82:ee:b8:6c:95:
f3:15:d8:9d:fc:1c:87:3c:af:5c:6b:7f:e8:9f:b6:8a:d1:23:
39:75:7b:3d:f0:a9:e0:5a:6f:cb:f7:d6:56:cd:a5:3c:d7:00:
32:b0:18:78:cd:a0:74:55:c6:e0:93:a0:95:32:46:45:36:b1:
26:c8:2c:94:ee:4e:03:14:03:95:7d:6e:f3:04:2f:14:aa:ec:
51:a5:34:8c:d0:5e:ad:24:a2:a1:ce:38:e2:55:40:2d:a4:40:
2c:45:e7:b6:49:62:b4:cf:b2:66:b3:9c:92:40:97:34:f4:ea:
6e:c7:57:35:2a:82:3f:2e:c2:2a:a1:60:9f:7a:67:6c:e4:1d:
02:45:28:38:46:8b:0d:0b:c7:4d:3f:ab:d7:00:20:bc:c5:d2:
19:57:df:c7:76:7f:14:40:8e:b6:da:c4:97:36:06:d0:42:fd:
b7:77:ba:d4:a5:58:80:15:bb:c3:bf:f5:e3:03:d9:39:7f:db:
34:22:2b:4a:a5:c1:d5:ce:62:47:a5:11:90:87:95:13:ac:58:
d3:23:44:39:33:d1:8e:ad:aa:bc:45:39:97:17:13:fe:5e:5e:
ad:50:55:80:2b:63:4e:23:6e:1f:c6:d5:f9:c1:c6:3c:e2:5c:
9f:89:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:57 2025 by rpki-client