Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: z6A1u1UlMKcK6Uz9kKizhV2UrkPhV4Vf2PzIRI1IEbk=
Subject key identifier: E4:34:C4:4E:BB:AA:16:50:2D:73:7D:8B:51:22:85:98:BA:53:51:24
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 01984B54428236B21F17C6EE46A0CF502CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:01:09 +0000
Manifest this update: Sun 27 Jul 2025 10:01:09 +0000
Manifest next update: Mon 28 Jul 2025 10:01:09 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: K98ZTesLd73DRK0bg+FIF87SRnkTXEogz/YNBHATddQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:42:82:36:b2:1f:17:c6:ee:46:a0:cf:50:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Jul 27 10:01:09 2025 GMT
Not After : Jul 28 10:01:09 2025 GMT
Subject: CN=e434c44ebbaa16502d737d8b51228598ba535124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:6d:34:0b:a3:50:f4:d6:ed:ad:60:8c:ee:
ab:b2:54:59:d0:09:51:f2:da:6f:70:d7:08:79:30:
5e:7b:36:e5:d2:a8:ca:2d:c2:9a:c5:4d:13:10:60:
7d:dc:d3:51:34:a6:0d:96:75:47:c8:d0:07:fa:b7:
5b:10:4e:ad:0a:cd:90:91:50:bd:67:83:de:38:80:
6b:44:25:fa:c4:f5:fa:36:9e:3c:c0:77:b7:72:81:
6e:32:01:56:6a:10:d3:49:06:96:81:19:06:29:0b:
a5:46:09:00:bb:4d:0a:08:44:66:d1:8a:f0:3a:08:
f8:51:67:7d:5d:b7:7c:99:b9:09:5e:cd:5d:0e:17:
25:57:ff:e6:4f:37:79:88:4a:9e:a1:0a:7d:2a:5a:
c6:8d:44:2d:9e:66:b5:70:89:47:f5:0e:00:05:48:
f5:19:77:78:40:ec:cb:11:ca:fa:50:6f:87:1b:74:
70:cd:30:5d:dc:9a:82:f1:41:09:f3:c8:bf:b1:57:
36:0f:b1:f0:a8:1b:5b:70:8b:73:2e:11:bf:f7:52:
71:d4:53:9e:8e:5b:80:8c:7b:c8:cd:03:9c:a8:ba:
35:8f:df:44:4c:8d:5c:37:cf:70:fb:c0:a3:fa:b2:
c3:2b:2d:11:00:42:88:e0:c3:96:95:dc:5c:f1:1b:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:C4:4E:BB:AA:16:50:2D:73:7D:8B:51:22:85:98:BA:53:51:24
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:16:11:85:ea:6c:01:54:06:45:2e:e7:4d:44:6c:f5:59:95:
6a:c9:60:74:7e:a2:4d:a7:c7:6f:ff:d9:ae:ba:12:08:a0:ec:
20:d6:45:65:8d:e9:ad:5d:55:9d:33:3c:fa:47:e3:60:16:a2:
a8:54:14:61:4a:8b:03:6f:1c:3c:ab:c5:17:98:54:15:28:51:
1f:b8:29:37:09:a1:37:e6:a4:e4:34:a9:0b:6a:3c:92:56:dc:
6a:91:88:13:c8:41:59:8e:ef:3a:75:0b:f6:ee:7a:9d:02:96:
31:9e:63:75:b6:eb:f0:06:bc:24:10:29:b3:d0:ad:83:ec:ce:
56:ab:fd:35:65:86:85:12:6e:ba:85:3e:b4:ca:0d:50:2a:33:
7d:55:b8:fe:e8:82:1e:de:e9:c5:b0:e5:28:8d:d1:f4:8d:a3:
2a:0b:13:79:48:ff:37:f0:63:23:fa:b1:cf:93:ae:26:50:57:
8e:b8:69:08:0f:d2:06:ee:d8:c5:29:44:f1:91:9d:d7:ea:8b:
ed:82:69:94:6c:df:a3:05:8b:f0:0d:4b:82:21:0b:e5:e7:fd:
d1:d4:0b:3a:1b:7f:10:97:2a:e0:13:2b:02:55:c0:22:82:09:
81:52:e7:e5:c5:04:53:50:2c:5d:d6:1c:6c:31:15:09:7e:74:
ca:03:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:55 2025 by rpki-client