Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: NKyr1C/8pZSpSz9TQ6iOo7Bb6iUC4Fh94Qa6u+A+hvs=
Subject key identifier: 73:1F:EA:06:DC:77:4B:BB:D8:37:67:BF:A9:A7:7C:CB:27:FC:EA:91
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 019847ADE2B635EE7F1A20881C2160A00F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 17:00:34 +0000
Manifest this update: Sat 26 Jul 2025 17:00:34 +0000
Manifest next update: Sun 27 Jul 2025 17:00:34 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: TRaYvjlcWLHshudLCOg8e6vpVLGr1Vx3gpdUeUG8ZVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e2:b6:35:ee:7f:1a:20:88:1c:21:60:a0:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Jul 26 17:00:34 2025 GMT
Not After : Jul 27 17:00:34 2025 GMT
Subject: CN=731fea06dc774bbbd83767bfa9a77ccb27fcea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:1e:23:18:87:bc:2c:23:94:14:45:01:82:
f9:b4:67:21:07:d8:35:87:a4:3d:7e:5b:bc:e7:18:
04:a5:62:ae:1f:eb:23:e7:a7:97:17:01:6d:e9:52:
ac:61:2b:18:12:e9:68:d7:92:25:56:a3:cc:0a:f1:
a4:e6:46:74:4a:fb:ac:32:2f:39:59:30:42:4e:7c:
e3:01:4f:d1:77:84:33:5d:45:59:8c:43:b7:e6:40:
7e:e0:31:e0:47:5c:8a:14:8c:0b:5e:31:a0:db:53:
87:1b:f6:f5:b3:7f:ec:3e:35:88:21:55:10:cf:1f:
1a:53:d9:be:17:92:0c:94:61:0b:c0:11:5f:4d:4f:
e1:38:23:b4:94:05:87:70:ba:3a:28:15:b2:0d:aa:
08:64:db:3e:11:32:60:f9:d1:7f:07:ed:ee:60:2b:
eb:8a:53:17:88:17:08:ea:85:f4:ae:32:1b:b2:b6:
1e:6e:eb:a2:5c:a2:61:1a:bb:e6:a5:2a:5f:58:ff:
b5:2b:42:3f:5c:2c:8c:ed:16:24:19:7f:eb:3d:98:
f5:c8:5f:c9:44:30:34:7f:67:0c:26:79:58:bf:81:
e7:45:3b:6a:f7:ac:19:c4:f3:27:16:0e:2c:b3:61:
43:ec:70:0f:44:86:79:69:cc:d5:67:f9:0b:8c:b3:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:EA:06:DC:77:4B:BB:D8:37:67:BF:A9:A7:7C:CB:27:FC:EA:91
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:54:32:f6:a5:fd:82:c5:79:42:08:97:73:1d:d3:a6:12:
d0:3d:f2:7b:a1:c6:bb:0b:de:5c:db:6d:a3:91:57:07:e2:87:
eb:32:48:2d:88:93:13:c4:d8:16:6d:77:30:bf:8c:56:ea:93:
af:8a:47:cf:e6:d3:c4:56:1e:cc:b5:db:ed:01:b8:a1:ab:bb:
4b:c6:f7:7a:37:6f:39:79:ef:f7:33:1e:76:68:48:87:79:68:
5c:44:66:e8:4b:50:9a:3c:96:ee:5f:a1:74:20:b3:5b:9e:a1:
23:55:51:cf:7c:9d:e9:ac:74:9e:d3:6c:20:41:69:84:8d:28:
2b:8f:40:81:51:ee:56:e9:d7:e3:e0:d3:28:13:35:e8:3f:86:
7f:76:c5:a6:1a:67:f3:50:ea:cc:5b:46:2a:2e:65:65:89:4e:
c3:bb:21:ce:49:1c:56:7e:eb:cc:3b:96:87:d6:56:fd:63:6f:
f8:67:fc:60:43:e3:2b:06:d0:fd:48:eb:0b:28:4b:5a:3f:02:
03:dd:c7:5c:de:88:31:e3:c0:c0:22:46:25:5c:bb:aa:65:f2:
26:74:fd:5c:c9:06:a4:a7:28:c8:6c:b0:78:72:ae:1f:0e:44:
c5:ab:21:2e:aa:92:66:1b:76:c0:bd:02:ea:91:8e:19:7e:bf:
bd:bf:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:49 2025 by rpki-client