Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File: ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier: XZfACEXSprFpk+sBn/J4oje7OLPzpHtuF29HML90Hig=
Subject key identifier: 3A:0B:1F:B4:28:01:DB:54:CC:34:DF:94:33:CD:BC:B5:F1:33:82:4E
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer: /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial: 0197488C955EBB13E7EFBEBD4297B59B77CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number: 0D12
Signing time: Sat 07 Jun 2025 04:01:02 +0000
Manifest this update: Sat 07 Jun 2025 04:01:02 +0000
Manifest next update: Sun 08 Jun 2025 04:01:02 +0000
Files and hashes: 1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: PScCFtsYAMJ0ue2jGhd8hSg+v9Ib7j9UmwYt8zOAjNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:95:5e:bb:13:e7:ef:be:bd:42:97:b5:9b:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
Validity
Not Before: Jun 7 04:01:02 2025 GMT
Not After : Jun 8 04:01:02 2025 GMT
Subject: CN=3a0b1fb42801db54cc34df9433cdbcb5f133824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:f4:bf:39:5f:9a:f2:97:df:cc:3f:7a:46:
0b:bf:c1:92:0b:3f:df:85:8c:77:43:71:7c:d5:14:
87:6c:6b:b8:fc:c7:1e:fc:3c:4c:6f:0c:ed:73:35:
22:e8:98:11:a7:a4:4d:b8:51:d9:14:52:55:49:40:
90:10:1c:30:67:22:bd:fc:0a:4a:85:9e:dc:99:53:
be:1f:2b:95:2d:79:56:ae:25:1f:22:e2:1c:ca:e1:
00:e1:a9:e2:fe:2f:4f:e5:be:4a:23:ce:11:37:b3:
ea:7c:40:03:04:77:37:9a:e3:bd:02:e7:8b:a5:c7:
35:07:2f:78:df:a0:ee:c5:18:c6:c3:11:5b:54:cd:
a5:a5:76:46:f7:56:dd:9f:a7:f3:6f:d5:44:4b:f1:
bb:0c:a7:d5:20:96:32:f2:ab:f1:49:89:5e:d0:0a:
34:80:a6:99:16:e0:cf:0c:f9:5f:1c:f7:8c:cd:1c:
35:60:0a:b4:e4:6d:38:cc:65:8e:eb:29:b0:52:e5:
b5:e8:03:88:d6:ab:1a:f2:e8:66:59:27:fb:f3:23:
7f:37:b8:4a:2c:43:54:ca:20:b8:55:04:81:d4:ee:
e2:36:fe:9c:6c:e3:87:08:8c:48:c0:18:7b:5e:5e:
95:bd:26:cc:a3:71:f8:1a:b5:62:b7:da:ce:40:85:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:1F:B4:28:01:DB:54:CC:34:DF:94:33:CD:BC:B5:F1:33:82:4E
X509v3 Authority Key Identifier:
keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:cc:5b:1a:55:29:55:7a:2a:bb:e7:0d:6a:48:6f:71:b6:
04:3e:93:df:fd:58:a9:6e:86:ee:8d:0f:27:25:a2:34:6e:5a:
39:31:b0:d8:99:b8:65:37:5e:ca:02:06:83:fd:9e:fa:dc:02:
36:52:ce:29:ca:0e:34:63:5f:d5:05:6c:6b:b8:dc:31:55:a7:
db:ad:af:58:f1:bc:37:0d:1c:52:f7:e9:fc:1c:fe:1a:f6:62:
0d:c6:b8:01:88:7a:fb:99:2e:56:0f:80:c6:a3:68:14:c0:b2:
6e:8c:a9:9f:6e:8a:69:28:81:9a:f5:5f:d8:4a:8e:ce:e7:9f:
d8:25:d8:0d:7a:63:a2:23:01:db:d1:a2:37:ce:7d:f8:8f:e2:
13:d3:ef:f6:2e:32:d4:b6:25:c2:76:3b:5e:25:91:4d:cd:4b:
42:45:32:76:28:5b:61:ed:a2:b6:61:d7:0f:fe:7e:43:54:ff:
68:28:e4:38:3e:dd:eb:39:a5:6b:73:88:12:cb:13:99:49:11:
f6:d2:c1:4c:be:87:fd:65:65:35:1f:55:8a:78:f3:f8:9b:3d:
32:9a:35:1d:fc:4a:8a:a6:c6:a5:4e:2e:c3:55:49:c7:27:47:
28:1b:ab:ef:da:3f:9f:7d:b3:92:7a:fd:f5:85:e8:39:99:b1:
bb:82:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:02 2025 by rpki-client