Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: QXA5/CCFTO0/ZRa9vI1cThWzgjyHYyZbF/xKKhfEj3I=
Subject key identifier: BE:6D:5B:42:EF:33:48:00:44:0A:BE:1B:DD:FD:41:70:D7:AD:0C:EB
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 01974A7B794AD33EB48E3F0BEECBFA4A8260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 13:01:35 +0000
Manifest this update: Sat 07 Jun 2025 13:01:35 +0000
Manifest next update: Sun 08 Jun 2025 13:01:35 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: eg3Rt9i2teFCMH1ASMmgb3H6G4ub2XztV7Tsi2r/i6Y=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:79:4a:d3:3e:b4:8e:3f:0b:ee:cb:fa:4a:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Jun 7 13:01:35 2025 GMT
Not After : Jun 8 13:01:35 2025 GMT
Subject: CN=be6d5b42ef334800440abe1bddfd4170d7ad0ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:d9:7b:a8:9c:69:d8:7d:1a:da:ac:3e:91:
e9:cb:57:66:96:89:3e:ed:5c:dd:cd:33:27:bf:91:
18:2d:c3:dc:b4:12:ab:13:e8:33:13:62:9a:c4:60:
7c:e8:01:87:47:c2:d6:74:dd:f2:e7:d0:23:ab:2a:
cd:77:ff:04:98:09:4b:d8:49:3e:e6:56:06:20:8f:
c7:38:fb:42:10:3f:d3:21:2a:4a:ea:ab:1c:ab:d1:
12:a0:7b:27:7b:90:9b:9f:b9:f8:13:0a:46:05:c1:
da:ff:db:df:09:1e:b1:cc:f4:32:65:1b:19:e6:40:
65:97:ad:1d:44:05:75:c0:b3:6e:2a:46:ee:96:97:
75:f2:4a:94:2f:66:ec:62:95:50:e2:3a:79:fb:d8:
97:36:1f:ca:c4:0a:03:92:f5:8f:6d:b3:c8:d7:e6:
ad:8b:6c:d0:f3:de:12:da:b0:ac:46:be:35:38:27:
15:38:70:82:a8:f5:71:e0:fe:61:82:6a:a8:96:8e:
b0:40:ab:4c:58:26:14:d9:f0:28:fd:2b:e3:0f:ca:
4e:e2:62:d7:63:fb:f4:23:38:da:2f:1b:af:31:94:
d9:fb:ac:6a:eb:dc:b5:c5:4a:db:e9:32:ee:7b:05:
ec:40:7b:bb:59:7c:da:8a:6f:3d:63:07:d8:3d:bf:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:5B:42:EF:33:48:00:44:0A:BE:1B:DD:FD:41:70:D7:AD:0C:EB
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d6:5c:b4:44:7c:26:84:77:db:13:d7:50:c2:10:eb:ca:1e:
81:f6:0d:75:27:6d:7f:40:4d:42:67:9c:ed:3f:d0:f7:07:dc:
9a:6c:90:aa:a3:71:9d:f3:a7:0a:57:d9:30:cc:0e:f3:1f:7f:
0e:c4:af:ed:47:ca:ee:16:04:c0:82:60:fb:59:ac:23:83:32:
dd:d5:03:64:61:38:7f:c4:5c:09:e3:da:00:1f:2f:96:cc:42:
de:90:ae:87:7b:55:04:91:59:b3:a8:7d:78:d9:16:d0:65:fa:
bc:ef:9e:8e:19:04:54:9c:47:bf:0c:12:aa:1e:43:0f:a4:3c:
7b:73:37:30:9e:47:0a:77:7b:e3:1e:c8:3b:65:53:d6:46:c7:
aa:f3:4a:fa:d4:46:b6:0f:a9:06:5f:f6:1f:8d:22:05:0a:35:
93:4c:1c:f1:db:5f:b7:86:6d:70:cf:46:d5:fa:a5:13:f7:ff:
a8:1c:2a:47:6a:4f:10:80:8c:e0:20:ba:24:65:59:92:f8:e4:
93:01:a1:c2:c1:44:30:05:59:fd:25:0b:c3:1d:3d:aa:f7:53:
01:dd:c8:7f:8d:ec:d6:d4:02:ab:6c:fd:56:77:90:b3:e7:ba:
47:65:4d:b2:94:e8:a3:52:0f:f2:8c:38:0e:03:a3:3f:df:f4:
61:c8:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:57 2025 by rpki-client