Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: NUvuKV0NzVLslHJdFQHGZfQn+jpqYJvpW61RE2j7Kks=
Subject key identifier: A4:81:6B:10:46:FC:C4:EA:3B:B7:59:7C:F3:45:AC:63:F4:BE:F0:9D
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 019749311CDE15B5796F067EC18E23E25570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 07:00:44 +0000
Manifest this update: Sat 07 Jun 2025 07:00:44 +0000
Manifest next update: Sun 08 Jun 2025 07:00:44 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: gNqSasr1thBhx7SjbVRzGRmHFCorSxA4mT2YUtlnAPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:1c:de:15:b5:79:6f:06:7e:c1:8e:23:e2:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Jun 7 07:00:44 2025 GMT
Not After : Jun 8 07:00:44 2025 GMT
Subject: CN=a4816b1046fcc4ea3bb7597cf345ac63f4bef09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:51:1d:8f:45:9b:85:36:23:4d:47:38:9e:
95:33:98:b4:55:1c:24:1c:77:01:82:c4:c9:08:30:
d0:31:ea:44:9f:a0:f2:79:06:79:e2:c4:93:4e:56:
1a:47:b0:bc:45:3a:f6:a1:0d:e0:4e:8e:2d:21:27:
2f:7c:16:8e:fa:ea:7d:02:29:9b:ee:7c:b0:e1:2b:
f2:ee:c4:ba:b2:7a:10:22:e1:9e:8b:15:c9:8d:ee:
9f:75:9d:56:0a:90:8e:c4:13:df:c9:76:e3:ec:be:
d8:dc:95:02:2a:bb:21:f3:c4:7b:93:bf:b1:4b:a0:
fa:39:aa:2f:24:f0:a2:37:68:f5:b9:5a:c6:2e:aa:
51:92:2d:7c:57:41:29:fc:e2:1d:7c:dc:5a:7c:e3:
7c:d2:65:12:e7:8e:0b:d8:12:e1:66:12:ef:87:3e:
74:e1:0b:e7:b5:17:3d:bc:74:50:d4:a5:73:4d:d9:
5a:50:06:d5:21:db:b4:8c:5f:4c:4a:97:66:2d:e7:
17:75:cd:7a:f1:dc:90:da:2c:c2:ed:38:90:1c:f5:
c0:2c:3d:b9:02:8f:27:b3:da:e0:ac:21:0c:d1:55:
1c:69:e3:8f:4f:97:46:64:7e:88:f3:de:32:e4:e8:
88:58:c2:1f:21:7b:c7:fa:f1:cc:d6:ca:6c:82:ea:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:81:6B:10:46:FC:C4:EA:3B:B7:59:7C:F3:45:AC:63:F4:BE:F0:9D
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:d5:73:c5:dd:eb:4e:75:1c:08:fd:47:ed:01:03:a7:7d:
20:ac:d3:be:8c:08:94:5e:c3:6c:5e:4e:da:8d:ff:e8:63:46:
fc:67:45:26:8e:3a:56:42:de:b0:a9:13:16:65:95:6b:3b:a4:
2b:2a:f4:67:9c:23:4b:89:c8:a9:3f:68:96:6d:b0:21:69:e7:
97:db:5c:52:f6:03:af:b1:58:0c:33:c8:6e:37:3d:ca:44:f7:
72:e4:b7:cb:a3:a7:3d:57:63:66:e8:44:54:16:0c:d4:15:6e:
c4:a3:49:57:ac:9e:a1:32:1a:c7:8d:06:d7:c1:60:92:84:7d:
75:23:37:c6:97:8f:de:b6:ea:d7:00:bf:f4:12:12:ff:45:15:
2a:4c:37:31:27:80:46:56:1a:96:79:86:a0:f8:cc:c2:af:48:
98:af:44:66:08:18:c7:5f:b7:74:18:7c:f0:6e:5d:c9:f7:d5:
a9:fe:7d:47:57:e7:d6:31:51:c7:c7:3e:09:da:a1:92:80:85:
4a:12:b3:12:9c:b2:01:58:35:31:99:d3:e1:23:2e:c2:a2:9d:
fc:d4:3c:f5:e3:ed:0c:2a:fd:a3:fd:ab:c9:e3:5b:3c:73:78:
3b:f3:da:c7:e5:7e:27:bc:a0:2c:95:cf:a8:d1:91:69:40:29:
c6:9a:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:55 2025 by rpki-client