Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: U3a8lT6CQMcyE9hvw4l2IIQNfIhDiOMMjw4uaOkrJvc=
Subject key identifier: 1A:A4:85:49:E5:26:59:6B:18:6A:50:92:BC:D0:31:7F:50:48:B3:16
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 01975A92D6813A7FED2937A7C6545D43009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 1513
Signing time: Tue 10 Jun 2025 16:01:01 +0000
Manifest this update: Tue 10 Jun 2025 16:01:01 +0000
Manifest next update: Wed 11 Jun 2025 16:01:01 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: rTlNNnHBCi1y3+76DBlpxSwROcW2Anf30jlSsfThCAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:d6:81:3a:7f:ed:29:37:a7:c6:54:5d:43:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jun 10 16:01:01 2025 GMT
Not After : Jun 11 16:01:01 2025 GMT
Subject: CN=1aa48549e526596b186a5092bcd0317f5048b316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:38:40:a2:63:fc:0a:4b:0a:15:12:4b:83:
40:1c:a6:dd:c9:6b:a2:73:6e:72:d8:b7:e5:dd:f0:
fe:d6:9f:7f:ae:f2:8e:4c:83:35:2b:52:4a:e9:48:
b1:7a:c3:91:d3:61:0e:9f:f6:95:72:0c:84:ab:ad:
5d:9a:ff:46:1a:96:fb:50:44:44:a5:cf:d4:87:13:
c0:e4:c0:e6:53:ec:e6:e9:67:ec:34:77:6c:e6:a4:
b5:94:8d:b2:4c:2a:c0:a2:6d:c2:62:38:39:44:b7:
74:d6:9a:b4:9d:31:ad:00:66:06:f8:3b:c3:ba:ce:
df:eb:d4:5a:14:be:87:58:95:c6:e4:6c:8b:ca:7d:
5f:2d:2c:c4:e2:67:15:f3:87:44:0d:23:f2:97:f1:
5f:b5:27:20:17:47:9d:40:af:57:3a:dd:7d:58:90:
9f:71:3f:cb:ec:d0:e6:30:e0:d4:55:fb:cb:74:29:
e4:2a:fa:a3:6d:f3:2e:90:6f:0d:66:98:ce:bd:f8:
7d:a3:77:4c:c3:41:e7:f2:e8:0c:1d:b7:46:79:26:
1b:9f:1a:57:78:72:36:22:ce:4a:09:1c:7e:83:ad:
59:b6:03:12:d7:ee:d0:5d:64:9b:f6:a9:fd:52:ec:
60:59:87:df:23:4d:55:60:19:35:fc:69:a5:53:f6:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:85:49:E5:26:59:6B:18:6A:50:92:BC:D0:31:7F:50:48:B3:16
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:e0:e0:95:9e:db:92:91:ad:23:f5:f4:4a:ac:34:8f:ce:
c0:46:04:56:88:3d:2f:a3:89:6c:b8:61:5d:51:3b:fb:aa:79:
3f:e1:66:51:f0:61:a0:47:f5:cd:60:00:88:71:60:36:93:41:
5f:53:ed:86:5f:21:70:e2:41:2f:9d:72:36:76:57:21:8b:dd:
32:a7:49:a5:db:71:95:fb:25:bd:15:8b:e0:53:53:d9:f9:89:
2d:5b:80:23:6a:2d:9d:50:20:53:cf:b3:1d:ad:51:1b:86:c5:
9a:39:5d:6f:39:1a:25:7c:cf:8d:58:21:9c:1a:06:e0:35:c5:
68:84:6f:8c:fc:24:87:f2:bf:0b:de:d5:29:0b:0d:da:f2:16:
3f:cb:4f:d4:41:60:cc:8f:4e:75:ac:60:4f:19:e4:d2:55:15:
5e:d6:07:0e:5c:cc:b4:87:12:66:a1:d7:cc:30:de:20:a9:6f:
5b:67:40:c2:fd:ac:3b:00:05:29:9e:88:21:a4:f0:d4:59:70:
bf:2a:97:53:1d:fb:a6:3c:98:e0:db:4b:e7:a8:b1:b1:32:17:
e7:bb:f4:43:c2:62:41:5e:c4:19:b2:2e:e4:e7:fc:d2:e8:82:
52:f7:2b:e5:1d:9f:ce:9b:e2:b2:a5:d9:78:a8:0c:0f:34:c0:
d2:30:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:30:21 2025 by rpki-client