Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: nOwZqDOalGWNdxST7w+C0g2aJqB2Hk8mAEv0Ur6iyxs=
Subject key identifier: 0F:C2:A3:A2:6B:D2:F5:3A:11:15:5B:76:82:41:59:29:68:FE:53:C9
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 01976DE2D1A45B68690B4A68D82E73E67A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 151D
Signing time: Sat 14 Jun 2025 10:01:10 +0000
Manifest this update: Sat 14 Jun 2025 10:01:10 +0000
Manifest next update: Sun 15 Jun 2025 10:01:10 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: ieNzOueBHPqPde/PMEPQrLfAopcPk461OnNILyBqzZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:d1:a4:5b:68:69:0b:4a:68:d8:2e:73:e6:7a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jun 14 10:01:10 2025 GMT
Not After : Jun 15 10:01:10 2025 GMT
Subject: CN=0fc2a3a26bd2f53a11155b768241592968fe53c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:68:d4:93:d1:42:0d:34:d5:5f:10:84:11:
d3:04:36:f4:e1:58:a1:81:54:4c:96:08:d7:0f:09:
5e:58:70:9c:dd:2a:6f:ff:9e:37:49:6a:58:0f:4c:
39:ee:64:18:be:8e:1e:e3:01:1a:2e:97:05:0f:96:
54:db:25:5d:93:71:1a:14:c4:e3:f4:ec:f7:57:d2:
b4:7a:5f:a2:90:10:e9:14:ae:7b:e2:f2:de:67:75:
d5:cb:4a:04:5f:85:59:b4:08:0d:2d:eb:48:d1:be:
85:2c:70:30:1d:6e:fa:71:9f:52:d0:ea:e2:93:9d:
40:78:d2:06:1c:df:8e:55:fb:06:29:3d:0b:3c:d3:
1d:3a:12:53:13:a9:f8:a9:e6:27:70:de:be:89:f7:
f8:ea:47:1b:59:34:4b:e8:44:32:93:79:07:fd:0f:
ef:4c:91:63:65:ae:7e:94:8f:28:b0:7f:32:3f:a6:
2e:dd:2c:e6:86:3d:01:d6:f7:e1:e1:51:93:02:6b:
45:d3:a7:69:ef:44:0e:a8:3b:f3:f7:c4:32:93:8c:
39:99:3f:17:89:44:e8:d1:72:4c:ff:99:5d:5d:ca:
37:99:ba:db:1e:ef:38:93:90:2f:f6:c6:ef:00:46:
b2:d5:45:71:ae:19:57:4b:70:57:7b:7e:df:0b:2d:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C2:A3:A2:6B:D2:F5:3A:11:15:5B:76:82:41:59:29:68:FE:53:C9
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:55:86:0b:82:f4:89:d3:7e:16:f2:4d:8e:dd:38:29:83:89:
dd:36:82:b4:bc:34:ab:b7:a4:e1:56:b8:83:54:5c:3f:cc:0c:
ec:0e:c9:2f:82:1d:d1:70:2c:9d:ed:98:f1:6f:db:88:10:ee:
62:08:19:9a:36:24:4d:49:a1:cf:db:91:76:d3:7d:e4:61:81:
95:44:c0:a9:cc:22:d2:97:8c:01:af:1f:44:3d:dc:47:80:ca:
ab:1d:74:ca:3e:bd:f9:a4:70:94:19:ea:f6:b9:cb:5b:8e:66:
e1:4f:25:34:2c:35:b1:41:b7:ad:bb:9c:26:b6:73:ea:eb:5e:
03:68:dc:41:18:85:cf:9b:95:0c:1a:62:38:42:0f:43:df:42:
24:d8:56:66:35:fa:db:07:63:ff:d9:9c:c9:aa:cb:e6:f2:64:
c1:4d:b7:c2:af:36:9c:6d:10:c7:2e:7e:ea:63:d9:a6:8a:77:
46:5a:fa:83:a2:d2:34:ed:8b:a4:fa:b1:91:76:3e:87:13:64:
73:b7:15:eb:bb:d1:aa:d0:ee:09:be:9c:97:c6:bf:22:f6:9d:
b2:02:85:fa:65:a1:91:57:12:5c:47:94:33:d7:ad:25:ae:9e:
56:a0:15:e5:0f:8d:92:b4:87:d6:dc:54:8f:79:76:29:e7:c2:
fb:65:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:52 2025 by rpki-client