Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: y9c61SOPxduogbSO4sQLQkGSL5kP/xRlz2R6eyu+kcA=
Subject key identifier: 4F:55:CD:9F:DD:45:70:EB:B5:DA:76:38:5D:4B:EE:93:AB:C3:3C:87
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 019745F95F6E79497BDF6CF1B6BF41CAF85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 1576
Signing time: Fri 06 Jun 2025 16:01:00 +0000
Manifest this update: Fri 06 Jun 2025 16:01:00 +0000
Manifest next update: Sat 07 Jun 2025 16:01:00 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: gAKut2ePpXJH3AMx578ciFAe+cVxW9iN03n0aYk/DX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:5f:6e:79:49:7b:df:6c:f1:b6:bf:41:ca:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Jun 6 16:01:00 2025 GMT
Not After : Jun 7 16:01:00 2025 GMT
Subject: CN=4f55cd9fdd4570ebb5da76385d4bee93abc33c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:3c:e9:d6:7a:c7:d2:34:79:4e:3b:7b:15:
10:b8:df:7c:ae:a3:a8:6c:ac:f4:8d:1c:17:d7:b6:
83:33:39:45:f8:a4:58:db:42:68:7d:6f:b1:be:91:
d4:0b:8c:8c:99:c6:d3:51:c7:ec:b6:54:a5:5d:d1:
7c:f1:46:ae:47:9d:99:0e:fc:13:46:b8:48:04:eb:
da:19:8b:8c:3b:13:7c:c5:51:f8:20:0a:61:8b:06:
c9:72:1a:b6:15:33:df:f2:66:55:05:62:79:03:37:
60:32:63:f8:06:40:d6:d9:29:78:61:5f:21:23:2c:
7f:88:83:ef:e7:ba:23:f9:3c:aa:3a:d4:1e:95:8b:
b1:a9:a4:f1:52:07:eb:dd:56:f4:52:6b:35:ee:f0:
99:2b:32:3e:d8:3b:44:f1:3d:d8:7b:84:53:ca:a6:
76:ac:24:cb:07:31:9e:2d:46:ad:47:9e:6c:b4:e9:
32:5d:c9:2f:1c:e3:a4:e2:10:73:dc:16:ec:ed:4d:
75:66:8f:60:57:54:2c:d2:34:43:d5:c0:ca:1d:27:
f3:9b:ef:8e:04:22:82:dc:7c:ac:3b:0d:87:ae:9b:
dc:02:a6:8a:a7:e0:b6:af:43:44:c4:ce:86:21:2f:
f1:43:a8:40:b5:7d:7c:e4:d1:ca:69:d8:99:9e:49:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:CD:9F:DD:45:70:EB:B5:DA:76:38:5D:4B:EE:93:AB:C3:3C:87
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:cc:82:39:25:51:bd:1c:e8:8d:6f:68:9e:51:dd:8d:74:
ec:20:b2:bb:71:28:ad:b6:4e:78:54:5f:2b:42:5c:fd:cb:1d:
f7:fc:00:67:10:3c:bc:b4:72:7f:31:3f:f7:6b:8b:d3:c8:0f:
5c:52:ed:6f:05:65:03:2d:0b:be:a2:5f:fb:21:f8:2f:0b:c1:
ed:40:bf:85:c6:43:14:67:7f:57:39:b3:01:33:41:08:97:8b:
81:d1:4b:31:d1:a6:7c:a7:f5:a4:b4:8d:1b:20:16:60:a5:2b:
37:6c:33:64:38:1f:db:e7:02:75:0b:44:20:fe:5f:53:1f:17:
74:38:65:1b:13:c3:3a:69:c9:6c:b2:93:a0:e3:56:e0:f2:0c:
32:71:f1:f7:4b:a7:76:40:9e:7f:2a:f4:38:cc:d1:f4:e1:78:
10:58:0a:4a:32:9e:22:d8:70:2d:0a:de:4f:fe:8a:3a:af:c9:
42:a5:f9:66:5c:02:b6:6e:16:62:c9:9c:c1:14:ad:c7:bd:13:
11:5d:3b:b3:cf:89:50:41:4e:a6:aa:59:cb:e7:00:76:8e:7b:
e7:4d:f6:3d:ce:5b:c5:fc:0c:89:0e:8a:f9:cf:10:58:3d:e5:
f3:66:56:06:42:ec:0a:20:d0:80:7f:d2:2e:8d:d6:c1:91:4a:
7c:2e:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:43 2025 by rpki-client