Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json)
Hash identifier: AWwl7x6nh4g1yOsWPh5ItOiQCg+HAVynPtFSbeb27/4=
Subject key identifier: 65:EE:0D:31:85:28:17:28:E4:18:00:0C:07:85:2D:8C:A8:58:84:07
Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Certificate serial: 0197469E8A63E7E46842484F88D36FE6EF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 19:01:24 +0000
Manifest this update: Fri 06 Jun 2025 19:01:24 +0000
Manifest next update: Sat 07 Jun 2025 19:01:24 +0000
Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: XR4OKlpgzzKgWIR3wrLOKbJaGdAe/0hNDEZTlSslYe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:8a:63:e7:e4:68:42:48:4f:88:d3:6f:e6:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Validity
Not Before: Jun 6 19:01:24 2025 GMT
Not After : Jun 7 19:01:24 2025 GMT
Subject: CN=65ee0d3185281728e418000c07852d8ca8588407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:fd:00:7f:c2:7e:b8:a3:03:f0:c2:db:b2:
c8:e4:7e:28:60:6d:3a:36:9f:05:f3:25:21:b7:1b:
a5:67:d7:38:20:03:ee:57:a1:22:05:59:35:cc:e5:
eb:31:cc:d1:4c:bd:f3:36:68:b1:f5:43:89:0b:f1:
ae:63:06:e1:de:82:7e:35:9a:7d:5f:33:a2:38:82:
5d:32:d8:55:36:e1:85:16:2c:39:a9:ea:c8:31:9a:
01:ca:75:d7:2d:1b:d9:d6:1d:4c:6c:9d:5c:6b:48:
19:37:8c:9d:c6:6b:f9:ba:54:35:45:81:26:1f:74:
bd:85:51:2b:41:31:89:d8:e2:1a:3e:5a:8d:79:d7:
58:ca:de:91:eb:31:99:f7:af:5f:cb:d4:81:b6:f8:
e1:10:2b:29:f3:6d:82:0d:9e:64:ee:a1:38:a1:68:
a0:c7:fd:9a:1c:6e:82:ae:39:42:d3:4b:66:87:93:
cd:0b:be:d9:94:27:74:41:d9:ce:d7:05:45:b1:11:
a0:e9:03:53:37:2b:de:c9:a4:f0:1f:eb:ae:85:e0:
f9:06:c4:c2:f0:86:9d:b4:bb:6b:e7:61:a4:fa:51:
1f:b5:8a:a3:8b:76:65:23:a7:0f:8b:0f:7d:c8:6b:
73:8b:bf:31:9b:e2:f7:9e:ce:1f:b9:98:e3:61:74:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:0D:31:85:28:17:28:E4:18:00:0C:07:85:2D:8C:A8:58:84:07
X509v3 Authority Key Identifier:
keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:2e:2b:05:6f:52:bd:53:e7:4e:13:38:be:23:05:9a:6e:
17:ea:61:66:fc:f7:64:14:4f:78:84:0f:26:89:a7:38:6e:cf:
a8:60:9c:0f:8d:7c:01:09:70:24:94:7e:df:13:52:60:1c:7d:
5a:51:6d:da:93:0c:04:c1:d7:63:55:1f:59:45:79:a3:03:f5:
cf:d6:b5:20:2c:e1:c1:51:ad:f4:86:ba:11:a4:52:c0:3a:75:
b6:b7:55:c2:8a:e4:f3:89:43:28:25:da:be:c2:70:12:55:cb:
dd:f0:c9:0d:9e:7a:d4:71:36:81:5f:38:8c:8d:9b:37:a5:4f:
eb:b8:53:05:c0:22:65:08:52:43:0e:0f:1b:36:8b:56:27:ca:
fa:51:d5:c1:34:3b:6a:a9:5e:3c:0c:95:98:8b:8a:bd:8f:ff:
3c:33:90:98:2d:02:c1:cf:3a:f7:30:16:78:83:06:41:d8:3d:
00:08:c1:44:6e:db:7c:5a:5e:ad:ca:2d:ae:0c:96:75:7e:45:
41:10:e9:b7:c6:8b:77:2c:bb:ad:71:e9:29:11:35:76:2f:54:
b7:04:68:67:ba:92:ef:56:ae:02:c9:07:8d:fb:3e:21:cc:d3:
38:86:26:0a:c3:d3:8a:01:7c:b9:2c:3e:ac:7c:01:85:a1:cd:
e1:e2:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:48 2025 by rpki-client