Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: YniXZ+dgqq1VYGQmMlWjSoyPlxyfScN7E8+dG00BGbE=
Subject key identifier: DB:1A:BA:85:EC:85:92:E0:85:CF:D9:39:FE:E9:5D:42:42:FE:31:C5
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 01976D3E71740670B966C76D30FFB433809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 057C
Signing time: Sat 14 Jun 2025 07:01:38 +0000
Manifest this update: Sat 14 Jun 2025 07:01:38 +0000
Manifest next update: Sun 15 Jun 2025 07:01:38 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: roLZ2u1H3COtr0iiP+KHi8U+lu6ZVvXDBSo+Ua8hYts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:71:74:06:70:b9:66:c7:6d:30:ff:b4:33:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Jun 14 07:01:38 2025 GMT
Not After : Jun 15 07:01:38 2025 GMT
Subject: CN=db1aba85ec8592e085cfd939fee95d4242fe31c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:bd:fb:4d:34:28:1d:06:46:39:7d:2a:7a:
54:27:50:59:6d:e8:54:32:40:ff:2a:19:b2:59:14:
4c:29:3d:cd:68:00:5e:5c:90:c0:4a:c4:75:f0:df:
13:b6:ca:55:8a:44:ed:ae:c4:51:d0:18:ff:dd:27:
63:19:a7:a4:b8:73:8a:fa:8d:1a:b4:4f:18:31:c7:
59:85:05:26:5f:1f:78:33:39:2f:df:87:6a:82:81:
ee:cc:64:e4:ad:56:70:a2:29:f2:a3:8d:b0:88:bb:
3a:4e:5d:06:6c:16:92:98:fb:a9:93:e1:2c:45:eb:
6c:98:8c:5c:5c:31:57:94:5a:45:33:25:1f:42:88:
20:f5:d2:48:b1:33:cd:8b:44:16:b3:6c:69:c7:2d:
e8:81:6b:9a:ec:9b:93:9c:1d:8d:5a:b6:da:ba:3e:
05:b7:21:c4:35:65:9d:01:67:3f:2a:63:de:47:2a:
80:fd:17:f7:68:e8:d6:9f:36:ef:48:b0:1f:83:fa:
9b:62:a2:05:64:3f:6d:c3:42:ae:25:5c:86:f7:f5:
2b:07:97:dc:f1:9f:d0:fc:2b:51:4b:df:07:5b:56:
01:30:7e:06:05:e8:fb:4e:1b:19:e2:2e:cc:43:34:
24:06:d8:0c:b3:23:67:28:76:cf:0f:d5:46:4d:96:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:BA:85:EC:85:92:E0:85:CF:D9:39:FE:E9:5D:42:42:FE:31:C5
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:aa:2b:b2:03:37:3b:7a:9a:13:56:09:23:02:b3:fd:2b:
fb:5d:d5:9c:de:b0:7a:0c:0c:06:f5:f4:54:74:18:d0:0e:9b:
3e:ad:f7:f3:d4:08:4d:8f:05:6d:41:c0:85:f5:f8:74:92:9d:
31:ff:e2:80:45:d2:f0:2c:f3:27:f1:cd:8a:f5:50:ef:e3:a5:
fe:6f:c9:41:d7:12:bc:43:9a:b3:da:38:ed:dd:b0:c1:58:dc:
72:73:ea:a4:61:6c:9e:ff:e9:01:8b:a2:3e:e7:19:35:72:f8:
75:96:cb:58:45:6e:fc:b7:30:c8:9a:0b:db:c8:76:13:56:32:
b6:04:c3:26:fd:01:a3:17:f5:1a:90:55:31:56:92:09:25:82:
c8:42:32:d5:41:af:ac:51:f0:86:ed:59:ad:b6:5f:41:b7:63:
1d:86:29:8a:60:94:2c:3f:9a:9f:ee:cf:c6:64:a5:b3:29:58:
bf:4e:60:05:46:3a:c2:a4:be:91:50:69:30:62:ee:b0:1d:57:
9a:6b:fc:1f:66:15:b4:41:e5:3a:1d:3b:27:25:dd:96:8d:29:
8e:de:17:e0:ca:2d:f7:de:04:ad:ee:c9:43:1c:08:fc:3c:0d:
5a:80:38:e2:a4:29:fa:31:2f:d2:77:8d:95:bf:f9:b8:97:26:
59:d7:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:48 2025 by rpki-client