Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft (raw, json)
Hash identifier: JUn36waqTMDPVQYo2dOXSuh23jBY5a1l12deLqF9JhE=
Subject key identifier: 87:30:85:5E:15:71:FE:CB:EC:2A:AF:5E:37:63:39:1D:12:1F:F6:0C
Authority key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Certificate issuer: /CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Certificate serial: 0197722CB89B005ACE05434A7F20B5116BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
Manifest number: 0569
Signing time: Sun 15 Jun 2025 06:00:22 +0000
Manifest this update: Sun 15 Jun 2025 06:00:22 +0000
Manifest next update: Mon 16 Jun 2025 06:00:22 +0000
Files and hashes: 1: iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl (hash: v21rED3IS3zPXeRvifmIH3rPmulqLX8ZELJFZoHkAok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:b8:9b:00:5a:ce:05:43:4a:7f:20:b5:11:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Validity
Not Before: Jun 15 06:00:22 2025 GMT
Not After : Jun 16 06:00:22 2025 GMT
Subject: CN=8730855e1571fecbec2aaf5e3763391d121ff60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:6c:b0:da:8a:cc:90:22:8b:de:44:58:22:
bb:1a:d0:e3:76:ca:19:f1:5d:70:ec:2d:bb:35:78:
6e:3e:86:f3:86:cd:4d:fd:c0:5e:7f:5d:b3:b8:2e:
4a:fe:c8:35:73:61:ff:75:c0:d0:c7:3a:f4:c2:38:
e7:b0:48:a6:6a:cc:21:b4:29:34:a2:a6:13:80:71:
25:70:cf:36:ba:fc:99:42:27:4d:b1:0e:56:be:90:
98:1d:b1:31:6c:07:bd:aa:aa:8c:2f:45:f5:27:2b:
7c:8c:47:07:5d:90:58:bf:7d:e4:d1:7a:bf:dc:bb:
6f:c7:be:3f:75:b5:18:a8:b5:1c:c2:66:ef:4f:cb:
a7:33:c7:55:7a:f7:67:68:df:9c:5b:c3:54:4e:31:
99:2e:6e:7a:8b:5c:54:b8:72:cd:10:31:aa:04:ca:
71:bf:fe:c9:5b:54:29:0d:06:8e:65:6e:94:70:fb:
45:a7:dc:ce:22:b8:c8:6f:5b:55:4d:3c:46:62:c5:
2c:5a:5f:a5:29:8a:ab:10:76:5a:59:5d:50:22:db:
8a:15:ce:12:14:00:b5:50:3d:92:04:76:50:78:2f:
39:60:3a:e7:f3:53:60:1f:2f:bd:3e:a1:19:ae:25:
8c:47:ff:6a:bb:a0:e2:28:e7:df:f9:d5:1e:1b:df:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:85:5E:15:71:FE:CB:EC:2A:AF:5E:37:63:39:1D:12:1F:F6:0C
X509v3 Authority Key Identifier:
keyid:89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ee:47:fc:01:e7:6b:9f:ed:05:d8:67:01:f5:37:ea:30:31:
c5:06:e8:73:ac:79:ae:c9:e0:94:0f:8f:e7:1e:48:0a:17:5f:
a7:7a:78:1a:40:fe:81:63:ae:77:cb:85:a8:e9:aa:16:8c:44:
d5:e2:8e:31:32:9b:6f:97:77:67:af:e4:4b:38:0b:b4:92:a5:
3a:17:3e:18:26:59:5c:8c:71:35:75:73:00:94:bf:a3:10:27:
47:2b:52:bf:cf:ef:d7:86:4d:f5:04:34:fe:7a:23:19:a1:c1:
7c:c4:75:71:3c:3c:0d:f0:3f:3f:cc:9a:02:ed:df:96:cf:d9:
3b:1d:5a:35:dd:59:64:b2:7b:0a:d2:d3:c9:33:24:de:91:73:
15:4c:74:4b:54:bd:76:cb:87:3a:34:f3:19:fa:e5:94:7d:76:
58:ed:9e:1a:10:55:2c:96:53:ca:83:47:21:af:1e:de:d8:61:
d2:38:d3:c5:37:24:a7:6b:dc:47:02:b4:ed:93:9b:cf:7b:05:
89:b1:38:a8:22:bf:65:65:ba:bf:bf:d4:a4:b4:40:ab:c7:f2:
68:79:2f:1e:28:0f:1c:4a:b6:a4:11:40:ce:f2:67:d1:8a:3c:
5c:4d:c5:e7:fa:e3:d3:65:08:f0:b0:fc:32:0f:8e:cb:5e:71:
bf:a7:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:12 2025 by rpki-client