
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: TqwmeSUdfc5PJntKL6YI4/tOKejsCcR83/BixyxryXk=
Subject key identifier: AF:F0:54:49:A1:8B:72:D8:4B:7F:87:2C:0D:E3:FE:D8:24:5F:86:E2
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0197711A73B1336B9FD2F484BD4ACDA284EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:48 +0000
Manifest this update: Sun 15 Jun 2025 01:00:48 +0000
Manifest next update: Mon 16 Jun 2025 01:00:48 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: wu3YTW6atJZ/Xb4HpHOswbbHhUx/qv+M10f4yE9QMQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:73:b1:33:6b:9f:d2:f4:84:bd:4a:cd:a2:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Jun 15 01:00:48 2025 GMT
Not After : Jun 16 01:00:48 2025 GMT
Subject: CN=aff05449a18b72d84b7f872c0de3fed8245f86e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:20:86:4e:8b:2f:d1:29:4d:a7:bf:ae:b1:
5e:38:8a:55:e4:f0:74:ba:d7:5e:31:e6:a5:88:56:
81:b4:4a:d1:be:9b:4d:ed:e1:6f:2d:24:75:11:df:
ff:2e:91:c1:eb:95:93:39:f8:a6:49:6e:d5:27:40:
52:59:0b:b1:81:68:c0:d6:04:2a:05:47:3d:00:7d:
f9:36:e5:6a:62:19:4d:92:b9:af:7e:ac:ac:f2:9e:
2a:a5:fc:9b:c9:bd:14:ae:22:c1:96:a8:8c:1d:1b:
f0:18:3e:ec:62:b5:56:41:5a:39:52:e6:cc:09:2a:
ca:6d:1c:69:be:ae:77:04:ae:f4:df:85:83:9d:d8:
2c:9c:e6:42:1e:11:68:01:b4:17:1e:51:d6:61:df:
22:14:f1:50:c0:91:2a:be:ed:e5:17:3f:6a:1c:25:
9d:a8:d2:dd:e6:62:d6:fd:91:ea:73:52:54:38:74:
80:37:25:18:92:72:52:36:dc:bd:15:5b:a7:83:af:
4d:56:ac:7d:d3:3a:c9:27:85:2d:4b:08:be:20:28:
37:50:88:d8:da:e9:62:cc:61:e4:b8:45:48:bc:ff:
98:95:72:6b:7a:fc:cd:d3:a0:1d:3a:b6:38:7a:79:
d3:71:ee:a6:c6:40:d7:f2:3d:9d:42:5d:80:a0:55:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:54:49:A1:8B:72:D8:4B:7F:87:2C:0D:E3:FE:D8:24:5F:86:E2
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a0:3c:4d:34:bb:ab:80:3d:51:fb:6f:a7:63:b3:a6:1b:d7:
fa:b6:67:4c:61:6f:6c:d8:0b:66:fc:f2:53:2a:c1:5f:34:a6:
2a:f2:d9:a2:83:93:90:1b:74:3c:4c:94:d8:a4:a8:77:11:d6:
8e:ac:51:b1:80:99:34:b4:87:fb:a2:9f:ff:61:30:c8:3d:c4:
44:d7:b4:68:98:a7:a4:9b:1a:83:50:7a:92:01:c3:70:34:45:
05:0c:f3:b1:72:02:36:7a:38:48:11:c6:df:83:cd:6e:f6:2e:
3d:65:4b:e0:53:7b:0d:4e:8d:85:89:fd:f6:1a:60:6a:6a:f0:
cb:18:03:25:28:c3:9d:eb:63:a1:41:e4:4c:60:79:37:c9:62:
04:f7:db:a4:77:f2:28:58:1e:00:29:16:12:14:a5:e1:0d:43:
5d:87:40:05:d2:0e:4c:28:0d:6a:c7:cf:84:cf:99:c0:69:a7:
1f:5e:e7:aa:bf:ae:5a:58:e0:93:57:72:0a:81:72:b9:53:b6:
1a:f7:f8:25:16:3e:eb:d6:bc:c5:85:b1:a5:c7:a4:8b:e3:f3:
87:36:08:f4:3a:40:de:2d:91:c5:eb:31:9b:db:67:90:a2:83:
f4:36:51:fc:0e:08:12:ca:d3:a3:e3:1d:52:04:85:d8:5f:e9:
bf:28:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:04 2025 by rpki-client