Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: FOp7zUNTPlqi+JUCjCA7rs4v+YLz1LmIWc2m86rbo0E=
Subject key identifier: 3B:B5:FA:56:34:33:25:EF:FB:87:EA:2E:D7:FA:CE:36:F6:6C:B3:98
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 01987CE5122D52CFF966FD946AE2A29384DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 01:00:43 +0000
Manifest this update: Wed 06 Aug 2025 01:00:43 +0000
Manifest next update: Thu 07 Aug 2025 01:00:43 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: We4sBdNuNRetypM3G62AADUULQS5eU9TrGtOskzbaxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:12:2d:52:cf:f9:66:fd:94:6a:e2:a2:93:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Aug 6 01:00:43 2025 GMT
Not After : Aug 7 01:00:43 2025 GMT
Subject: CN=3bb5fa56343325effb87ea2ed7face36f66cb398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:a1:7d:8c:2b:f9:64:80:09:84:42:33:21:
fa:74:d7:b6:50:ae:e4:b3:b8:98:dc:79:44:c5:d1:
db:53:bb:4c:66:41:f0:50:9b:96:bb:2c:93:c8:3a:
df:ec:0d:6e:16:2c:f1:c9:ff:04:82:e7:12:32:38:
dd:22:60:69:8c:bf:64:a5:83:a9:93:17:14:d6:9d:
1c:18:b0:82:58:7d:cd:ae:c1:c0:6b:73:55:36:15:
70:15:0c:08:d8:6c:ef:94:6c:46:fe:08:e6:9c:c6:
db:8c:57:b8:d8:32:35:be:60:31:5f:0c:bd:6c:9a:
d2:9e:f0:70:ba:40:69:84:7b:40:ed:2d:e7:56:c0:
c2:c2:22:a7:1e:35:cf:a1:f0:da:57:da:66:55:f6:
3c:9c:65:de:b2:4f:83:67:7a:1e:56:d4:99:e7:20:
b5:5d:22:28:89:42:cb:a9:5e:88:fe:32:b5:8a:e1:
ab:a0:1f:6d:11:a1:7f:52:2f:64:b7:9f:65:8d:57:
ea:63:b1:72:34:5c:3c:b1:aa:2f:93:4a:fc:5f:93:
3c:ed:8b:eb:93:82:f2:f6:f7:76:69:cf:55:45:0b:
90:99:f2:59:b9:df:b4:db:68:0a:09:22:52:33:0d:
e9:c6:34:be:5c:49:f5:7b:42:8e:11:29:92:56:da:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:FA:56:34:33:25:EF:FB:87:EA:2E:D7:FA:CE:36:F6:6C:B3:98
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:e0:6d:14:c1:3c:e2:6f:18:f8:82:07:2b:59:f8:6a:3f:
27:4c:ba:53:3b:cb:f6:e4:19:90:a2:d1:66:f7:0c:85:59:d6:
ac:18:43:51:16:73:58:8f:6f:6c:bd:30:9b:da:e4:c2:db:82:
d1:cf:ff:9d:15:12:60:53:d1:a8:58:29:62:18:89:7f:9f:4d:
df:50:b1:a1:6d:2f:27:e1:d9:7b:f0:07:50:1a:fd:5f:31:dd:
d5:5a:e3:73:a8:18:17:f9:8d:db:49:fc:99:2e:f9:a2:48:43:
64:64:8a:96:2c:b5:46:bf:ee:96:78:52:e2:04:d2:ca:62:c4:
95:26:f5:1d:14:f8:42:26:62:4f:bc:86:fe:06:45:c3:fa:7d:
ca:d4:48:9e:63:11:de:82:24:08:1f:40:81:8f:f8:e7:a4:fa:
22:d7:c3:d7:35:58:66:cc:be:dc:86:3b:52:9e:b4:6e:20:59:
5e:57:f4:99:fc:82:78:2d:a2:7d:82:02:dc:3b:c5:7a:44:0f:
bf:21:59:09:3a:de:b2:ec:48:14:af:dc:fb:dc:4d:05:e4:97:
c7:bc:d5:b5:60:b6:f0:c7:15:1c:e1:79:64:f6:dd:48:d5:2c:
a3:4c:7c:ea:ca:c1:76:5d:90:01:39:f7:0f:f4:1f:29:83:9c:
ca:bd:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:11 2025 by rpki-client