Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: HH1/fZgVTFImUGTAFmCpXouKPQcL8SoKHKI2q2/HpVQ=
Subject key identifier: A7:7F:59:B8:9D:39:28:BF:BE:BB:64:22:94:7E:59:78:EE:B1:8A:11
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019873E311E109FAAD86EB1D1AB85224435F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: EzGffIzswPaZzvARbBGSZocaVCHdr+eKx3kLpMti2sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:11:e1:09:fa:ad:86:eb:1d:1a:b8:52:24:43:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=a77f59b89d3928bfbebb6422947e5978eeb18a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:77:25:89:4b:99:17:4e:65:20:38:99:03:
d9:d8:70:6a:e0:d3:d3:e8:19:27:b5:b2:de:f0:5c:
63:06:2c:a6:79:1a:c7:09:dc:21:e1:46:d4:91:b4:
52:03:0e:4d:fd:fa:fa:78:ba:41:d4:7f:82:92:bb:
f1:ee:c2:c8:79:cb:57:5f:85:ae:22:41:b2:e1:12:
d6:e5:17:76:de:53:da:e9:a0:51:ec:fd:67:2f:cb:
a1:06:ca:6a:0d:43:16:8d:f4:6b:7d:e7:b3:08:b7:
4f:93:c1:2e:27:fc:43:cd:3a:32:6f:87:9c:8e:18:
75:2d:55:8c:c6:04:96:21:1a:30:85:8f:b0:02:4e:
79:93:b7:8f:cf:be:cf:3e:25:73:3b:a5:e8:66:ea:
2d:a6:63:c5:09:2e:11:60:28:15:24:49:83:ac:6b:
5d:5b:11:24:be:30:df:d1:da:9d:8c:50:7b:c3:5c:
98:77:c3:fe:c2:a4:f4:82:db:f1:2b:23:96:5f:b8:
52:2f:99:a5:f5:bb:a3:c5:07:5a:e8:aa:87:fd:95:
a4:1c:5a:cd:5d:e1:a2:28:f8:ca:1b:24:9b:13:2d:
bf:79:c4:14:5d:03:b3:10:0f:ec:57:bd:6e:d2:24:
66:03:0b:9d:8d:c1:66:b4:02:a0:1f:c0:c6:5c:09:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:59:B8:9D:39:28:BF:BE:BB:64:22:94:7E:59:78:EE:B1:8A:11
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:12:1a:33:36:3e:45:83:63:23:45:e2:ec:32:7a:dc:8f:f6:
01:82:33:8e:e4:ea:79:68:b2:de:cd:0f:b8:97:65:9b:58:c0:
de:c9:0b:1b:29:a2:22:15:b3:07:0f:5b:f7:43:b8:35:4a:25:
4f:8b:3d:a6:67:f9:fe:61:6f:62:c1:a5:25:51:ae:b5:e1:90:
a2:33:94:dc:97:d2:0c:e2:c8:34:11:c6:95:f8:a2:b7:5e:d4:
f7:41:bd:0e:02:a0:1b:e8:db:8a:13:1e:97:25:21:d2:94:07:
33:f4:58:ef:50:4b:98:52:65:9c:8c:09:2b:b2:42:1d:45:58:
f4:0e:8f:4f:d8:e2:77:23:08:54:c8:a9:c7:c9:24:6c:b9:d3:
72:54:07:e2:de:cb:c3:2e:08:5d:86:34:78:05:ed:04:9b:b0:
fa:46:8b:96:c8:b5:1e:2f:f3:3a:bb:3f:7f:3f:00:3c:ff:82:
a9:68:96:54:88:7a:41:97:08:e8:94:0b:21:8e:8a:3e:ff:c7:
8b:87:b1:1a:40:bb:8c:23:58:6a:13:36:28:3e:55:db:b9:35:
6d:4d:fb:22:d6:22:6b:90:37:ae:36:fe:7c:e3:20:51:e6:9a:
71:f0:86:52:85:aa:df:79:9b:8f:66:22:1b:83:78:ea:e7:06:
9f:e1:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:46 2025 by rpki-client