Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: 3mHY5J4LCyR/I0t3vxe19LvGI0XIzDZGzbJ2Rn94MzM=
Subject key identifier: 76:CB:99:8E:47:3E:08:A9:94:F9:5D:30:50:9F:81:58:41:AC:3D:FF
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 019674549861B30E9FF09F4DF5D54A22BD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 23:00:23 +0000
Manifest this update: Sat 26 Apr 2025 23:00:23 +0000
Manifest next update: Sun 27 Apr 2025 23:00:23 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: 5CVyue6fFhc/KpxaVsju2jqt0Y/Pa/0uNm/ZX8Omxcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:98:61:b3:0e:9f:f0:9f:4d:f5:d5:4a:22:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Apr 26 23:00:23 2025 GMT
Not After : Apr 27 23:00:23 2025 GMT
Subject: CN=76cb998e473e08a994f95d30509f815841ac3dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:c9:70:37:55:cb:02:68:58:9f:35:d4:7f:
b1:17:87:94:77:4c:8f:c5:09:83:fe:74:07:c9:e7:
05:e3:71:31:5a:54:97:02:4f:3b:81:86:7d:87:f1:
ff:d8:fc:43:b8:84:80:2d:c8:91:88:75:05:99:f4:
f7:74:57:8c:d6:ed:c0:16:bf:65:e2:ad:38:4d:83:
8f:d5:52:45:c3:66:52:25:92:48:38:d6:e6:29:79:
0d:54:7b:1c:ce:94:6e:86:cc:44:5a:d4:19:a5:65:
3d:08:84:07:ed:f0:9a:5e:5b:20:fd:ae:7a:0f:81:
a6:f3:bc:ca:df:0f:f7:d4:bc:5b:fb:5e:15:2b:b0:
9e:9f:b9:a1:05:47:87:b6:0c:65:b6:37:e6:9f:70:
f4:79:a1:49:63:56:6b:31:65:ef:02:b9:df:a1:20:
30:d0:a2:fb:ec:1e:ad:48:06:cf:4e:64:01:c6:dd:
75:2c:9d:c7:99:00:ce:82:34:f2:d8:48:23:dd:9d:
de:a2:1d:8e:7f:92:d1:e1:84:71:63:0c:6d:7e:33:
e9:46:7b:c7:a9:1a:98:7d:f4:ad:e4:63:5f:d5:ee:
65:b6:c4:01:63:c6:62:aa:49:28:1a:8f:c1:2c:73:
25:ee:04:02:3a:0f:61:14:4f:dc:6f:66:b5:6f:68:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CB:99:8E:47:3E:08:A9:94:F9:5D:30:50:9F:81:58:41:AC:3D:FF
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:4a:58:34:0a:b3:5e:75:4a:f0:2b:21:0a:c1:42:30:07:
05:54:5e:45:5e:73:42:f5:2e:79:67:7b:b6:aa:70:98:de:ba:
0f:a3:22:00:b2:00:66:16:38:16:6d:e1:94:6f:cd:49:f0:f4:
a4:67:2b:f1:18:68:02:0a:2d:d7:2a:2c:18:41:4a:7f:0a:18:
6f:7b:49:49:44:eb:6d:44:0e:a3:60:af:f5:bf:ae:e5:96:a1:
fe:f9:7a:ed:e5:c9:27:f2:50:f8:95:09:3c:54:2a:1c:7d:ee:
73:bf:15:68:c1:8d:09:7b:44:b8:31:07:a5:37:93:94:9c:91:
5b:5f:4a:70:1e:06:65:76:0d:2a:96:b5:25:18:c4:79:39:a6:
58:43:7d:61:2f:35:9e:bb:01:50:18:7c:7d:c8:51:c3:ba:4b:
f6:e0:ee:30:77:34:a3:ac:6b:60:b1:78:25:ef:c5:b8:d7:91:
83:7b:d4:35:a0:1f:6b:16:35:bd:74:f4:a1:82:94:4f:75:30:
fb:8e:54:02:97:0d:04:73:f9:64:ed:81:02:29:56:97:90:3e:
6d:ae:ce:27:99:a2:fb:bf:2a:c5:de:b8:1e:ce:14:67:9d:e6:
8d:f4:50:24:5a:2f:df:94:2c:02:6e:c6:7e:74:9b:b8:ca:93:
80:79:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:45:37 2025 by rpki-client