Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: 6xKpN0eEzS4kXmNASjnZE4cYynKx1I/OoTjdV6K9JF8=
Subject key identifier: B7:09:E1:1F:6B:09:AD:EE:A6:86:CC:77:6D:14:69:C9:34:E7:CF:A6
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 01976F631CCE8078EBAF8A935B3311211C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 17:00:55 +0000
Manifest this update: Sat 14 Jun 2025 17:00:55 +0000
Manifest next update: Sun 15 Jun 2025 17:00:55 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: XyFgflOzjV8qosgNdDikJ+nX9mBgEbWKGujp44kVsc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:1c:ce:80:78:eb:af:8a:93:5b:33:11:21:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Jun 14 17:00:55 2025 GMT
Not After : Jun 15 17:00:55 2025 GMT
Subject: CN=b709e11f6b09adeea686cc776d1469c934e7cfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:4e:73:7c:e3:60:3e:71:ae:cb:ed:7f:0a:
f1:45:8c:d2:32:7c:88:0d:d2:82:59:e3:47:7d:56:
68:ca:a0:cd:89:a7:f7:18:93:86:0e:a1:ea:1d:9a:
cc:93:9e:7e:7b:12:e7:08:2f:3f:29:89:7b:70:c2:
f3:e5:88:23:33:ea:37:e7:1b:91:ab:ff:49:34:d0:
89:0e:d6:94:91:76:ea:33:55:b8:93:89:8b:10:fa:
df:11:3c:b1:bc:76:a3:a6:70:ef:ee:33:54:08:f9:
34:bf:25:51:44:29:2a:56:a4:bc:fa:e3:66:cd:b7:
d5:94:82:4b:36:ba:d3:f9:b0:67:42:d5:2f:66:c2:
93:44:30:fc:c7:ac:58:b5:56:88:bb:f8:90:ed:b6:
6b:32:96:67:c2:29:2c:1b:6d:56:ab:9a:62:29:c4:
b6:ca:99:c0:39:51:d6:50:95:9f:29:6d:cd:56:11:
83:df:4f:54:f1:19:98:aa:4f:f0:d5:a8:ab:a8:55:
60:92:ec:2a:b4:b4:47:ca:a8:fa:d3:37:1b:32:87:
72:0d:f7:55:65:06:06:91:a7:2d:8b:ff:21:e5:ef:
10:50:f2:b5:55:a2:cc:bb:6c:55:d4:06:2d:24:ba:
5a:0e:80:19:46:4f:81:09:a3:54:bc:3e:5d:3e:d5:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:E1:1F:6B:09:AD:EE:A6:86:CC:77:6D:14:69:C9:34:E7:CF:A6
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f0:5e:bb:70:b6:31:42:07:71:37:64:59:da:b9:b7:f4:58:
69:3b:4e:e8:ab:1d:b5:13:2f:63:52:b5:ed:8c:22:b3:25:9f:
d2:a3:88:4f:1b:94:f9:e8:3e:2a:e9:90:ab:43:f7:e5:4f:92:
08:ff:f8:5d:53:c6:e5:fc:fe:2f:ce:93:e4:cb:d1:3f:ea:a2:
8c:5e:12:15:e3:d3:68:82:32:c3:e0:60:ff:df:cd:a3:56:72:
9c:d5:26:ec:8d:cf:06:f2:ac:03:98:57:71:61:33:a3:a5:9d:
01:c0:36:5e:69:ad:f0:a6:fe:42:f8:1c:c6:ec:01:13:9e:b8:
74:4b:95:92:64:72:aa:00:5f:cd:c8:0b:24:46:6a:81:4c:4a:
a4:aa:e5:15:04:59:15:ec:ce:90:23:6e:f2:4c:55:b7:cd:42:
4b:d6:72:af:f2:7a:f5:f4:2a:6b:bb:c7:27:48:0d:b6:d6:46:
1b:94:04:7b:03:43:eb:eb:77:29:b7:0d:3b:40:24:6b:25:e2:
2c:db:eb:40:dd:33:e3:7b:a7:6a:3e:08:a5:96:6f:d8:c7:d3:
a5:76:33:d2:17:3e:82:5e:04:5b:5b:1c:36:f8:5f:ee:d4:2c:
69:4f:6c:2e:59:c8:c6:68:f3:0c:55:b2:ee:04:8e:2b:f0:1e:
a9:37:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:58:13 2025 by rpki-client