Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: nKtIMu/OrENujkLo+d2+0C1sFWDnkWTgMwxJBIYQ1wk=
Subject key identifier: BF:AB:6A:DA:CF:72:67:19:42:53:B4:6B:1E:A1:16:77:AF:61:29:92
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 019768BC306D9D638A8CA6B98EC4321B711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 07DE
Signing time: Fri 13 Jun 2025 10:00:52 +0000
Manifest this update: Fri 13 Jun 2025 10:00:52 +0000
Manifest next update: Sat 14 Jun 2025 10:00:52 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: IfMCuGnBJtesQL47G2fkzgkmNxj1GWP5L4nQQ5zwUFc=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:30:6d:9d:63:8a:8c:a6:b9:8e:c4:32:1b:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Jun 13 10:00:52 2025 GMT
Not After : Jun 14 10:00:52 2025 GMT
Subject: CN=bfab6adacf7267194253b46b1ea11677af612992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:a7:9a:af:c4:f5:7c:9a:6f:e3:ee:9a:06:
43:e6:6c:32:01:a5:28:e2:61:6b:a4:60:7c:6b:ae:
8a:33:4c:7a:17:61:7a:96:94:20:65:7e:f3:05:b5:
3f:ac:50:8c:d6:0b:8d:f3:20:74:f7:cb:4c:8d:c0:
94:6e:07:22:35:db:a3:2f:f9:32:c6:28:22:43:fb:
85:ff:dd:49:5f:f1:c9:8a:6a:25:10:1d:1e:d0:01:
77:ff:5b:fa:c7:4f:1f:f6:53:4b:4a:82:ff:a9:d6:
28:7e:02:fd:10:82:69:ec:78:f4:00:0f:32:d1:cf:
9e:1c:2d:8f:32:39:47:47:de:2c:13:5a:cc:f6:75:
10:ef:46:50:58:e0:d8:ee:97:95:73:b7:b6:d2:6f:
bf:74:21:71:73:5f:0e:07:03:0b:d1:2b:7d:ce:e8:
ed:11:bf:96:30:ab:f2:24:dc:c3:6f:d1:3b:e6:7e:
58:bc:6b:b1:ad:18:52:50:1c:97:d2:2e:ad:29:12:
05:d5:52:33:c4:43:1f:8b:79:9e:6f:2f:c1:55:a2:
41:6d:94:3e:18:9a:e9:6e:5a:4f:82:d7:10:96:a2:
4c:52:9e:24:af:8d:dd:8f:81:36:78:54:81:5c:16:
aa:0b:b4:1a:96:7d:d5:a2:92:57:2f:e6:50:b7:e4:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:6A:DA:CF:72:67:19:42:53:B4:6B:1E:A1:16:77:AF:61:29:92
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:08:c4:0c:08:cc:2d:67:41:67:97:d4:79:1d:3e:35:f0:
0a:99:11:43:c1:1a:39:07:33:d6:75:cc:6f:fe:b3:c6:62:a8:
39:12:c3:62:f5:91:7b:6d:88:16:5f:f0:3b:ee:cb:38:3e:93:
d2:7c:72:68:6a:6a:6d:3b:9e:59:1b:bf:2a:3d:d7:52:06:71:
20:6f:b9:aa:31:5e:74:93:b8:77:9f:a2:d0:1f:6b:31:23:88:
59:75:16:66:ac:22:06:8c:4c:f0:a7:89:ac:bf:63:a8:9d:fe:
16:80:f9:3f:2b:f0:93:c8:96:51:72:fc:2e:95:1a:5b:e1:d3:
9f:1c:27:3f:ad:e1:93:e5:75:d5:6b:5c:50:40:73:09:66:48:
54:7e:b6:58:1e:a9:5e:c9:ed:04:fd:42:fb:ee:2d:dc:a9:26:
52:d4:8b:f5:18:10:f0:53:7b:eb:35:f3:25:55:e7:22:19:89:
7a:ca:7d:d8:3d:93:4d:c7:23:72:62:59:99:57:11:e3:80:4c:
31:b5:c0:c8:ef:60:80:c1:50:16:f0:64:0b:0a:e1:78:5b:f4:
60:31:11:5b:ed:2a:5c:cf:ad:07:35:0a:f9:b7:5d:ee:55:77:
a1:34:fa:4c:36:e8:a5:51:83:82:e8:ff:9a:9a:69:2c:e2:a8:
65:bb:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:19 2025 by rpki-client