Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: jt9s7sZhmX2heXYQjP7ufEwn3pBJlL6ZbTajbuypPn0=
Subject key identifier: 46:BD:0A:F7:D3:AD:DB:59:C1:F3:89:6C:D4:9B:3A:03:CF:0F:9B:86
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 01976D3DBF0CB7EAAFD6862A2B02810B1BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:00:52 +0000
Manifest this update: Sat 14 Jun 2025 07:00:52 +0000
Manifest next update: Sun 15 Jun 2025 07:00:52 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: BdYEb0Y7f5rQlRuCwwpQHc/6LX99vhAsfzjZlxvXjfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:bf:0c:b7:ea:af:d6:86:2a:2b:02:81:0b:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Jun 14 07:00:52 2025 GMT
Not After : Jun 15 07:00:52 2025 GMT
Subject: CN=46bd0af7d3addb59c1f3896cd49b3a03cf0f9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:90:f6:99:19:b2:eb:28:ec:d6:47:e7:56:
af:00:ac:5c:8c:3b:80:e7:08:20:1e:b8:15:d0:84:
2d:48:f7:36:ff:4a:e5:c5:80:52:02:4b:8f:4d:82:
9d:57:c5:4d:a4:1c:71:f9:fe:29:82:56:ca:7e:e3:
74:cc:3e:8d:c3:66:c8:54:64:d2:65:41:cb:a6:ee:
03:0a:80:41:e9:05:4a:53:e2:13:7f:35:04:b8:3a:
1d:ba:11:58:d1:29:fe:63:b3:9a:fe:46:44:88:e0:
e3:ad:d8:3b:0e:c5:cc:77:f7:69:c4:7b:27:76:d7:
61:a6:f6:cb:1d:6e:af:d0:af:0c:58:be:aa:b1:e0:
9e:4b:db:29:cc:61:52:8c:71:a7:b2:6f:ee:0e:d8:
2c:db:dc:26:d8:0c:f4:10:f0:d2:01:83:9d:d5:6d:
59:6f:71:c6:90:2c:d4:16:82:d9:46:47:2c:62:54:
3b:33:5b:7a:ed:b4:2d:c4:d1:7c:b5:e1:8b:13:d2:
6b:85:c4:9c:41:35:f0:f0:a7:63:81:33:fb:b2:b3:
3c:46:66:fe:53:a5:47:18:38:18:6f:07:31:28:d0:
bd:94:0b:e3:98:ee:ce:83:e3:cd:c0:10:34:a8:ad:
96:e0:b8:32:4d:aa:f1:04:19:7e:80:a0:aa:f3:a3:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:0A:F7:D3:AD:DB:59:C1:F3:89:6C:D4:9B:3A:03:CF:0F:9B:86
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:bc:a3:b9:21:08:2a:e9:03:3c:c6:86:fd:9b:7b:af:8e:
b3:6a:f6:4f:f0:a8:74:c4:4d:e0:56:c7:92:e6:7b:d3:c1:38:
2b:4c:d9:27:00:ec:b8:7b:81:e0:50:78:f9:d0:b1:27:84:1a:
ca:ad:af:11:f7:15:11:fb:0b:2d:29:be:0f:17:8b:85:3d:ae:
c4:3b:89:94:e1:35:ba:a4:bf:33:0b:6a:7d:49:2a:53:a7:2a:
cb:aa:b8:30:b9:28:a6:bc:3b:a7:b4:42:05:79:f0:08:22:19:
3c:48:8a:51:c3:25:b0:2a:0f:3a:a3:01:90:39:f4:c7:b9:50:
ec:b3:71:f5:b6:dd:99:79:66:84:dd:db:94:36:99:73:d8:1c:
d5:c3:d7:5b:30:41:b0:86:a7:de:97:84:34:d7:c2:60:99:5a:
7a:31:04:7f:3b:31:4b:21:e2:e3:f9:79:d0:65:7e:e9:56:64:
6b:62:ea:9d:67:90:44:f9:3c:1b:54:8f:ff:da:8a:47:b8:c0:
81:34:f5:76:74:f5:26:84:dd:69:d3:b9:3d:aa:81:dc:a7:85:
94:b2:87:20:f7:20:2b:85:c7:0d:f0:29:11:8f:4d:56:d6:b9:
d6:af:8e:6b:4c:40:be:32:29:a5:1e:21:f8:d3:4b:aa:87:19:
f1:82:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:48 2025 by rpki-client