Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
File: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft (raw, json)
Hash identifier: zJ/itPxR6Go8MTqLvwGAhtsNDcRi8OIwuBBSO9j4yP0=
Subject key identifier: 3C:3A:54:F4:37:72:E3:E8:AB:37:12:0E:23:98:89:00:04:9B:0A:EE
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Certificate issuer: /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial: 0196A8795CA12DC1FF90D9A72C6D9089EA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
Manifest number: 0FB6
Signing time: Wed 07 May 2025 02:00:47 +0000
Manifest this update: Wed 07 May 2025 02:00:47 +0000
Manifest next update: Thu 08 May 2025 02:00:47 +0000
Files and hashes: 1: 1g597y06foQbOFcS_h93SwkhNOQ.roa (hash: TZdC67NT8fkd1drCN7n7TEHOt/q1UG1cqUfoMBev2T4=)
2: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl (hash: PUhyEgdgANWLsHrMv2GEvZJWrdjAfmpKgvHyuGsgA90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:79:5c:a1:2d:c1:ff:90:d9:a7:2c:6d:90:89:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
Validity
Not Before: May 7 02:00:47 2025 GMT
Not After : May 8 02:00:47 2025 GMT
Subject: CN=3c3a54f43772e3e8ab37120e23988900049b0aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:84:5d:9f:0d:c2:ce:cb:42:0e:65:32:dc:
53:fc:98:58:c7:cf:7d:74:79:61:44:06:13:41:d0:
2e:a5:b5:0d:12:62:c7:66:f2:31:c5:f3:b9:55:b5:
65:a1:0d:7c:c9:de:17:86:a3:c8:9d:5b:62:55:ec:
9a:a0:d7:33:d9:18:f3:43:c7:3f:ce:0b:0a:c4:77:
53:72:93:08:58:36:29:75:1a:4f:8e:34:ba:af:5d:
b1:16:09:43:a6:55:b0:c0:0e:2d:83:7c:11:bc:e2:
74:be:11:ca:d3:c6:c9:a4:86:3e:19:32:90:b1:80:
91:d6:ad:66:f7:a1:b7:d4:95:9a:7f:6e:ec:d1:13:
6f:5b:b3:cf:2c:b4:b4:50:db:83:ef:7d:78:16:bb:
cd:98:21:4e:1c:ec:e6:b6:45:5b:46:5d:76:00:af:
c6:03:7d:39:56:cb:7a:e7:9e:f1:c7:a3:51:6a:64:
fa:3a:06:74:fb:c7:ba:62:02:c0:92:39:8c:33:f1:
67:89:b3:79:93:0d:07:e1:0e:ce:a8:1c:1c:a5:cd:
dd:1f:a1:aa:3a:3f:22:be:34:d2:39:17:aa:c0:5d:
9a:1e:c9:8d:ec:4f:00:04:b3:2a:fa:6d:2f:6c:aa:
0c:84:25:bb:45:58:92:74:17:5e:fa:5a:79:df:ca:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:54:F4:37:72:E3:E8:AB:37:12:0E:23:98:89:00:04:9B:0A:EE
X509v3 Authority Key Identifier:
keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3c:cd:b9:bf:d6:a4:ce:30:fc:be:ea:a5:a0:d2:8c:d8:1a:
5d:d1:e5:ed:81:16:46:41:40:7c:34:f6:69:17:2c:24:30:0e:
e6:07:df:75:78:d1:5c:6f:0b:e1:c6:71:39:84:8a:4a:01:e1:
6a:3b:c6:3f:e5:50:b1:c9:6c:37:64:c3:52:eb:30:d9:24:9a:
a3:49:c5:3d:57:e3:9e:0b:50:34:a4:f7:95:79:29:a3:20:1b:
4e:44:c0:cb:b0:c3:9e:9a:42:82:2f:b6:a6:0c:bb:8c:96:d7:
14:b1:71:4a:d9:0c:53:66:b7:29:6e:b2:3e:57:53:ab:a1:bf:
18:16:c5:22:f9:02:30:d6:9f:bf:13:a1:37:3e:42:bb:0b:f5:
4e:0f:34:98:62:95:5a:06:54:39:eb:47:16:92:6d:d2:fc:68:
70:8a:a5:7d:a6:58:63:ab:f3:12:cd:5b:21:fc:2a:2b:2e:d9:
fc:4c:3b:71:a0:97:dc:2b:30:ea:4e:f3:78:c5:4b:9e:ef:5f:
a0:b3:0a:3b:6b:0b:5b:c0:76:ff:f0:5e:14:e7:4b:10:f6:bc:
9e:23:01:f9:cb:f1:2a:13:1d:f0:48:49:68:bf:aa:ac:6c:65:
06:9b:e7:2d:54:f9:fd:15:0e:eb:a0:04:e4:6e:9a:40:80:97:
74:50:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:29:23 2025 by rpki-client