Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: WO1r+JwVL3oaYMmSq8TAxGKUzPJTxEcVWoG+q5v9GSA=
Subject key identifier: 8B:A2:E5:29:BE:75:20:C6:AB:EA:D3:2B:B1:04:21:60:98:C4:52:F1
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 01965500ADBA40202C428C816451E8729DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:29 +0000
Manifest this update: Sun 20 Apr 2025 21:00:29 +0000
Manifest next update: Mon 21 Apr 2025 21:00:29 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: K7XWMsJnSo66zJyKH69kAip2ApQQ+t1Uju9hTMOzMmY=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ad:ba:40:20:2c:42:8c:81:64:51:e8:72:9d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Apr 20 21:00:29 2025 GMT
Not After : Apr 21 21:00:29 2025 GMT
Subject: CN=8ba2e529be7520c6abead32bb104216098c452f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:cc:3a:cd:3e:06:74:90:4b:dc:e0:9d:7a:
26:a7:5b:b4:54:e9:f8:87:64:90:c0:da:82:79:f3:
6d:15:4f:a2:e6:2d:ae:ad:92:d3:71:78:03:88:0a:
05:a4:bf:93:d3:c5:30:b7:24:84:8a:49:c3:ff:39:
bf:32:81:09:63:39:fd:a3:4f:97:c3:36:fd:8c:5d:
45:77:30:64:ba:43:21:be:97:77:a4:c6:a8:5d:33:
08:bb:e0:ec:dc:88:29:3d:90:c6:c4:fb:ab:dd:99:
5c:2d:f1:d3:52:13:b3:70:f4:c1:17:aa:d8:0b:a6:
de:5f:88:b7:d1:f3:23:ee:9c:41:58:b1:dd:2f:5c:
be:76:17:db:c4:ab:c7:16:31:e9:af:00:f8:63:0e:
a8:0c:fd:48:8e:85:db:44:18:b8:9a:63:22:a7:53:
f1:be:0e:29:21:dd:21:2f:81:69:13:d8:ec:9f:6a:
2b:76:37:1e:ad:21:dc:99:74:e0:58:6a:c7:dc:24:
95:63:90:91:42:b5:9c:b4:e5:ed:0e:da:90:62:f1:
26:8a:13:ea:3f:cc:62:9f:bf:fe:38:8e:42:55:1d:
b2:6a:3a:2b:59:0d:d4:9a:cb:64:cc:7d:4d:54:2b:
da:73:87:24:46:a0:fe:fd:70:4a:db:53:a3:54:d4:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:E5:29:BE:75:20:C6:AB:EA:D3:2B:B1:04:21:60:98:C4:52:F1
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bc:af:94:58:b7:21:61:dd:a5:95:32:16:41:3b:90:27:d0:
18:43:c5:88:27:6a:80:9e:b3:4c:d8:4b:af:59:80:af:a1:41:
f3:43:17:c1:d7:8f:3a:1a:0d:54:cd:25:b1:3d:9e:9e:28:7b:
85:b6:cb:aa:8c:f9:60:56:c6:75:a9:2d:f3:a4:de:0a:a9:a4:
bd:90:30:73:b1:33:78:d1:9a:95:83:aa:bc:cc:cd:f5:fa:76:
ae:d2:24:8f:7c:65:f5:36:3f:73:88:c9:e7:9c:e8:2a:fe:d6:
88:ed:bf:b8:07:7c:38:b1:0a:91:3b:51:cc:10:cf:a2:71:bc:
ec:2e:5b:73:fc:d6:8c:50:58:fd:2a:ee:78:b9:f2:a2:e5:90:
58:50:cd:cb:cc:d7:b6:a2:db:6a:99:ab:22:db:cf:21:66:9d:
6e:a2:80:28:1e:9b:48:b5:ad:bc:e5:bf:1a:54:b3:f0:16:7f:
9c:0f:61:bd:11:ac:4f:59:c5:a1:ad:06:1e:e6:74:75:62:5c:
61:30:f6:f6:2c:b9:be:ae:f6:76:06:d0:11:24:ec:14:37:aa:
fa:cf:f3:23:ba:53:a7:88:da:55:1a:8f:f2:28:62:62:eb:84:
85:c7:27:f7:95:e4:64:fa:f3:7c:36:10:9c:ea:0c:aa:65:e0:
aa:4e:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:22:45 2025 by rpki-client