Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: u1ZwdZysM19BuvLTeE62+eOK4vwsqMxCvtSUlczM4Kg=
Subject key identifier: D3:3B:C2:05:06:E9:B0:6E:50:E4:FC:48:23:6D:FC:D0:BC:AD:09:85
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01984B54609303C48A69139AD43CBB15D7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:01:17 +0000
Manifest this update: Sun 27 Jul 2025 10:01:17 +0000
Manifest next update: Mon 28 Jul 2025 10:01:17 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: V5F5wrNK5uLnDEUr2U60DH2mRQrUhylG3D0TBuS9S98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:60:93:03:c4:8a:69:13:9a:d4:3c:bb:15:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jul 27 10:01:17 2025 GMT
Not After : Jul 28 10:01:17 2025 GMT
Subject: CN=d33bc20506e9b06e50e4fc48236dfcd0bcad0985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:10:3a:7d:ae:e9:1c:bf:fa:30:65:da:60:
81:f5:41:71:13:bb:5e:68:18:f4:98:b4:3c:39:58:
28:35:d2:b9:cb:6f:df:58:79:84:d0:4a:2a:0f:31:
42:55:e7:97:5a:f2:a8:b1:09:a5:ac:e8:81:9a:67:
2e:ef:7d:01:98:61:5b:76:72:14:d5:d9:84:92:44:
e0:c6:3c:ff:4c:ae:8f:ee:3f:f8:c1:3c:22:dd:da:
1c:fa:6d:c0:cc:c9:52:97:1e:06:02:b1:9c:dd:95:
c4:65:37:a5:22:3d:70:62:4e:51:01:4d:ce:0f:70:
7b:f3:e0:f6:03:b3:38:f7:6c:39:74:ee:39:3f:ad:
5e:6e:0b:76:61:d1:e8:bf:25:2d:ee:8e:51:2f:48:
6c:de:fc:05:43:79:8a:7b:51:24:a5:3e:bc:19:8c:
59:67:3a:b9:58:8e:cd:74:e6:f4:49:57:34:49:f0:
89:b7:94:1b:e4:37:30:2b:17:77:8e:4a:12:8d:4d:
28:5d:76:9b:fa:cf:3b:57:e4:5d:46:09:e7:43:de:
95:ff:51:92:e8:82:e7:1c:60:b8:63:82:da:56:c2:
92:36:d8:02:7e:98:40:b9:f3:1f:a6:dd:e8:18:80:
09:db:1e:b0:73:fd:80:3a:d8:32:85:11:75:30:4b:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:C2:05:06:E9:B0:6E:50:E4:FC:48:23:6D:FC:D0:BC:AD:09:85
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:88:23:d4:20:f1:6e:c9:7e:59:2c:b8:de:f2:2f:47:93:73:
a6:9b:b9:2c:7b:6d:7d:c6:91:5d:ab:d0:33:00:c9:bb:d8:f4:
e9:6a:68:e2:57:e3:4e:f1:74:a5:05:e8:8a:c9:58:2e:d9:ef:
b6:67:80:a5:11:41:1e:90:71:92:7a:19:53:73:75:3c:06:37:
66:4b:d0:8a:fa:19:04:9d:c7:62:6e:02:b1:32:c6:b6:8b:1c:
90:7e:50:9a:ea:8e:5a:12:fc:b6:49:61:a9:4b:6c:0c:f9:92:
9c:c9:9d:f9:c1:88:3c:b8:8a:89:52:e7:2e:8d:e4:9f:41:65:
c5:17:3e:2c:be:ae:1c:06:85:2b:34:0b:f6:a2:4f:39:57:b5:
82:8a:c9:ae:4b:1d:5a:65:93:a0:64:44:86:5b:5a:be:eb:6f:
88:45:9e:25:93:47:0a:56:d0:9c:84:16:fb:c7:44:e0:18:c5:
cb:c7:ac:d2:5e:4b:6b:25:d5:ee:e1:be:28:05:cc:b5:4a:97:
59:50:c3:42:a0:bd:1d:3b:82:7b:75:32:a4:02:f1:6b:bd:47:
20:8b:ee:a1:34:57:f0:cb:ba:79:34:91:ad:f9:ca:7c:01:20:
2b:47:31:45:2a:3c:c3:f1:47:ac:25:25:49:75:e7:f7:e8:c8:
e2:0d:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:39:06 2025 by rpki-client