Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: B2otX260yJrpZCFJpsf+NjajvArByWwov5ctrS+gDkM=
Subject key identifier: 41:C4:D2:A6:F0:1F:D7:A7:AD:AD:D1:58:76:BE:78:35:54:96:02:63
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 01974667320FA2684CA0EFEB597184AB64A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0468
Signing time: Fri 06 Jun 2025 18:00:57 +0000
Manifest this update: Fri 06 Jun 2025 18:00:57 +0000
Manifest next update: Sat 07 Jun 2025 18:00:57 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: uX5H1nSFG16cTlplt+b3ZAeIVkhxuW3eaO43gR/Ek08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:32:0f:a2:68:4c:a0:ef:eb:59:71:84:ab:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Jun 6 18:00:57 2025 GMT
Not After : Jun 7 18:00:57 2025 GMT
Subject: CN=41c4d2a6f01fd7a7adadd15876be783554960263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:d7:8f:9e:03:bb:e0:88:b2:f6:b6:38:c1:
af:69:fb:c6:28:08:2e:a6:f9:a4:07:af:85:e1:a9:
47:c8:47:31:d5:9d:ca:d3:34:3c:99:87:4a:32:6e:
4b:20:f3:00:d3:7c:17:68:b6:40:c5:b9:21:8d:1b:
af:ce:d9:24:e4:f1:41:4b:63:18:1a:0c:e4:c5:22:
33:b2:21:1f:1f:87:3a:e6:22:01:ea:21:3f:d4:b0:
b9:db:94:e7:d1:02:e1:a7:a3:12:39:74:fa:1a:94:
8f:ea:e1:3c:6a:ca:7f:3e:21:72:2d:93:8e:1a:d0:
92:07:0b:68:aa:4e:a6:1d:56:83:a9:72:43:dc:cd:
14:fa:25:d2:15:b1:b9:c3:e0:c5:7e:94:e4:08:b2:
02:6c:62:55:ef:8f:d1:6d:81:2c:8b:92:30:5b:1f:
d3:2e:d3:57:29:3f:ff:85:a3:2a:87:59:26:31:f2:
e6:d7:f8:d1:dc:e8:c8:57:8d:58:ec:67:d7:0f:3d:
b7:44:bc:34:24:24:1e:a3:4b:c0:05:73:b9:82:b7:
35:96:47:16:13:be:9c:58:96:4e:ca:f5:cb:30:67:
ed:e2:55:40:d4:ba:c4:40:a9:b2:15:2f:71:e1:41:
40:e4:ae:34:dd:57:ed:bb:bc:e0:9e:85:70:80:5b:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:D2:A6:F0:1F:D7:A7:AD:AD:D1:58:76:BE:78:35:54:96:02:63
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:5e:cd:21:f8:9a:5d:ad:12:14:35:9a:93:67:42:bc:48:
e4:0a:a1:31:c4:e1:3b:eb:21:e6:36:13:ba:ac:5e:7a:d9:fc:
e7:c0:19:04:bd:86:3b:90:cf:25:4c:9d:b1:d9:11:e4:d2:c1:
3e:c3:a6:95:79:a7:b4:d4:96:97:1f:ba:a8:6e:b1:fc:e8:35:
87:96:b9:d9:79:6d:bf:14:6c:8d:02:e2:1c:9d:ea:39:92:e1:
95:40:5f:4b:c3:d5:39:fb:a3:f6:22:19:d4:6c:e0:e0:52:55:
ea:a7:00:b4:53:ae:0c:c5:04:96:40:e3:c7:1f:d4:0c:7a:b1:
16:7f:f3:70:df:f3:9f:3d:4a:58:4b:04:0c:f0:d9:ff:4a:07:
18:71:90:76:88:28:c5:d0:8c:9d:7d:5e:4a:5c:53:61:84:40:
a3:56:71:dd:d5:22:c9:d9:e3:36:bc:4c:7d:ac:ff:6c:8b:3e:
e8:81:2a:02:a1:95:fd:67:a5:c1:c4:c7:3b:14:a5:27:10:ea:
62:8e:a6:f7:07:f9:56:d5:24:45:96:47:0c:d1:b8:53:8f:b4:
22:dc:ce:72:c1:6d:b0:cf:76:c6:75:d4:3c:59:1c:61:f4:52:
bf:34:8c:b6:1a:d7:9c:f1:61:5d:4a:94:24:19:35:90:e0:99:
46:12:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:28 2025 by rpki-client