Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: FkHQRyM2yNBJVxrRT51ZD1YoO0XPM6iI+VlYrnqdO5w=
Subject key identifier: 8F:FA:15:A2:E6:FA:7B:32:08:F9:D3:BA:EF:25:4E:E4:A7:50:00:A2
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 01964F35B4501361BAE034DFDC4A15851299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 03E8
Signing time: Sat 19 Apr 2025 18:00:41 +0000
Manifest this update: Sat 19 Apr 2025 18:00:41 +0000
Manifest next update: Sun 20 Apr 2025 18:00:41 +0000
Files and hashes: 1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: nFQ20QfJ9M/VAN8rDrHu/UzrONws1B+M3HHc635Jb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:b4:50:13:61:ba:e0:34:df:dc:4a:15:85:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Apr 19 18:00:41 2025 GMT
Not After : Apr 20 18:00:41 2025 GMT
Subject: CN=8ffa15a2e6fa7b3208f9d3baef254ee4a75000a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:7b:4d:d9:35:2c:a6:48:c3:8b:ff:a1:55:
50:a4:b9:d5:ed:f7:df:03:c3:5e:19:a8:5b:3f:98:
97:6d:72:ed:6e:6f:76:19:62:6b:d0:53:cd:42:ea:
3d:fe:4c:fd:fd:8c:4b:65:d7:a0:35:8e:a9:0d:65:
c6:cc:aa:90:bc:19:01:0f:9e:aa:62:ec:de:ca:09:
fc:7e:09:ad:e4:57:5a:43:0e:6a:71:de:09:92:d3:
ae:de:4b:cd:41:93:f2:a0:6d:1b:7a:8d:13:5f:1a:
da:e4:9d:12:91:b7:d3:50:83:27:81:c1:e2:88:80:
19:ff:a1:94:fe:f6:2a:ff:36:ef:70:35:bb:47:ce:
13:98:33:ef:8c:b3:09:94:1b:97:82:1c:99:40:80:
36:ff:d3:5e:2d:15:d7:36:2a:69:97:56:33:4d:73:
7f:04:4e:07:6e:5d:a2:0f:dc:ca:78:4b:c0:c7:f0:
c7:c6:8d:9e:f4:e0:45:67:7c:d0:14:64:92:81:cb:
66:41:57:36:d1:1b:a0:4c:60:9e:29:56:57:fa:36:
5e:9a:6f:f3:e7:ec:32:0c:87:19:a1:11:40:62:dd:
a1:86:ae:94:10:e4:73:19:2f:ad:2e:ec:12:a0:ef:
b2:ee:be:d4:15:b5:a1:09:37:4b:dc:ea:85:e7:a3:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:15:A2:E6:FA:7B:32:08:F9:D3:BA:EF:25:4E:E4:A7:50:00:A2
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ee:7a:72:37:df:73:9d:27:eb:51:2e:fd:66:3e:80:de:0b:
10:da:c7:e3:1b:17:00:15:26:6d:48:8c:2d:17:bb:c5:83:2b:
69:ab:b6:c0:16:9a:dc:53:29:cc:12:c5:84:9f:ff:54:ff:fc:
77:f1:f0:9f:37:b5:7d:4f:0e:fc:fc:1f:ea:9b:50:9b:82:89:
84:3c:00:80:4b:eb:40:ae:dc:78:c2:15:dd:fc:60:47:92:9c:
a4:fa:fa:c2:25:96:7e:14:2c:67:c0:81:3f:db:d9:c5:cf:93:
e2:78:15:7e:01:6d:c6:6e:89:ab:dc:b8:fc:54:55:8d:38:56:
e5:78:b5:fb:cc:e2:1c:2b:9c:8a:f3:75:2e:ef:5a:b2:18:fe:
c0:c6:d2:fb:3e:cb:15:82:fb:43:db:9e:49:fc:d6:55:c4:6e:
c7:f0:68:c2:11:44:43:52:5a:32:1c:38:8f:c3:0c:f1:7c:d4:
e2:53:19:15:fd:a4:bc:4a:77:2d:50:e9:b4:dc:81:10:77:de:
75:05:c8:44:39:63:e5:e2:55:be:45:8e:ce:48:d8:da:42:c5:
50:78:ba:70:69:53:91:17:b5:09:48:16:2d:b6:8e:f3:43:9d:
63:f4:12:24:60:3d:10:37:6c:ed:fa:a9:f5:77:36:66:28:c9:
f0:19:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:29 2025 by rpki-client