Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: qpK8TLvuNur8cLmZr+WYchO/dbc+IxawHgNj5XG6cJ8=
Subject key identifier: 35:44:58:E8:83:50:F1:B0:DF:03:87:9E:2C:0C:E3:C4:57:B5:5C:5A
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01974A7AA99CF7B8BE0282AADB5CD098F547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0BEA
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: fAZMbTWBFEMYKNEonSIe8oG9okafEWlaVJJ40fjfizs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a9:9c:f7:b8:be:02:82:aa:db:5c:d0:98:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=354458e88350f1b0df03879e2c0ce3c457b55c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:a1:82:0e:13:94:56:2b:42:77:5d:cf:83:
82:ff:8e:90:6e:70:f7:e3:99:d5:0a:bc:59:ed:e9:
3c:f1:7e:f3:5e:4e:b1:2e:a8:cd:8d:78:6c:f6:37:
92:25:94:b7:4a:7a:4e:2b:8d:9b:cd:15:86:96:e3:
f4:6b:a9:2a:f1:b0:0f:4a:71:c7:c5:dd:e5:f2:4c:
8c:8a:5e:ba:3f:a4:b1:95:46:1b:91:05:9f:3f:b1:
cd:34:7b:75:ad:84:44:7b:9b:1d:93:3f:80:07:85:
16:21:e8:71:90:bb:3e:ed:90:18:ce:e9:23:de:a3:
43:84:96:38:57:40:fd:60:d0:77:74:8f:42:2a:c4:
f7:35:f9:14:23:3a:68:6f:93:53:57:8a:fb:73:cf:
ce:42:11:ab:74:37:f1:93:1f:e5:c8:b9:a7:6c:7c:
1d:66:80:e9:d4:6b:2b:3b:5d:a1:3d:6d:61:a4:f6:
e2:44:95:bd:8a:89:67:a7:a4:89:49:c9:e4:a7:46:
8e:66:a0:11:ac:d0:1c:fa:2f:fe:9f:57:12:0a:42:
c0:89:c9:5b:4f:e1:0a:4d:9e:d6:57:d4:3b:68:08:
d4:29:70:3c:0f:5e:74:07:9c:70:35:63:bf:1b:ff:
73:25:7f:e5:85:d8:3a:64:ed:e2:2b:04:8e:18:61:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:44:58:E8:83:50:F1:B0:DF:03:87:9E:2C:0C:E3:C4:57:B5:5C:5A
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:2c:15:45:e2:5b:05:bd:e1:c7:ac:2e:07:b0:12:47:f8:
26:60:ec:bd:c0:fb:06:d9:e1:8a:7b:72:10:85:df:e4:48:34:
e9:de:cb:90:03:2f:f3:03:ab:ef:46:8f:70:b1:00:a1:e1:7d:
db:bf:93:12:d4:54:4d:7b:66:55:72:9a:0c:a2:a3:bf:a8:a4:
7e:c5:8c:51:eb:91:28:bf:3c:83:38:94:3e:50:1d:be:e4:0c:
d3:1c:98:38:0f:d0:32:25:3c:e5:3e:23:15:12:15:ad:25:0f:
9c:b1:95:32:aa:62:67:04:c1:16:13:c2:0e:c2:65:7f:b8:73:
87:a9:ab:3c:f4:31:55:36:fb:97:d9:90:8e:86:92:cf:20:78:
8d:fa:49:40:64:17:1d:ef:1f:dc:08:39:cf:b3:29:42:c6:e8:
22:f2:a0:e7:93:c9:ce:de:22:68:37:15:4d:4d:46:60:ce:ff:
ad:12:d0:01:e8:6b:12:79:61:95:39:23:02:43:a6:c6:88:5a:
df:66:c9:c3:2b:1c:d4:b4:c1:f8:92:18:0b:bc:62:18:ad:60:
99:0c:e0:6c:57:2f:e8:a8:cc:21:3a:7c:40:e4:41:ab:53:13:
28:bf:e2:98:b0:88:eb:95:9b:2d:9e:46:27:bc:e5:63:eb:72:
34:87:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:04 2025 by rpki-client