Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: Odt26NTXUxDrDOuB3In7jIjzHbt1uoeurvKklCBJjs4=
Subject key identifier: 72:4C:9C:F8:DC:C9:5C:C6:83:1D:F2:EB:74:2F:D7:5D:1B:B2:C1:5D
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019756113C271A8C78F15597BB3D12281420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0190
Signing time: Mon 09 Jun 2025 19:00:59 +0000
Manifest this update: Mon 09 Jun 2025 19:00:59 +0000
Manifest next update: Tue 10 Jun 2025 19:00:59 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: vq418Lm+p+OXLiYqUEC1Ipn8F8Via2yXBdcwak0OhGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:3c:27:1a:8c:78:f1:55:97:bb:3d:12:28:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Jun 9 19:00:59 2025 GMT
Not After : Jun 10 19:00:59 2025 GMT
Subject: CN=724c9cf8dcc95cc6831df2eb742fd75d1bb2c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:cf:7a:ac:4f:47:16:4f:c5:58:2c:48:73:
62:a2:6b:5e:14:52:0e:dd:40:5a:68:38:87:2c:c8:
97:0a:f3:49:8d:ea:8c:32:bc:f1:4b:df:fe:c9:92:
37:8e:31:6b:20:57:20:12:40:97:66:d2:55:61:bf:
f2:7d:58:71:7a:8e:ec:27:b2:c4:3e:7d:2f:08:63:
81:9d:17:4f:cf:4c:a7:2e:0c:ad:33:7b:e5:58:8a:
d8:29:7f:0f:c2:dc:5a:f1:b8:f4:45:26:86:b8:0a:
68:c0:cb:b5:ff:a6:67:12:19:b2:ac:9d:1f:11:fe:
c5:e6:7d:50:39:c9:92:f9:c6:80:e1:a7:a6:da:53:
b8:63:6e:84:b5:77:5e:0c:c5:b6:92:a2:d7:46:dd:
05:41:b2:e3:dc:13:81:9c:21:45:71:2d:19:8d:c5:
d8:b5:20:46:64:fd:61:73:71:6e:77:ec:b9:9f:cc:
59:ef:14:42:44:1f:d5:2b:ca:8c:1e:a5:59:02:3f:
2d:66:1c:12:4b:52:bb:3f:b5:e9:61:df:94:c6:5d:
5d:de:c5:32:75:f6:cb:9e:a3:dd:f1:1f:95:f3:91:
24:50:46:c5:d2:bb:c8:19:00:d3:c5:58:b0:0e:f7:
ab:19:60:bf:9f:10:d0:4b:c2:97:09:d9:e8:f9:68:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:9C:F8:DC:C9:5C:C6:83:1D:F2:EB:74:2F:D7:5D:1B:B2:C1:5D
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:c9:fb:f0:cc:4c:bc:7c:c1:59:dd:eb:1b:64:3a:cb:d7:
73:4f:da:f8:28:ae:af:b8:bf:b8:5c:fc:bc:27:74:ab:76:3c:
81:85:74:c8:38:5d:13:0b:8d:74:48:1a:c9:9a:46:ef:fe:5e:
08:f1:df:26:0a:c8:92:c1:5d:12:b9:12:31:f7:be:c5:bb:bc:
38:37:e5:06:65:94:13:f3:b9:b7:4c:6c:af:bf:ef:87:ab:e6:
7f:51:c5:fe:98:2f:91:74:04:df:45:af:7a:a1:fd:c0:c6:a1:
a3:73:d4:eb:90:a3:33:f4:be:50:11:9d:76:0c:68:19:0c:3b:
56:50:23:9e:9c:6f:ab:11:53:57:91:b1:91:70:8b:34:54:8b:
26:33:85:8a:40:e1:48:7f:b8:0b:95:92:6a:c4:7d:12:f4:01:
1e:d6:89:89:dc:2b:19:48:69:10:3b:7d:a1:41:d3:1c:e9:5c:
a8:fa:bc:ed:66:89:d6:56:8f:60:b4:30:4e:7c:77:a3:bf:c2:
76:13:96:eb:2d:00:16:27:37:2d:d0:70:fa:06:77:99:a1:5e:
a1:53:0e:f2:0f:b7:0b:a7:52:1b:04:19:86:9f:55:a2:07:03:
95:9f:1c:c3:50:d7:b7:f9:60:c3:87:c0:d9:a5:bf:24:b0:4c:
3f:e0:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:20:32 2025 by rpki-client