Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: idvM8Q2aw60L5roTJUnohZl0WpNX48knrRMxzd9TULg=
Subject key identifier: 00:F6:6D:B5:8B:3E:AA:F8:B0:11:59:5D:6D:AF:99:67:EB:14:D5:EE
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 01975800358096DDCF6D523F4F8D40642B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0191
Signing time: Tue 10 Jun 2025 04:01:38 +0000
Manifest this update: Tue 10 Jun 2025 04:01:38 +0000
Manifest next update: Wed 11 Jun 2025 04:01:38 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: jgMgeYFCvZkwk46N7E/JO0wmftwChMocyfZqXmcR1U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:35:80:96:dd:cf:6d:52:3f:4f:8d:40:64:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Jun 10 04:01:38 2025 GMT
Not After : Jun 11 04:01:38 2025 GMT
Subject: CN=00f66db58b3eaaf8b011595d6daf9967eb14d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:10:b0:12:ad:14:95:a5:87:74:b0:c3:02:
24:0d:52:2e:cf:b4:8e:5b:80:a3:53:a1:81:bc:11:
88:bb:71:b6:fc:45:0c:7b:65:f8:30:7f:1b:4e:8d:
5f:af:75:ba:64:94:6e:e9:6d:48:c1:6a:8d:cb:42:
9f:2a:15:88:d0:99:eb:d1:95:3b:dd:29:3f:0e:74:
8a:e9:1f:e7:9a:77:2f:7c:78:a5:34:87:de:fc:74:
a0:b7:84:42:85:8a:61:6b:e5:57:e8:55:a0:fd:ea:
31:a3:39:1f:14:0f:d7:b8:22:43:4b:58:4a:7a:a7:
ef:ef:32:e6:0e:04:ed:13:e7:85:fc:83:a1:76:53:
f5:56:8d:f0:af:51:70:01:0b:e9:78:c0:0d:35:6d:
99:86:aa:a4:c4:f9:82:11:fb:98:a9:df:e5:a1:ed:
ed:ba:81:bc:51:f5:37:4a:a5:03:00:15:51:27:16:
94:70:9d:94:2b:47:48:0c:65:14:98:af:28:83:b4:
6c:51:b5:1e:34:dd:38:06:15:96:e7:54:fb:5f:26:
61:52:ca:53:88:8e:09:60:33:a2:4a:6f:ff:ca:f8:
88:95:28:24:12:33:33:71:84:97:da:6d:87:99:36:
be:0f:a3:aa:65:f3:44:b7:d9:a9:78:dc:7f:a9:4f:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:6D:B5:8B:3E:AA:F8:B0:11:59:5D:6D:AF:99:67:EB:14:D5:EE
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2e:d0:e4:c2:88:0e:59:04:c9:fc:2d:d9:65:3c:17:4c:16:
ad:e4:d7:97:45:bc:5b:fe:87:d1:2b:c3:46:84:10:b1:9e:84:
c3:0f:e4:b7:5e:b7:6a:fa:e1:06:c4:2f:41:be:98:d7:b8:e4:
91:39:36:b4:83:b5:1c:85:5b:b9:8b:d3:66:de:34:33:d4:33:
3e:3a:58:a5:4b:30:bc:7d:3d:73:10:70:1e:6d:8d:ca:3c:56:
a8:90:21:1a:5f:e6:cf:02:d9:92:74:7e:ae:aa:13:d1:a6:b3:
87:be:dd:8c:9b:ca:4b:20:df:08:6c:4a:dd:78:a9:2c:f9:6c:
df:14:89:0f:c8:93:53:8c:2d:a4:26:1f:07:7f:23:6f:10:5e:
7e:99:d6:24:d9:09:15:e2:b6:83:fa:84:1d:ee:ae:3e:f2:44:
7b:5f:ec:3e:0f:f5:fa:1a:be:a5:70:15:f0:9f:e2:f7:5d:77:
62:49:82:34:b9:f6:72:da:af:e7:0f:87:38:10:a7:7c:73:d3:
8b:64:a1:d3:42:c9:9d:7e:9c:cc:eb:d0:83:3f:90:14:82:6b:
7d:fb:f9:86:5b:bd:8a:3b:b2:3e:76:6c:f5:26:76:2d:c2:e9:
94:1f:71:71:a3:d9:fd:e2:1c:a0:57:7c:5e:89:9d:24:9b:a7:
dd:5e:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:13:00 2025 by rpki-client