Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: mxBNqZloUXcFdFXtzOvlld31PSys3AonAkaRjYKl3fk=
Subject key identifier: 83:F4:47:13:35:FC:09:0D:4B:0E:32:41:E8:EA:E1:6F:75:2C:03:31
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 01975DCAFCD18F270629B257F872D4269D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0194
Signing time: Wed 11 Jun 2025 07:01:13 +0000
Manifest this update: Wed 11 Jun 2025 07:01:13 +0000
Manifest next update: Thu 12 Jun 2025 07:01:13 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: BWqDukwh+xOYv4izSmRK7AVTWGSRhL6xHBBbbbEBi3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:fc:d1:8f:27:06:29:b2:57:f8:72:d4:26:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Jun 11 07:01:13 2025 GMT
Not After : Jun 12 07:01:13 2025 GMT
Subject: CN=83f4471335fc090d4b0e3241e8eae16f752c0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:5d:7d:d2:bf:20:a5:4a:87:f4:1f:77:23:
4b:ce:22:91:e6:01:64:81:4e:27:6a:46:07:c7:37:
7a:f4:46:ee:5d:d6:d7:7e:57:e1:af:e6:79:d5:99:
08:32:b9:47:9e:71:88:33:4c:22:f5:3d:02:fb:59:
83:dc:d9:1c:40:35:a4:76:0d:ce:ba:d7:ed:b2:c8:
b0:02:4a:a6:76:6a:2f:ad:54:e2:b6:6e:40:86:ec:
be:24:cc:16:ba:15:91:a5:35:db:a2:12:2b:1b:14:
5a:cd:0e:ec:ce:c4:69:f4:3e:fe:cd:de:09:a4:08:
d9:93:3b:20:69:88:ed:39:06:fc:e1:d3:db:9b:f5:
4d:a8:83:f0:55:71:04:44:ee:0b:5e:94:03:a6:b8:
9e:a1:60:fc:c2:17:10:7d:bb:a4:af:a6:59:b0:56:
8a:53:3d:3b:f4:a2:77:dd:ba:f4:12:e1:3e:a8:72:
40:15:44:b8:30:fc:cc:68:4c:1f:7a:b4:73:1e:38:
67:dd:d6:4f:9a:34:7a:bf:19:4a:9d:5c:86:b4:5d:
9b:19:bb:6d:e4:d9:11:40:0a:14:ef:74:45:6d:a2:
1f:00:ce:c9:b6:75:90:53:5c:15:52:5a:27:b5:83:
0f:95:ba:85:33:b1:e3:5b:a8:7a:4f:a9:d3:bc:d4:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:47:13:35:FC:09:0D:4B:0E:32:41:E8:EA:E1:6F:75:2C:03:31
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:a6:38:61:cb:1c:9f:e0:da:6c:e0:0c:d6:31:54:49:93:
45:81:1e:e7:d3:e6:05:87:4a:55:bb:08:7e:ad:22:7c:c1:0c:
a7:df:da:26:54:94:8c:e5:de:95:b2:66:90:f7:22:f6:62:20:
cd:fd:33:63:15:2d:2f:d6:90:ac:a6:04:45:d7:7e:02:60:f6:
b3:20:9f:84:8d:e2:f0:c2:9f:59:59:34:30:12:08:09:1b:36:
61:b6:ff:20:fd:0b:fd:5f:e2:24:e9:78:ce:82:ab:19:85:70:
9e:05:7b:fc:3d:f9:6b:3c:5c:0c:23:2f:4e:4a:3d:43:81:61:
c9:1a:d0:19:30:60:da:51:df:8b:e3:63:55:03:7c:28:d1:a1:
1c:83:51:50:c4:b4:e5:97:53:6f:9d:00:f1:2e:4d:73:e6:c4:
cc:03:99:85:5e:84:b6:75:76:b6:75:f6:fe:8c:6b:2f:71:cb:
57:94:a3:9e:96:fd:08:0a:ac:e2:58:d3:c2:4f:42:5c:17:07:
b5:f2:41:b9:a5:96:5e:aa:35:7d:c0:4c:cd:1d:d7:dd:6d:27:
10:48:1d:63:bb:de:d2:ef:f7:e1:4c:3b:fa:e5:7c:42:97:06:
dd:91:99:4a:20:7f:d2:92:89:f0:6e:9e:ca:32:b0:57:d3:5d:
82:9b:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:11:11 2025 by rpki-client