Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: akI+ovXBuN2QlXCu140oyWuaHhPIjn48Qwd/HXJHIgU=
Subject key identifier: C7:98:DC:16:A6:B7:B3:BE:34:D2:B2:03:EE:6B:E3:86:29:02:DB:C1
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 0195903CFAC011C2B474D1D32349CCE08E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 16:01:10 +0000
Manifest this update: Thu 13 Mar 2025 16:01:10 +0000
Manifest next update: Fri 14 Mar 2025 16:01:10 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: oEG4ZeXFRnj7eX/H9mDqMBFb2SiH4zROaWvLvtUgjWk=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:fa:c0:11:c2:b4:74:d1:d3:23:49:cc:e0:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Mar 13 16:01:10 2025 GMT
Not After : Mar 14 16:01:10 2025 GMT
Subject: CN=c798dc16a6b7b3be34d2b203ee6be3862902dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:80:bc:9c:4f:6d:a0:fc:ab:53:37:f0:f9:
d9:4b:d5:ee:95:2a:41:ad:2e:b3:44:de:31:53:75:
6f:48:f5:5f:87:4b:6f:cc:b4:e7:88:2e:89:ea:d8:
e5:75:44:6d:a1:a3:a4:7d:58:f5:0d:de:b7:b8:8c:
6d:1e:66:bd:1c:da:48:8f:88:77:44:f3:9c:69:fb:
bd:5a:01:ae:09:bb:42:b4:7c:a8:c3:de:09:23:8c:
23:65:6f:ce:ae:1a:87:da:23:d8:7b:b7:c6:47:ef:
ef:3c:78:93:13:84:bc:04:ba:20:dd:88:90:31:8e:
b3:89:cc:63:32:86:0c:c5:3c:39:aa:bb:cf:04:9a:
19:66:15:89:97:6e:0c:ab:21:03:2e:13:42:96:4b:
78:0a:66:66:71:72:84:a3:02:96:c9:d2:d2:28:63:
1d:1a:fa:5d:fc:e2:f5:13:a1:d2:d5:be:21:06:1b:
3e:e3:78:a2:f8:49:de:54:1b:d9:a5:c9:0e:c2:3b:
d2:34:ee:5c:65:a5:df:90:07:53:9a:b7:b6:68:c2:
69:53:cf:7b:e7:6f:7f:bb:f1:35:ac:22:43:ef:6f:
0f:df:f9:ef:cf:4c:6d:8e:ea:b4:e3:12:5e:b9:fd:
33:4e:63:d7:2a:ca:5f:03:4b:5f:96:7d:46:60:f7:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:DC:16:A6:B7:B3:BE:34:D2:B2:03:EE:6B:E3:86:29:02:DB:C1
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:c3:2d:e9:c0:f1:1b:78:9b:91:6e:7f:0f:58:c7:81:a4:
32:75:45:83:64:2f:57:a3:d4:dd:15:dd:5b:0c:66:cb:aa:db:
22:3f:e6:0d:28:1f:78:49:93:60:35:ee:d2:77:5c:e5:b2:89:
56:96:91:e6:8b:ab:67:c3:ee:59:55:56:2d:f0:28:7b:7f:7c:
b6:4c:98:d6:d2:c9:c0:e5:82:40:d2:40:98:62:e7:0f:c2:39:
71:e7:e0:e6:a6:eb:17:b9:0b:fb:1b:69:bd:2d:b4:5e:fb:16:
f5:e7:6d:88:70:4f:08:f1:ac:63:96:19:d1:ee:c0:ad:56:95:
fb:34:b3:da:27:38:33:d9:71:38:25:b4:e1:30:be:31:e2:d9:
5b:14:6c:ff:07:82:07:5d:d5:3a:8e:14:26:72:94:04:3e:c4:
02:d6:84:02:b6:93:1f:ab:df:8d:f5:22:28:50:c9:14:ec:93:
5d:59:57:58:8c:10:54:66:97:b2:9d:79:ff:27:3d:b4:85:d8:
ce:0b:be:e3:33:aa:30:94:54:62:87:3b:b0:62:83:83:96:0b:
2d:7a:6f:e3:7c:99:09:1f:7f:7b:3c:4a:75:20:53:ac:c6:b2:
88:d7:49:7e:21:38:a7:c1:80:bd:33:99:25:0a:be:ac:e1:69:
ba:93:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:14 2025 by rpki-client