Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: EYPF/D2eXfJOVcXPh78nyfIRm5xjV/CRXLGFZ8nbFPo=
Subject key identifier: F9:A3:29:29:17:49:E1:97:42:D3:93:6D:3D:4E:97:F1:8D:05:65:5E
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 01964D7ED4CBEADC884DB48A6943FA999135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 10:01:19 +0000
Manifest this update: Sat 19 Apr 2025 10:01:19 +0000
Manifest next update: Sun 20 Apr 2025 10:01:19 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: VhRmPlUxfXXscsUjjNbwgCA2MxeMkykiusi55kVCxgg=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:d4:cb:ea:dc:88:4d:b4:8a:69:43:fa:99:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Apr 19 10:01:19 2025 GMT
Not After : Apr 20 10:01:19 2025 GMT
Subject: CN=f9a329291749e19742d3936d3d4e97f18d05655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:64:aa:9f:d9:ce:de:57:41:30:18:e7:7d:
93:e3:df:0d:ad:5c:27:b7:95:b6:f5:bb:d4:56:ca:
49:1a:c1:ce:c6:55:84:01:71:f3:7f:63:98:54:ae:
13:99:0a:9e:14:9f:a4:35:bc:dd:53:6c:a3:29:04:
bb:bf:98:3e:8b:58:6b:fd:e4:0d:36:36:d2:f7:fa:
4e:e8:5f:ba:30:cf:72:f8:e8:86:ef:2f:c1:13:cd:
93:ab:eb:ea:0b:51:65:05:02:5c:eb:20:38:6b:99:
0e:f4:3e:0b:15:62:e5:3b:27:45:d8:50:19:95:af:
70:88:c1:de:c2:d7:d9:57:e9:9c:bd:29:06:84:4e:
b7:48:7b:10:37:08:d1:7e:d0:ff:58:8d:18:6b:2c:
16:97:64:0e:9b:e1:3c:27:df:b1:73:1b:55:51:0d:
92:3e:ac:73:8b:3c:83:d5:22:c2:c3:03:6a:0d:6e:
d9:6f:c5:e9:80:a9:fc:62:92:3f:60:02:ff:51:e7:
13:6b:1e:09:bd:b8:c5:10:28:dd:02:5b:b3:e6:ee:
af:e5:e4:4f:24:ff:6f:eb:78:23:a4:03:7f:e0:00:
10:73:c8:ef:e3:ec:97:8d:f8:f9:7f:98:4d:a1:cf:
16:67:27:35:22:b9:10:ae:b2:aa:33:cc:35:ae:fc:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:29:29:17:49:E1:97:42:D3:93:6D:3D:4E:97:F1:8D:05:65:5E
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cc:bf:32:8f:37:f2:0f:b8:18:96:4f:77:f2:0b:e0:5e:81:
88:73:c8:e5:1f:9e:f0:db:2c:1e:57:5c:40:72:f1:8a:0e:7e:
e6:f1:00:31:73:a2:d9:cf:86:8a:ec:1d:30:b5:ff:98:ac:56:
4e:8f:74:67:63:8e:13:eb:14:39:e5:b4:4b:96:7b:70:b0:79:
cd:ef:4b:29:1c:2b:fe:17:50:a1:df:c0:1d:5d:fb:aa:7d:13:
7f:9e:d4:4f:25:a3:5f:05:8b:13:c4:8d:b9:76:f1:fe:91:94:
cb:6b:a2:6e:04:4d:45:a8:21:7c:f9:44:51:f8:98:c8:73:84:
42:ba:2d:ce:78:cd:a0:74:96:9b:bb:df:7e:50:f0:26:2a:be:
64:37:be:5f:0a:98:67:41:4f:85:71:5c:87:07:84:08:6e:e9:
01:50:76:2d:db:30:bb:47:96:ed:ab:5d:1f:3b:84:1d:ea:ac:
1c:56:81:7a:4a:de:4d:07:b5:15:15:f0:7f:a1:3e:a9:f7:14:
34:6c:e8:54:5b:90:78:a6:ae:c2:32:b2:19:84:7a:00:29:c8:
f0:01:48:2e:ef:3f:cc:68:eb:13:28:54:9b:c8:b5:50:02:ff:
a3:bf:83:d8:05:59:de:04:6f:23:4e:0a:06:20:ce:80:6c:99:
be:ca:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:28 2025 by rpki-client