Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: xxMIagB95y90eEYHLEWgtwz/77KAxo6t5ro0N5oQId0=
Subject key identifier: 05:C2:A1:D3:38:AE:02:D4:2D:D2:B7:3A:88:34:53:84:29:71:55:80
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 01974FD7B6F713BBA3B8F4B54C93CB2B19AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 85
Signing time: Sun 08 Jun 2025 14:00:26 +0000
Manifest this update: Sun 08 Jun 2025 14:00:26 +0000
Manifest next update: Mon 09 Jun 2025 14:00:26 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: ZfSTjsc1p9cLRLR8NwGMl+NqJvFyApd4df1Koidhnw8=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b6:f7:13:bb:a3:b8:f4:b5:4c:93:cb:2b:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Jun 8 14:00:26 2025 GMT
Not After : Jun 9 14:00:26 2025 GMT
Subject: CN=05c2a1d338ae02d42dd2b73a8834538429715580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:29:04:a9:48:f3:6e:47:87:a5:be:c7:85:
df:c0:e9:4b:33:c3:a9:d3:8c:71:50:8b:42:3d:0b:
8a:65:74:1b:9f:d7:cf:2f:18:d6:2d:ce:d3:a6:6a:
a4:34:b2:10:8a:c6:5d:05:08:98:77:4d:99:4b:00:
59:88:bc:b9:75:1d:e6:0e:55:8d:f8:86:d1:02:d0:
c8:17:15:02:40:de:55:0f:3c:5b:27:b8:4a:10:92:
b8:ab:b3:2c:6c:ae:65:cb:eb:68:b2:75:32:ca:02:
87:86:4d:8e:a6:b9:88:e8:d4:fe:ad:60:89:d2:6f:
68:b0:ab:82:0c:7d:51:92:79:72:92:12:c2:e8:4a:
65:d0:68:db:62:d4:47:85:c1:15:05:1d:48:fc:bb:
dc:95:44:a1:91:fd:2a:ff:b1:21:b3:50:f7:ba:32:
50:02:49:fc:ce:23:91:32:ee:09:f5:b2:7c:e7:8f:
1a:fe:74:50:10:3d:de:ff:7a:d6:bc:68:85:e7:af:
06:6f:66:6a:19:88:47:44:94:c7:23:44:bd:bd:1c:
86:e2:18:bf:dc:82:8c:54:28:9b:ff:85:83:5a:79:
bb:b2:22:14:d0:c4:6b:3c:4c:52:7e:94:b2:a8:da:
2b:a0:96:72:43:db:24:f7:7a:d5:19:07:ac:67:55:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:A1:D3:38:AE:02:D4:2D:D2:B7:3A:88:34:53:84:29:71:55:80
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:a3:cd:7f:2a:e0:60:61:41:87:53:8e:b5:b3:81:d2:22:
8e:be:27:46:a9:87:1c:b8:ab:a3:53:65:73:38:b1:05:fc:75:
d6:d2:ad:71:03:fc:d7:96:1e:57:b4:de:48:7c:55:ef:a6:a8:
3e:ad:c8:16:3a:b0:a1:e5:06:cb:49:40:13:9a:20:50:7f:6e:
9f:b8:c2:f9:c7:d1:30:b9:c2:01:2e:13:05:9d:29:0f:37:13:
18:98:20:5e:a2:60:ee:e6:3f:44:58:7d:04:08:0b:77:66:5b:
56:dc:f6:ed:d1:6e:c4:a3:1f:3e:1f:fd:21:f8:c7:54:76:10:
10:32:4e:cf:e5:78:1e:7e:20:88:5d:83:55:8a:5e:17:67:42:
48:9e:44:fd:9d:74:e1:11:0b:b2:b3:f2:88:82:98:84:32:64:
3b:b4:d0:39:8c:84:82:45:08:8e:86:76:10:63:1f:47:8d:9c:
c2:5e:eb:f8:de:09:fb:35:f3:de:7e:53:7a:7b:19:a0:75:64:
a8:6a:24:33:25:40:ac:ab:65:97:3d:a2:c3:6e:bd:b8:a9:c0:
8e:07:53:1d:04:39:d5:f5:f0:5b:17:dd:f1:51:23:7b:d3:98:
6f:b9:0f:4a:17:d3:80:f8:46:3d:c5:63:63:b8:bb:13:c9:fd:
f5:f8:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:24 2025 by rpki-client