Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: xXs+on6yW1ZzaE7IoPQThtr58IVq4z38QH0s3m4CmtI=
Subject key identifier: 88:83:9B:D6:C5:A7:0D:34:05:DF:75:DA:F6:D7:C6:75:24:2D:3D:2A
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01963EE6DA6016FAADE2469E6522054A5C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0D65
Signing time: Wed 16 Apr 2025 14:00:38 +0000
Manifest this update: Wed 16 Apr 2025 14:00:38 +0000
Manifest next update: Thu 17 Apr 2025 14:00:38 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: r6/iEeu0Cvhg8ffssIwEC5hsUmsfY9fTwzI0S99nkl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:da:60:16:fa:ad:e2:46:9e:65:22:05:4a:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Apr 16 14:00:38 2025 GMT
Not After : Apr 17 14:00:38 2025 GMT
Subject: CN=88839bd6c5a70d3405df75daf6d7c675242d3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:93:df:9c:13:be:a2:43:47:a0:64:5b:35:
e6:a5:cf:a8:63:6a:d3:1e:90:25:a4:af:39:11:a0:
00:46:45:50:ab:22:9a:11:07:5f:12:7e:7f:5f:46:
fa:46:16:a6:54:5e:11:82:74:0a:33:09:d5:39:a1:
ed:7b:1a:fe:c4:9e:bc:2f:aa:7e:bb:6e:8a:9c:19:
d5:69:1e:39:76:88:6f:13:11:a9:37:56:b5:29:24:
a6:ba:7a:08:08:0c:47:e3:a8:0b:a0:7d:92:dd:eb:
e2:41:55:84:79:aa:99:ea:02:9c:30:11:09:4f:8e:
49:81:5b:d4:e7:b1:58:72:a8:34:7b:99:2d:37:20:
74:31:16:1b:8e:57:be:c1:22:b9:a1:33:52:28:a8:
d9:04:0d:9d:a0:39:eb:bb:77:da:d3:4f:12:b5:79:
7a:0b:48:cf:07:c8:68:15:85:54:bd:87:65:8c:86:
f7:bc:86:3a:be:7b:09:58:5b:58:dc:1c:e4:a1:86:
6b:64:1f:53:8b:49:db:02:3e:68:a1:c4:86:26:9b:
d9:ca:ef:e3:a2:52:f3:af:fa:e5:0a:bf:38:1a:4f:
fb:6a:a7:2c:f2:f7:28:55:11:29:97:2b:ea:ff:e7:
ca:35:93:dd:7e:a7:89:31:a8:aa:f8:3c:52:eb:ef:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:9B:D6:C5:A7:0D:34:05:DF:75:DA:F6:D7:C6:75:24:2D:3D:2A
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:a2:16:63:dc:a7:3a:5d:73:2e:e6:ec:3e:fe:ba:f8:04:
f8:6a:bb:2a:a5:40:da:9d:ac:54:51:f6:74:e8:9d:d7:56:25:
7b:d6:36:ad:ee:82:04:18:4a:ee:51:b2:fb:53:26:e5:c6:b6:
d0:65:51:50:92:6a:5a:1f:d2:92:d1:63:df:79:ec:9b:26:b4:
65:6c:52:9c:c0:af:bf:e0:e7:41:d2:4f:c6:6a:19:82:ea:f4:
ca:85:41:2d:25:ef:f3:cf:39:a7:5d:3f:ce:1f:47:d4:0f:36:
64:db:a4:39:35:35:93:d0:66:0d:f5:40:34:37:5c:d4:5d:3a:
6b:16:82:7b:c8:4f:30:92:6b:a5:a8:8c:97:a8:62:fc:06:a5:
68:36:78:32:c0:41:26:d2:5e:45:aa:ad:40:90:6b:be:e5:ac:
85:0e:d7:a8:8a:fc:e0:56:fa:f3:34:aa:d4:af:8b:6b:a4:4b:
89:7e:df:f6:67:3f:94:34:67:fd:83:00:29:fa:bf:5b:ff:9d:
ce:e6:1b:60:a9:0c:3b:fb:25:d6:6e:f3:7e:a5:5d:71:5e:d0:
b8:c5:f8:bb:55:65:44:39:31:0e:0f:66:50:ea:02:e2:1b:71:
66:12:c4:a9:68:be:1f:89:4c:34:fe:0a:78:ac:39:39:3c:d2:
26:a7:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:13 2025 by rpki-client