Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: gLGopL1gtV32DESUNX8Ff4R10Ycsq6beAeCSmhYWFSw=
Subject key identifier: D6:52:53:E7:23:8A:7B:FC:2F:77:F4:3C:4F:B7:FA:BA:64:27:02:4C
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01974D44CA83FA1B90729C197BE0CE6358C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0DF1
Signing time: Sun 08 Jun 2025 02:00:43 +0000
Manifest this update: Sun 08 Jun 2025 02:00:43 +0000
Manifest next update: Mon 09 Jun 2025 02:00:43 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: ngriOGwvjh/l1/mchDqzqCqeo8Xr/wc1G2dETv3HTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ca:83:fa:1b:90:72:9c:19:7b:e0:ce:63:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jun 8 02:00:43 2025 GMT
Not After : Jun 9 02:00:43 2025 GMT
Subject: CN=d65253e7238a7bfc2f77f43c4fb7faba6427024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:bb:c0:c2:55:6b:fa:05:f5:3f:41:e6:36:
4a:df:04:4f:75:12:37:8d:01:b0:14:2e:93:6f:72:
67:05:2f:8f:02:1a:e7:c3:f6:8c:67:f1:95:b9:bb:
63:66:51:20:ff:cd:c6:8d:7b:08:d5:38:13:a0:1a:
04:3d:f6:62:34:73:95:9a:ea:33:1a:ca:5d:45:12:
3a:41:8e:71:f2:52:1c:a2:a4:21:85:d6:95:58:28:
a6:6d:d5:80:d0:22:7f:32:95:7b:ab:95:e7:3b:44:
da:c6:bd:c4:84:db:f4:6b:3b:f6:bb:32:30:b2:b5:
bd:ac:f0:91:f1:a3:94:fc:65:56:f7:84:42:f6:5a:
d3:34:a7:ad:60:a0:d4:b4:fa:d1:b5:35:ec:af:04:
30:f5:07:24:9e:60:4b:93:3a:b3:2d:87:f8:74:30:
40:24:be:cd:87:e9:6b:12:31:8e:ae:18:4f:8d:14:
c2:c1:8f:e6:e6:28:d4:34:72:22:1d:25:d4:a4:17:
63:c5:8b:a2:5c:4d:b6:ac:4f:ff:65:29:eb:d4:3f:
7b:f1:23:e0:a0:80:5b:92:85:31:93:e4:c4:4a:81:
b7:e2:f7:a0:39:4f:f2:c4:de:81:69:3b:4e:40:f6:
e9:2b:55:a5:d1:70:fc:6e:60:3b:0b:ca:ee:77:e9:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:53:E7:23:8A:7B:FC:2F:77:F4:3C:4F:B7:FA:BA:64:27:02:4C
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:4a:91:fb:eb:64:82:00:ac:98:c8:98:37:1f:d0:4b:51:
0b:ff:e1:7c:51:38:fe:59:64:d5:60:46:3f:b0:9e:6a:0d:ed:
c1:9e:a7:c3:47:e2:3d:dd:99:58:91:e8:0d:18:28:5f:ee:79:
e3:49:cf:da:e6:2c:06:be:1a:f6:d4:12:a2:b2:8b:ff:f1:df:
67:38:9e:10:68:ef:fb:a0:c7:8c:60:73:c1:5b:19:46:d3:0a:
1f:68:40:ba:8c:b8:52:61:c1:5c:2c:07:a6:d1:ce:e9:b7:e6:
58:81:f1:70:44:9e:21:b3:11:17:f1:f9:87:51:e3:b3:f9:dc:
c4:71:fe:85:24:28:cc:a8:1b:61:72:1a:1e:ff:27:7a:cf:5a:
57:b1:f3:52:ec:7c:4b:3b:2d:55:fd:b2:80:88:4e:68:a7:cf:
4a:1f:ac:e0:a0:c1:ef:46:65:71:6b:93:6e:8d:f4:81:e8:60:
c4:4a:ac:48:86:c3:2f:f3:5f:03:32:ac:fd:f7:de:ef:b2:84:
78:28:a0:1d:71:c2:90:fb:34:ce:e8:2c:cc:4f:66:67:bd:cc:
9a:f9:69:f7:c2:a3:ec:72:ae:c3:f0:7b:9b:75:8a:01:ad:0a:
e1:66:60:bb:02:b9:e6:13:38:c2:27:39:72:83:a2:a1:b2:14:
b0:81:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:55:24 2025 by rpki-client