Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: TQVEj4sVn2Vch6W2fqdoZtpbJs8Fa4Dx6r83HVfLdNY=
Subject key identifier: 9C:41:76:44:7E:6A:28:BB:57:EC:1A:59:97:A3:A3:37:9D:C6:DA:B3
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 0197500EEA49DC110706B0639043A75AC8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 15:00:44 +0000
Manifest this update: Sun 08 Jun 2025 15:00:44 +0000
Manifest next update: Mon 09 Jun 2025 15:00:44 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: OuEfw7fVSc8KJ/dYmm2mg6RDBlFl7kfMsofbZ7nTFpc=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:ea:49:dc:11:07:06:b0:63:90:43:a7:5a:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Jun 8 15:00:44 2025 GMT
Not After : Jun 9 15:00:44 2025 GMT
Subject: CN=9c4176447e6a28bb57ec1a5997a3a3379dc6dab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:8b:4a:21:d0:c5:e0:95:3a:44:74:de:0c:
09:c1:93:8f:75:da:94:f1:68:6b:4b:aa:59:28:71:
c6:26:5c:be:90:2f:03:b7:5c:27:cd:8d:8c:7c:50:
a4:7d:81:6f:d2:47:77:27:33:07:96:f6:07:0b:45:
c7:47:cb:f8:47:81:4c:4d:41:a7:ab:e0:0f:4a:74:
5a:e7:1e:cd:bf:fd:82:7b:0a:2a:22:a5:72:0a:f8:
30:99:9f:68:1d:e6:08:f9:a6:2b:ab:70:12:e4:d6:
eb:83:09:c6:f1:c5:51:bb:91:a4:a1:bb:0b:0b:50:
05:72:1c:33:4d:62:7f:67:48:3b:16:74:37:f6:95:
52:e3:60:1f:ca:18:fc:74:cc:25:6f:a3:f3:24:f8:
76:7b:93:ea:2f:cd:4a:33:7b:66:bf:76:5d:ec:c3:
b1:02:e2:19:54:ae:a5:2b:2e:76:f2:91:1e:33:24:
f4:6b:87:97:ed:4b:04:aa:73:50:c5:35:cf:78:ae:
86:75:3f:93:46:c6:8a:4e:9f:4e:f3:47:e5:48:ed:
72:4e:5a:31:7c:a4:d8:e2:0d:7f:3c:83:5a:ef:52:
8c:1c:7d:e2:15:f5:c1:3a:8e:36:a7:94:ed:e6:e2:
fe:44:3f:16:e3:ef:a2:1c:a2:94:ea:43:2a:46:3f:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:76:44:7E:6A:28:BB:57:EC:1A:59:97:A3:A3:37:9D:C6:DA:B3
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b4:3d:13:c6:b6:c5:10:23:12:38:28:5f:9b:12:65:ad:2c:
54:65:3e:38:6c:49:1d:40:7b:51:e9:a6:dd:b8:74:58:fc:bf:
3c:1c:4e:0a:ee:f7:e6:d4:3f:33:a0:ae:79:71:6e:04:ba:d5:
09:b9:c4:01:d1:39:63:15:a2:83:73:4c:5d:05:55:33:f1:c2:
8f:fa:87:15:e1:bd:8b:31:34:20:c8:22:89:a9:e1:38:cf:19:
55:8c:87:fc:b5:3b:39:56:fc:7e:29:32:f9:84:cc:d6:5d:23:
fa:8b:8c:78:ad:b3:74:b9:1c:88:bb:7d:2b:c9:c7:88:c1:63:
85:a3:a8:cd:ab:2d:c6:58:ee:17:92:a6:67:f8:e8:1a:50:dc:
09:a4:1f:58:27:4c:38:0e:89:b0:dd:c5:90:49:c2:97:b2:68:
89:3d:44:19:0f:59:68:76:14:07:22:2c:d7:13:c3:92:af:e4:
69:6e:53:b4:45:74:2c:23:e6:c9:f9:65:14:7c:96:60:48:7a:
8a:3d:d9:c1:d9:d6:24:66:c7:70:cb:aa:cf:a6:76:ed:ed:4a:
e0:0b:93:e8:54:4d:28:cc:3d:45:9c:a7:ea:88:45:54:e9:14:
07:6f:91:20:2f:db:99:f2:d7:5b:ba:10:ec:08:da:70:8e:b1:
b0:3f:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:46:28 2025 by rpki-client