Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File: iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier: LhJWUCBT1BsITPoMofLzVtZ+KccbQxMzA5NcOqKD+B0=
Subject key identifier: B9:F5:50:F6:FB:93:60:FA:1C:18:0E:E0:66:A1:17:8F:A8:0C:E4:A3
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 01964820C8A2B8B2640043F4D858F663412F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 09:00:30 +0000
Manifest this update: Fri 18 Apr 2025 09:00:30 +0000
Manifest next update: Sat 19 Apr 2025 09:00:30 +0000
Files and hashes: 1: S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa (hash: HPlJ0x+8hEc9+twnaORN/j75RT2RjTnSkW49RshA3cE=)
2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: 3mnD4T2x7r/HTnJbCXxKdQVSRrMgl/BrfL3V5o2lyis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:c8:a2:b8:b2:64:00:43:f4:d8:58:f6:63:41:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Apr 18 09:00:30 2025 GMT
Not After : Apr 19 09:00:30 2025 GMT
Subject: CN=b9f550f6fb9360fa1c180ee066a1178fa80ce4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:ea:21:12:a5:8a:d3:05:7a:eb:1b:05:a3:
bf:fe:a6:fd:20:a1:63:66:e1:2f:60:3a:1c:29:36:
2e:92:92:07:6b:51:54:47:bd:bf:55:c1:f4:1e:3b:
ec:7c:49:44:68:e1:a7:88:df:8c:74:be:b8:d8:8d:
ba:6d:51:a0:ba:58:cb:98:52:67:0a:d5:1c:4e:3c:
e7:cd:72:2a:a1:79:a6:f2:56:72:84:cb:bc:86:8a:
4e:ff:06:bf:26:bb:a4:53:9e:d8:98:6d:80:34:76:
07:d2:43:5c:48:a9:1a:a9:88:59:0f:c8:b3:6f:4c:
6b:7d:20:f6:3a:cd:49:31:44:ac:29:fd:51:86:4c:
d3:cb:64:26:f9:12:6f:fb:33:4f:3a:b3:71:c7:89:
8d:55:93:d0:b5:72:26:45:24:ca:e4:07:8e:33:af:
71:ee:ff:2e:2d:ec:b5:89:2f:17:88:25:9c:ba:65:
d1:66:c3:b7:46:f0:0e:72:c9:ee:66:9c:26:7b:b6:
19:a0:37:7e:e6:5c:04:11:a2:87:77:72:fb:4a:82:
fb:c3:1b:0d:ea:4d:29:41:b4:e0:60:52:67:4d:62:
ce:1d:e0:b7:33:f5:30:7f:33:ac:26:0c:43:e3:13:
2d:79:f4:45:e5:67:11:25:45:ac:62:b1:f9:89:91:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:50:F6:FB:93:60:FA:1C:18:0E:E0:66:A1:17:8F:A8:0C:E4:A3
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:cf:ea:c9:54:bc:69:19:56:37:08:61:b8:b0:63:3f:28:
db:c9:4d:92:ae:fc:c5:f8:85:e2:b4:a4:b0:64:a4:29:4f:87:
ff:a6:72:93:32:ae:33:93:c7:d1:fb:cf:d7:f1:0d:15:2a:3e:
13:b4:3d:dd:25:64:b4:40:91:8e:97:62:93:a1:f4:05:10:6e:
45:95:c0:a0:d1:e4:c7:0e:00:9d:4a:63:cd:6c:a3:11:0c:28:
bd:58:24:7e:7c:78:08:c0:27:e4:f0:6c:41:be:c9:18:15:d0:
58:64:e0:7d:f7:ea:6c:c5:fc:e9:da:33:8c:42:97:03:d6:95:
32:2f:a8:cb:f9:0a:a8:74:3d:22:19:78:44:99:ef:68:9e:79:
30:84:04:ec:f9:9c:28:37:ac:64:0a:cd:16:cc:ca:07:8a:81:
7f:78:76:7e:d6:de:44:e8:6a:10:f7:90:06:59:f4:96:ed:e9:
7c:bc:f9:30:ca:2c:b5:99:d0:48:64:b1:bb:6c:4e:e3:92:9a:
d4:18:50:b9:85:5f:e2:5a:a4:7c:5f:bc:35:de:e1:c3:9e:e7:
3e:47:61:a5:05:74:2e:9b:13:5a:d6:47:84:68:86:ad:59:72:
74:f7:54:83:e4:a9:99:40:55:ab:f7:6d:d6:10:15:d1:de:77:
85:82:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:18 2025 by rpki-client