Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
File: iwGBfULP-LiBS70XAK3pFnQmjtc.mft (raw, json)
Hash identifier: bvs7Xxh7IhFKiwvYScfd8Ox9FWk11t/ZZJXBRyan9WM=
Subject key identifier: BF:63:1C:AD:A8:E2:7D:8A:23:BF:1A:94:8F:BF:17:8D:8D:7D:91:B6
Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Certificate serial: 019748C317AF629F1F5E31D02E68E364D547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
Manifest number: 1243
Signing time: Sat 07 Jun 2025 05:00:34 +0000
Manifest this update: Sat 07 Jun 2025 05:00:34 +0000
Manifest next update: Sun 08 Jun 2025 05:00:34 +0000
Files and hashes: 1: HLJFpDpuuY5RuMrQbtzuBJNGQJs.roa (hash: ty6hQDkhWUALNQQqzONCESXYcfpgf+zxWDRQRihR4ws=)
2: iwGBfULP-LiBS70XAK3pFnQmjtc.crl (hash: Y2EfMugrk58n6EPq3xMv63SX3aFgRQh8IxBCHDoJhPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:17:af:62:9f:1f:5e:31:d0:2e:68:e3:64:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7
Validity
Not Before: Jun 7 05:00:34 2025 GMT
Not After : Jun 8 05:00:34 2025 GMT
Subject: CN=bf631cada8e27d8a23bf1a948fbf178d8d7d91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:a1:db:2b:b9:cb:ba:30:51:b5:0b:36:6f:
1d:14:3c:43:83:82:7b:02:c6:eb:5d:07:0f:8f:c5:
09:90:2b:e4:f1:99:b5:a0:81:60:2d:7c:96:d1:af:
33:f6:c8:5a:8c:61:de:2e:87:30:6d:df:f3:e9:75:
93:f2:85:19:64:27:86:74:e4:ed:83:f2:f1:8d:92:
7d:b1:5f:85:cd:0c:8d:8d:cc:a7:e8:9f:bb:78:2d:
ac:33:5a:e5:53:b0:20:61:0b:18:0e:d6:47:15:cc:
00:78:a9:4a:33:5f:29:fb:cf:00:f3:39:be:30:9e:
52:fa:cb:57:c9:8c:fd:2b:d7:04:96:2d:47:53:f8:
30:bf:c5:5c:e6:ea:32:11:23:af:32:c4:40:fa:70:
f7:c2:c4:e9:62:2a:e1:e8:ab:f4:9b:e0:e3:56:7e:
90:03:27:7f:02:e9:50:78:6a:3c:c2:8f:45:f1:74:
e8:3a:8e:78:b3:0c:27:78:10:8f:34:0c:40:da:7a:
8a:94:a3:95:14:32:54:9c:e2:26:2c:30:ac:58:fe:
7f:cd:17:4d:f8:10:37:28:08:d8:26:9d:30:8f:05:
fb:a7:b2:a7:33:7e:87:32:78:dd:59:fe:10:33:8a:
9f:52:cf:9e:4d:40:91:ee:0d:fa:e8:78:43:6c:0a:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:1C:AD:A8:E2:7D:8A:23:BF:1A:94:8F:BF:17:8D:8D:7D:91:B6
X509v3 Authority Key Identifier:
keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:52:a8:30:8c:c0:c9:0b:bd:84:16:12:99:d0:28:c9:78:
4f:64:ff:23:54:05:f9:cb:8b:86:76:0e:fb:ec:89:90:6f:37:
97:0b:73:f4:f5:88:66:e5:14:43:41:1c:1e:86:62:de:f9:31:
6e:74:be:1d:12:ca:46:4c:40:4c:4e:06:42:85:4c:ca:f7:95:
13:51:1e:01:69:5c:c2:d9:1e:f0:24:44:e0:93:2d:5a:63:18:
2d:20:8b:18:7e:0c:1d:2a:2e:56:1c:2f:a6:ad:9a:9d:e3:de:
66:44:bb:7c:6f:00:00:2a:32:9c:ce:df:98:d7:8d:79:dd:e4:
1f:ef:f5:8b:04:00:a9:be:a7:58:15:09:cc:10:d9:9d:fe:e7:
b4:c8:79:a0:bc:c8:81:7d:26:1f:e8:e2:8e:99:ca:79:94:e8:
ca:88:65:35:de:f6:46:f6:37:84:fb:ab:44:f6:b7:c7:b5:83:
be:1b:03:7f:00:f2:24:7f:69:db:f7:ac:63:d5:63:61:93:7a:
cf:62:49:2e:d0:92:81:92:5b:69:62:34:ce:ad:cc:a0:47:58:
aa:77:24:a7:9d:a9:7e:87:36:23:51:40:a2:2c:a9:9c:07:76:
5a:03:ee:87:2d:9f:ba:54:3a:43:de:48:1f:ff:d9:90:4d:11:
a8:9b:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:38 2025 by rpki-client