Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: MkT6ZTPjEf0n4bRtBYdRXl+g4O3XVA7/420eZuDqVZY=
Subject key identifier: A1:C6:37:6C:EC:DF:E7:C2:27:BD:1D:B9:4B:BE:1F:83:EC:CE:F5:46
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 019753EB979F22A621977F1A3E81A6A55C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0806
Signing time: Mon 09 Jun 2025 09:00:38 +0000
Manifest this update: Mon 09 Jun 2025 09:00:38 +0000
Manifest next update: Tue 10 Jun 2025 09:00:38 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: KzBxjMCe+Ap7lFcnfLLdLvX8JRanRxeMiQ+kS02qpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:97:9f:22:a6:21:97:7f:1a:3e:81:a6:a5:5c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jun 9 09:00:38 2025 GMT
Not After : Jun 10 09:00:38 2025 GMT
Subject: CN=a1c6376cecdfe7c227bd1db94bbe1f83eccef546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:54:59:36:3e:78:12:d7:14:00:fa:ee:5d:
61:21:d0:6d:1f:96:63:74:c1:84:28:a0:29:e1:5c:
0a:66:e1:94:53:95:38:ef:12:fa:1b:28:ba:45:ba:
e5:08:52:ba:c1:dc:0f:a9:0f:82:9f:10:0a:74:f1:
d4:38:44:3d:f2:92:35:e9:64:40:ab:5a:98:5c:2b:
23:c1:57:38:e3:21:59:ee:db:f9:d3:f2:2c:5a:ef:
5d:04:bc:52:72:90:19:13:92:d5:35:70:1c:05:ab:
38:ef:46:7c:62:ef:37:08:82:5e:10:e1:34:b0:c6:
43:49:ea:51:70:a4:fa:d6:37:a4:44:ea:95:11:5a:
ec:55:c7:39:cc:49:67:1b:12:32:b0:ed:c4:39:8d:
3c:13:04:02:f4:91:20:4f:bf:e1:23:44:30:c3:c1:
4b:18:26:71:a8:b4:46:3d:01:1d:60:40:e3:2e:20:
5c:b6:47:af:d5:8c:47:78:b0:65:71:98:55:89:14:
c1:79:4d:5c:e3:6e:68:8a:9c:99:2b:ba:eb:b3:ae:
6e:c8:83:3d:2c:47:4d:55:fc:f1:45:bd:ce:fc:b2:
35:10:29:63:3d:0f:27:55:66:00:c2:85:2a:7f:c4:
5e:7d:e9:7e:a9:c3:bc:60:21:12:ae:29:0e:37:ac:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:37:6C:EC:DF:E7:C2:27:BD:1D:B9:4B:BE:1F:83:EC:CE:F5:46
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c6:8a:54:5b:9c:8b:62:ad:38:32:f3:e3:2c:f2:18:5f:bd:
ac:1c:af:91:fc:d9:a7:a9:71:c4:79:56:95:26:1d:e8:2a:e7:
b3:af:e2:fe:1a:e1:d5:c5:de:9a:f0:86:6c:27:93:1f:8e:88:
7e:ad:81:3d:59:0b:4e:f8:8c:83:b5:0f:0f:bb:5a:6e:ab:6a:
69:b2:5f:2c:1c:fe:95:23:44:26:22:bf:00:ae:3e:0f:a1:23:
28:ba:6a:c1:de:1b:6a:2a:93:a3:51:a1:0c:31:de:b6:c5:b0:
b9:1d:38:b4:be:5a:e8:e3:1b:82:d6:9d:c5:15:d6:07:04:84:
b6:84:ad:c0:62:ee:9d:70:46:7d:fa:b1:cf:5f:56:92:b2:60:
48:72:03:9f:ef:0c:3f:be:76:91:5f:48:3f:1a:0d:c7:84:d0:
ec:00:1b:a4:83:74:87:0d:0e:0d:8f:a6:2c:d6:7b:29:ea:4c:
5c:00:b0:f8:66:2e:7d:4b:8d:01:5f:12:57:13:0e:ec:21:4c:
86:b9:8c:e3:d7:86:db:43:3a:dc:f3:d3:3a:7e:16:5f:b1:5d:
43:b6:47:07:28:95:08:0f:85:0b:78:20:61:c6:ff:74:46:22:
79:ee:b0:51:b6:92:18:52:67:e3:15:c8:85:da:b6:9b:ee:71:
19:96:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:29 2025 by rpki-client