Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: TYxRxImedtrhvzJsaYlcUnz66Zua1cu5nJQPr/nyEao=
Subject key identifier: 25:05:8B:2D:C0:30:5A:84:C7:A7:56:5D:2C:0A:62:CE:15:CC:3A:7C
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01974666AD5B54D01E52705C3ED0A271906C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1016
Signing time: Fri 06 Jun 2025 18:00:23 +0000
Manifest this update: Fri 06 Jun 2025 18:00:23 +0000
Manifest next update: Sat 07 Jun 2025 18:00:23 +0000
Files and hashes: 1: WsJxTcqQMdNcfxDwYxL96RxQkLE.roa (hash: AzUS2a/hUE19ESDc/skGDA/ldB6bGDxX9L5RO7/taEk=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: R89um9xEYRfbf1QfcfgrU0MfiPhPFXzPFw/wSgx1J0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ad:5b:54:d0:1e:52:70:5c:3e:d0:a2:71:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Jun 6 18:00:23 2025 GMT
Not After : Jun 7 18:00:23 2025 GMT
Subject: CN=25058b2dc0305a84c7a7565d2c0a62ce15cc3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:41:7e:c3:51:70:b0:4d:81:b0:ad:20:c7:
bb:a7:8d:21:18:00:a4:98:46:af:37:72:d7:0f:02:
bd:0b:59:36:17:2e:a6:fb:35:39:be:f7:b8:77:af:
92:c9:87:98:da:a3:d2:d2:96:6f:ed:a6:6c:83:32:
51:a9:ed:e3:0c:37:35:98:a1:0b:da:50:a2:7f:44:
1a:1a:cb:71:7c:a2:42:f5:0e:a5:b9:c2:0f:b9:00:
0e:56:14:4e:bf:2e:6c:c1:07:4c:a0:a1:aa:02:bd:
01:4f:f0:d9:35:18:d9:1a:db:d1:b9:b5:f4:03:50:
d5:a6:1d:11:d9:99:2f:46:83:cc:f1:83:37:c0:e2:
19:45:75:76:eb:e8:88:90:39:b4:cb:23:ce:7b:9e:
c1:a1:9a:fe:2a:bf:8a:6a:64:09:5a:f1:45:39:9e:
bc:e3:22:ea:4d:7d:cf:93:16:1f:8b:53:7c:05:a3:
19:75:32:9a:b3:d8:6b:f2:5b:4f:20:0b:15:9f:5c:
9d:5b:77:ad:2b:eb:62:09:93:e5:d0:c8:3e:bb:f4:
6f:a1:08:a7:4c:7b:8b:05:f9:96:d1:d7:71:63:1f:
a8:af:c0:7d:3f:7e:ff:16:e7:17:83:84:39:9c:ec:
c8:6e:d5:fd:b5:38:13:31:f8:a4:2f:ab:28:fd:62:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:05:8B:2D:C0:30:5A:84:C7:A7:56:5D:2C:0A:62:CE:15:CC:3A:7C
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:23:ea:14:87:1c:83:dc:2a:9b:b0:ce:19:ec:04:07:e4:21:
ed:13:63:01:f6:63:70:1c:c0:1a:97:93:7a:63:3c:8c:ac:35:
a3:51:d5:57:94:4a:fe:d8:2f:7b:4e:4e:db:be:1b:ba:56:e4:
bd:8c:25:c0:4b:6f:40:29:dc:7d:54:36:6f:e4:30:cc:7d:f7:
4b:f7:10:c2:31:84:cf:03:72:c5:34:8c:ed:15:90:0b:0e:6f:
6e:e6:7f:73:c3:8a:07:0f:af:30:f2:89:20:b0:b6:ea:e5:eb:
51:53:98:3a:55:fe:47:09:65:f2:2d:00:be:6f:af:88:c6:d0:
b6:5e:f5:55:21:4d:c1:f7:0e:ed:7d:96:e0:9c:24:3f:b7:27:
44:69:b1:0b:e2:4b:67:60:81:cc:1e:1c:ae:66:69:5a:a5:97:
bd:76:fe:f4:c8:00:ad:f2:b0:9a:44:62:db:f8:ab:9b:6f:bc:
b5:09:6b:74:27:af:4c:3e:24:6e:99:74:61:ce:62:90:7d:b9:
63:11:23:c2:79:64:70:14:d4:28:a7:3f:ca:56:ab:33:a2:b0:
af:e0:88:78:c3:c2:81:ac:57:2d:95:fe:99:75:5f:ff:9d:5d:
a8:8d:7d:84:9c:e3:35:ec:5d:70:ea:c2:ec:38:02:d6:7f:d5:
e9:d8:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:54 2025 by rpki-client