Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: MBR9AYtcGH5Ip/SSTe/WrBD+0EeW3qAnrEG8K2aabHk=
Subject key identifier: F9:74:16:D3:56:87:78:21:10:73:4B:10:C5:F9:6E:9A:ED:8F:FC:E6
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01964B58C01FE21832B72570E73209397074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 00:00:29 +0000
Manifest this update: Sat 19 Apr 2025 00:00:29 +0000
Manifest next update: Sun 20 Apr 2025 00:00:29 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: xq9diAZ5Vhy1MC9bllE987htUQ2HwudymUqjWFv+Ojg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:c0:1f:e2:18:32:b7:25:70:e7:32:09:39:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Apr 19 00:00:29 2025 GMT
Not After : Apr 20 00:00:29 2025 GMT
Subject: CN=f97416d35687782110734b10c5f96e9aed8ffce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ec:59:92:69:b5:4e:74:41:89:15:f1:0a:
2d:91:b9:58:35:57:65:26:1b:6b:3c:aa:73:97:d9:
02:ec:9c:f2:7f:bf:66:00:ac:7e:29:1b:d1:9b:6c:
18:5b:13:12:d9:6b:8f:02:32:16:fd:90:39:ef:8f:
9c:b2:76:66:99:f3:c0:ef:2f:40:97:eb:22:27:d5:
7c:a5:24:d1:8f:0c:f9:5b:e1:ce:f0:f2:d9:82:85:
ce:ea:34:47:f7:13:6f:ef:67:f5:96:85:39:68:2c:
2c:b9:86:48:d5:10:cd:4b:35:d4:99:8b:39:f9:3a:
b1:a0:40:fa:02:4c:5c:a6:d2:88:97:90:fe:ea:6b:
84:fd:0f:27:d0:3b:30:4c:f0:65:39:cb:5f:e7:bc:
5e:50:b5:b0:d0:34:a9:a7:29:d6:7a:21:da:b1:02:
47:3f:da:da:75:45:72:6c:c0:88:01:e4:45:fa:1e:
e6:fd:a1:da:a7:53:c6:45:21:d4:98:46:12:7c:ad:
f1:85:72:18:05:9f:2c:91:3c:2c:3d:1e:a8:65:7b:
7a:b2:3d:61:60:35:ee:13:71:fa:9d:bd:45:3d:39:
1d:5f:6c:67:cd:1e:54:0f:d0:fc:27:56:f9:4e:13:
8f:09:ca:f0:f1:3a:73:9d:e7:bd:ca:d2:f8:71:b6:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:16:D3:56:87:78:21:10:73:4B:10:C5:F9:6E:9A:ED:8F:FC:E6
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:0e:8a:11:16:15:34:fe:dc:d7:39:63:47:fa:3a:75:3d:
95:80:20:e0:b7:ad:ea:cf:e5:45:a7:21:4b:25:55:3a:26:87:
4d:bd:59:70:7c:3c:7e:f2:71:f9:56:14:bd:80:b6:54:e4:1f:
c1:4b:de:84:ae:62:1a:e2:4e:af:65:89:a9:54:6d:d4:b6:65:
4e:75:88:97:7b:9a:1e:13:7e:c2:e9:c8:e3:13:13:ef:d2:19:
e1:fc:2b:82:e8:f7:a9:83:47:26:67:78:a7:7c:e1:0f:d5:f7:
51:82:d1:87:e1:68:6a:db:c9:12:ff:54:5d:04:be:82:16:57:
a7:50:63:b2:95:4b:c3:18:ee:64:4a:de:88:59:2d:1d:53:9f:
da:1d:c0:df:2d:0e:55:25:63:46:17:6f:2d:c3:4d:9b:3f:f8:
85:5f:05:5a:0e:99:77:76:74:b5:6f:8d:3a:c1:7c:df:d6:fa:
01:ab:3a:5e:7b:9f:f4:a8:30:f7:89:ff:50:61:b1:d6:03:76:
7d:2f:63:f2:c2:61:69:58:be:b9:6c:dc:a1:4f:02:c8:b2:6e:
78:07:a2:c1:f0:18:27:f7:1e:df:e4:f0:be:af:28:46:28:5a:
f5:6d:ea:51:2d:f6:27:14:b9:f2:e5:5b:68:7c:80:cc:e4:79:
e0:92:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:34 2025 by rpki-client