Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: zcNqIDJqDa/EOAVxYlshKcfzGFCU07xBtcf32a3uWpo=
Subject key identifier: B7:F5:88:90:46:5D:F2:D0:43:1C:A1:9F:00:67:CB:93:00:6F:59:B3
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019746673DF1C36C35D226DA5B93D14C7E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 18:01:00 +0000
Manifest this update: Fri 06 Jun 2025 18:01:00 +0000
Manifest next update: Sat 07 Jun 2025 18:01:00 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: NOmynkgKjS+U57U4nxjErKy9ZDM9+LSYHxCKguHpmpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:3d:f1:c3:6c:35:d2:26:da:5b:93:d1:4c:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jun 6 18:01:00 2025 GMT
Not After : Jun 7 18:01:00 2025 GMT
Subject: CN=b7f58890465df2d0431ca19f0067cb93006f59b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:c9:2c:70:05:e1:16:7a:44:44:34:34:a3:
75:e1:17:1b:62:b3:0f:f2:49:55:96:de:fb:75:9d:
bb:9f:2f:92:47:38:64:2c:1c:41:e8:85:b2:25:41:
95:60:fa:69:72:fb:4f:ff:1e:21:f8:b5:67:3f:2d:
14:17:3c:ba:07:d5:68:36:d2:23:95:12:2e:ee:c2:
5b:53:81:8d:e0:25:39:9e:d3:e9:d8:65:b7:e7:2c:
67:bf:28:bb:50:af:e4:96:ff:1a:5e:bd:71:3a:2e:
b2:1e:78:7d:9a:c5:0f:6a:0f:87:67:0f:1f:9d:be:
ec:a5:76:ed:72:80:99:2e:b8:47:d6:2b:68:12:8a:
63:82:2d:44:9d:d9:7d:ce:b0:25:25:b7:d1:20:7f:
3e:89:9d:b0:6d:40:12:6b:01:94:d5:9d:ec:b6:f5:
90:ec:1c:97:52:e2:d7:54:b2:85:1d:dc:ef:9d:eb:
30:cf:13:3d:ce:44:72:71:1d:ac:f8:fd:43:d2:43:
af:b5:2c:6b:c0:77:11:bf:2d:60:35:24:b4:77:7a:
79:2e:d7:4e:44:06:ad:d6:e7:4d:d9:01:7f:ec:81:
cd:18:b3:d2:b0:8f:0e:42:19:ea:7b:2b:06:bf:36:
47:9b:46:5c:e3:c6:0b:43:70:4e:9e:7d:09:a0:56:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:88:90:46:5D:F2:D0:43:1C:A1:9F:00:67:CB:93:00:6F:59:B3
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:06:24:76:ff:17:c2:df:19:fd:47:b7:b0:d9:7f:56:7b:a2:
4a:eb:8b:e5:2f:13:df:fe:db:e9:da:36:8c:88:cd:b1:e8:67:
84:fa:0c:69:16:48:ab:a3:2b:f6:24:99:25:91:09:ec:75:90:
1f:ac:ca:7c:be:d5:b2:79:47:bc:8e:7e:cc:7c:f5:2a:4d:d4:
c1:62:e0:a5:04:20:f8:aa:e6:7b:55:16:40:8f:a4:a3:f2:d8:
38:e1:fb:cc:15:06:f1:24:85:4e:c1:09:f3:3d:94:b3:96:dd:
d0:ce:76:8e:cd:71:ea:6e:b4:80:a0:be:d2:fc:20:c3:10:6a:
42:ca:d3:92:79:38:e1:b0:31:05:b3:83:c3:1b:b0:e1:bc:13:
21:bd:08:1a:98:9c:b7:2a:07:cf:35:33:48:91:e3:1c:cf:0f:
16:19:e9:98:9b:d6:8a:fe:14:0f:ce:5c:c8:93:fe:c0:13:c5:
fc:5c:e5:ab:45:4f:fa:2a:e0:80:b9:45:e8:4f:a0:e2:c7:47:
61:ef:7a:1d:83:8c:69:3f:7c:b6:a4:e6:6f:a7:80:7c:05:e7:
2a:1f:67:a1:a2:57:e7:be:d6:8b:7b:f8:8c:23:b5:8e:e3:8b:
f8:24:2d:da:cb:7a:ee:b5:bb:60:e1:49:88:db:bb:bb:8b:b9:
c0:49:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:44:39 2025 by rpki-client