
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: yflLvjBUBkb1msdApJRxh+SjcalPfsIWwN/wVB4hbsg=
Subject key identifier: 50:15:88:09:D1:F3:56:FC:71:A5:EA:14:22:C7:FB:75:CC:C6:AA:08
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0197711A417E1F32FC2E608C8D0391A5DBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0BFE
Signing time: Sun 15 Jun 2025 01:00:35 +0000
Manifest this update: Sun 15 Jun 2025 01:00:35 +0000
Manifest next update: Mon 16 Jun 2025 01:00:35 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: QZGJA/5b3sx1mldO05iiLp4KLoy9qtN63MdWG6IDOGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:41:7e:1f:32:fc:2e:60:8c:8d:03:91:a5:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jun 15 01:00:35 2025 GMT
Not After : Jun 16 01:00:35 2025 GMT
Subject: CN=50158809d1f356fc71a5ea1422c7fb75ccc6aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:ac:82:eb:f6:dd:05:d4:d7:e1:b5:fc:a1:
98:0c:19:00:09:ab:fd:78:9f:ba:e6:a8:5c:e9:1a:
d0:fb:3d:cf:da:68:99:2f:fe:8c:53:97:20:77:ee:
3b:af:e1:a6:6d:e0:6d:dc:02:03:e4:7c:d9:ab:84:
55:1c:31:c6:ca:5d:8e:a4:7e:4a:ff:6f:55:4e:2c:
9d:e4:ea:5e:c4:99:75:17:3f:3d:db:15:66:2d:12:
f0:08:ac:6b:0c:ac:b6:61:1f:2e:6d:ec:78:39:a0:
d9:69:8f:4c:7d:19:b6:d4:6c:52:24:09:ba:97:e0:
8b:67:b2:4c:b0:bd:a8:dd:27:85:38:54:5d:ae:d3:
1a:cc:d8:40:d8:68:2f:da:9e:c7:f4:4e:cc:8e:8f:
93:48:6b:bf:99:38:d6:83:ba:5f:a7:0b:9f:26:d2:
ac:db:1a:d3:7e:7d:d8:32:08:72:28:2e:1a:40:61:
f8:82:9d:ed:6d:d6:6c:d0:ae:c2:a3:7d:ea:56:c5:
b1:96:9c:6c:7e:86:10:49:bc:df:a9:f7:ab:f5:c1:
37:03:db:2d:c8:3a:3a:c7:e9:95:31:b2:c5:3b:f3:
22:6f:09:89:39:98:de:3b:f5:78:17:64:66:18:00:
88:30:a9:62:a0:25:09:f9:0e:94:22:e1:2f:12:a1:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:88:09:D1:F3:56:FC:71:A5:EA:14:22:C7:FB:75:CC:C6:AA:08
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1f:a9:e4:42:b7:ee:5c:6b:d8:15:c9:88:f2:0f:63:e4:78:
65:ef:8e:07:1e:aa:37:ac:97:a7:d7:59:f6:40:18:85:77:1a:
0c:06:fb:99:d4:77:d6:02:b0:c7:71:76:67:aa:8c:5e:89:8b:
78:3c:1b:03:6e:5d:96:74:21:16:07:33:f6:32:00:ce:d9:82:
2b:41:4e:e7:6c:9d:93:56:f1:e9:a1:9a:1c:c7:e4:03:b9:6b:
66:2a:4a:da:b9:e1:d6:40:0c:fe:00:fc:ad:00:a6:c4:26:bf:
58:29:3b:c7:65:19:04:0a:a8:06:a3:b6:04:50:7b:77:7d:ff:
05:3d:1f:34:92:b8:f7:8a:0e:5f:0d:51:48:b5:55:09:f4:c4:
4a:47:18:e3:f9:13:9d:00:a1:2d:d4:c1:2a:04:3f:19:51:ff:
69:f1:42:5d:90:40:dd:50:42:f8:b7:52:3b:8e:c5:94:04:0d:
38:f4:5b:98:a2:2c:85:3b:0d:28:6a:18:e1:07:62:83:c3:83:
27:ef:e2:d4:2d:a0:1d:8a:41:f9:04:38:14:4e:b0:73:f2:c4:
8f:bc:1c:bd:a4:f5:e6:5f:37:7a:99:ea:4b:a1:0a:cd:94:6d:
cc:7f:4a:25:9b:68:07:d4:2a:cf:41:59:1f:61:34:f8:e1:0c:
8f:8b:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:05 2025 by rpki-client