Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: yKHra5d1YTSh8mUjmwTgl+B4y9Nzaj8C2tBU3kpqEqI=
Subject key identifier: F6:8C:7B:26:09:82:81:B4:3D:A5:FB:1B:F4:1A:06:C2:2A:7C:38:D8
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 01976D3E10068AEF9E7B6F60A8593BA42D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 07:01:13 +0000
Manifest this update: Sat 14 Jun 2025 07:01:13 +0000
Manifest next update: Sun 15 Jun 2025 07:01:13 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: VbkvEUm5h+UpJLJ1J5WpD0zRycHlSc2/519U5pgjFmw=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:10:06:8a:ef:9e:7b:6f:60:a8:59:3b:a4:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Jun 14 07:01:13 2025 GMT
Not After : Jun 15 07:01:13 2025 GMT
Subject: CN=f68c7b26098281b43da5fb1bf41a06c22a7c38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:de:37:fc:61:d0:22:26:84:e7:80:93:60:
3a:98:6a:50:c9:74:5d:81:b1:71:44:1c:d2:25:b0:
2e:6d:5d:f9:29:d3:43:bd:5c:9c:07:74:c5:48:40:
a4:1c:68:5e:1d:50:cc:e1:54:65:e8:c0:dc:a6:d7:
f6:9b:b5:b5:69:20:1b:f0:b6:a1:97:cc:24:11:6c:
d4:65:74:7d:69:cd:c6:89:2a:16:6b:e3:b9:89:16:
56:03:4b:57:e9:ad:26:94:d3:88:43:e3:e2:fc:91:
ec:19:1c:30:57:97:f4:0d:03:34:c4:78:6e:87:24:
10:36:72:de:ae:52:7c:02:9a:8f:37:ca:4b:92:8c:
19:c2:c8:3f:44:61:4e:79:81:18:a4:72:85:b7:b1:
29:27:b4:a6:72:d0:eb:09:05:29:35:c2:61:99:93:
bd:8d:7f:9c:54:57:7e:81:94:03:b2:cd:d8:58:da:
5d:9c:96:8d:bf:75:e8:03:c0:78:b0:79:6f:e9:d0:
e3:66:33:97:6c:f3:77:bf:ab:92:d4:6a:ab:54:c5:
54:45:23:8f:e1:d7:0b:65:b3:82:d2:19:f4:63:6f:
2f:1b:33:f2:12:e6:de:d0:3a:b4:be:ec:72:f3:c6:
f1:e5:86:49:e4:73:0f:ad:ea:82:f7:28:b5:97:68:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:7B:26:09:82:81:B4:3D:A5:FB:1B:F4:1A:06:C2:2A:7C:38:D8
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:fe:11:b0:a8:93:2b:d3:1c:5c:7c:5f:d7:b5:05:18:f7:
8e:d2:f5:df:08:ae:d9:a8:56:d0:d6:81:a8:86:af:cc:eb:86:
91:a8:22:45:b3:7c:86:2f:59:fd:aa:52:e8:bf:3e:3e:57:9a:
41:b5:72:e2:0b:9c:48:ef:38:3a:01:43:b1:6c:16:ab:aa:77:
12:98:bc:25:8c:01:84:22:08:b8:cc:a1:5f:a5:c1:8c:65:ec:
c5:1b:9f:f0:fb:e0:d7:2b:8a:96:e3:00:a3:d9:fc:6d:7c:bb:
7b:ec:21:a9:89:cd:c2:5b:fc:59:73:76:b3:ca:ab:f0:79:c3:
81:06:90:cd:0f:5b:6d:cf:55:c3:8b:4a:98:09:ff:20:ac:da:
6c:bf:a9:88:99:09:b4:a5:a2:42:7a:a1:b1:ba:4d:88:e6:f5:
ef:98:28:7e:a7:2b:21:3e:2f:9e:be:d7:1d:be:24:8b:d1:3c:
dc:0a:ac:1f:80:8f:c0:b0:44:87:f0:62:a2:4c:e3:c2:53:4c:
ea:ea:ac:a8:32:55:55:5b:f3:8f:ba:0d:ec:42:ad:5a:85:5a:
68:84:b5:4d:86:c3:1a:f8:61:7e:55:64:9b:e7:b0:2e:83:d0:
85:af:a6:11:d3:76:ce:4b:bd:79:35:23:61:e4:4d:e6:7a:20:
57:c4:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:14 2025 by rpki-client