Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: dgYDq+EfL+AK3phFuyg/hXh60ZF70coaAVLihOh4yQU=
Subject key identifier: 8C:2A:96:85:10:79:E5:96:4D:D9:09:39:DE:CD:56:C0:8F:7A:0B:D7
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01976C2ADB41EFE241BC2AE049ED9518AA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0E01
Signing time: Sat 14 Jun 2025 02:00:37 +0000
Manifest this update: Sat 14 Jun 2025 02:00:37 +0000
Manifest next update: Sun 15 Jun 2025 02:00:37 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: V5fVs5Jgsev+Ep/KT0oSplS1d6185MQUI+g+1fXKuJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:db:41:ef:e2:41:bc:2a:e0:49:ed:95:18:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jun 14 02:00:37 2025 GMT
Not After : Jun 15 02:00:37 2025 GMT
Subject: CN=8c2a96851079e5964dd90939decd56c08f7a0bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:93:60:a2:ac:b4:24:6e:e1:41:45:26:c5:
80:2b:e2:ef:ff:76:30:79:42:36:13:d6:c1:05:18:
d8:56:09:25:5f:3c:6a:5c:76:3b:93:eb:89:73:02:
db:77:35:68:d4:79:51:fd:0e:5e:b7:5d:b3:6b:90:
57:6f:4b:5e:da:10:90:8e:cf:58:9b:e8:73:06:28:
1c:4d:5f:4b:01:4a:6c:a1:c5:99:78:e4:6a:38:b2:
df:29:98:34:f7:55:e0:8e:ab:9d:12:ee:d1:9c:cc:
96:ec:a9:32:8e:84:58:52:6a:e8:e9:84:3a:eb:fe:
ed:67:3f:29:87:0c:5e:f9:e1:a5:9b:6a:b2:4b:73:
3c:60:13:9f:ca:38:2d:66:1a:61:77:63:72:d5:09:
d0:57:ba:67:1e:68:24:d5:eb:09:17:d4:6c:cd:8a:
a7:6a:e5:d9:f9:89:a3:18:17:b9:25:c2:f1:94:09:
99:95:0c:bb:5e:8a:e0:39:f1:b4:93:dd:91:f4:f6:
e2:49:1f:49:07:b1:36:ae:90:e3:ee:19:97:5e:49:
ac:34:9e:c4:85:aa:fa:cf:21:a3:37:e8:b3:ef:4b:
77:d8:a6:0e:60:ad:8f:fe:87:44:df:61:e5:a7:50:
97:db:12:06:9c:d5:4e:1b:f8:4f:16:d6:aa:86:e2:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:96:85:10:79:E5:96:4D:D9:09:39:DE:CD:56:C0:8F:7A:0B:D7
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4e:ab:6f:49:6b:ff:4d:3f:e4:b8:dc:2b:27:b6:b1:15:30:
44:88:ff:af:f3:ce:a9:da:a5:2b:3f:1c:75:f2:58:d9:24:7a:
37:5c:5d:3a:d8:59:af:60:85:51:9d:63:e8:4f:68:fe:7c:ed:
a9:2f:96:3a:03:a3:5b:11:8c:fb:e8:77:4f:da:be:6e:b1:76:
85:3d:14:f1:e0:c9:14:e3:62:e4:47:a2:c7:7d:94:65:48:06:
75:d3:10:14:5b:4c:bc:5d:0c:f6:93:94:72:96:97:1d:33:d5:
63:53:db:7b:f1:81:a0:0c:19:fe:25:04:d9:90:04:51:39:f7:
67:ca:62:28:6d:97:79:1a:f2:d7:a2:9b:db:8b:fe:12:ec:6f:
af:76:e0:16:49:06:dd:28:b3:b6:b8:7b:22:d0:ca:f6:2b:0a:
1c:70:1b:b9:0e:40:b4:4a:25:a8:57:75:50:3b:1a:41:b1:51:
27:75:e0:50:86:d6:73:07:d8:d9:b7:5e:75:61:41:d5:df:9d:
5f:c7:68:35:3d:ad:ce:85:44:61:d6:ae:d4:fc:3c:39:f0:35:
dc:f6:59:41:a5:23:0d:eb:71:34:c1:97:78:1a:80:3a:de:b1:
71:59:89:ac:9e:5a:6b:92:5f:9f:b8:29:c0:96:ca:83:1f:bc:
86:cf:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:11 2025 by rpki-client