Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: vZuXOj5/xER4AfYf/S6IFordve/sBFFgpsLgILkbw0U=
Subject key identifier: 07:98:D1:A7:38:3B:00:E5:84:BD:15:6A:85:38:DB:D7:16:DC:4B:51
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 019775658443CFBB41D75CD17AD84A5B0E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 0EFB
Signing time: Sun 15 Jun 2025 21:01:16 +0000
Manifest this update: Sun 15 Jun 2025 21:01:16 +0000
Manifest next update: Mon 16 Jun 2025 21:01:16 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: 1c5Sjl32whstWTP14CG8XJcm7gT8fTQGWgo7tNBOss4=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:84:43:cf:bb:41:d7:5c:d1:7a:d8:4a:5b:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Jun 15 21:01:16 2025 GMT
Not After : Jun 16 21:01:16 2025 GMT
Subject: CN=0798d1a7383b00e584bd156a8538dbd716dc4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:b2:27:d1:92:f2:b8:04:b8:06:47:4c:c8:
e9:14:bb:80:6e:16:4b:c2:69:f3:84:11:48:64:5c:
db:9a:ee:b0:20:45:bb:8b:5e:47:75:63:43:37:b6:
58:95:7a:41:be:e7:20:9b:36:54:c4:6f:b7:0f:bf:
73:ae:de:f2:bf:21:5e:b6:21:0b:39:aa:b0:70:fa:
ba:93:08:f8:8e:ee:99:89:62:de:96:1c:bc:dc:f9:
bc:2d:47:4b:5d:38:11:ff:ba:0c:c0:6f:83:a4:0b:
7b:a2:9a:e1:17:bc:a7:2d:a6:df:66:e6:d0:3b:8f:
44:6a:8f:4f:82:61:3c:0c:1f:d6:9b:df:40:99:95:
6a:3e:9c:10:e1:c6:c7:e2:b9:c9:b2:77:9f:86:19:
80:64:35:fa:e6:23:f5:fa:47:d3:f5:56:40:cb:f3:
38:05:fc:ef:d2:38:a7:33:5b:f3:60:b9:9d:db:72:
e6:a4:97:0b:9c:39:31:7b:99:32:3f:25:24:e6:0f:
3a:58:e4:71:49:f7:9f:0e:7f:85:d7:be:4d:c5:2a:
76:de:88:82:20:ce:c5:b1:5f:2f:66:f4:cb:24:bc:
88:5e:52:d9:64:b3:0f:98:0f:00:49:f5:8b:ed:34:
cd:f5:6c:ef:39:01:72:49:da:0b:4c:c6:43:9c:da:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:D1:A7:38:3B:00:E5:84:BD:15:6A:85:38:DB:D7:16:DC:4B:51
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9c:e5:54:ee:f8:ca:69:af:28:ac:5d:2d:4d:c3:bf:f7:fa:
db:1a:42:98:5a:08:46:8b:aa:53:b4:4d:e9:32:57:a7:9a:14:
dc:8d:40:bb:e6:3b:7d:bb:68:62:f0:bd:ee:b7:4e:68:7e:ea:
78:c7:0c:d2:4c:79:c2:8e:40:02:67:e3:0f:82:a6:83:c3:e2:
0b:9a:6f:98:93:f7:ea:67:4a:42:06:7e:df:d5:89:ac:d4:89:
54:f0:f5:c4:1e:7e:13:0b:2c:64:4b:15:c6:b8:0e:3b:82:ae:
16:41:49:62:f1:6a:ab:ef:36:af:c5:31:bc:67:4e:52:ac:9e:
5a:f3:bc:75:71:21:b0:f5:68:54:01:10:3f:93:67:11:73:a2:
43:de:9a:d2:bb:62:88:0a:95:c8:06:22:19:c3:87:52:84:8c:
00:ac:7a:03:6c:ff:d7:94:f2:7d:44:07:19:15:23:3a:7d:dc:
4d:b0:87:36:60:17:0a:b8:a1:5c:cb:73:19:83:15:88:e9:22:
a5:68:3f:5a:24:fe:42:a9:4b:f9:8b:18:41:de:eb:8d:c0:bf:
f6:1f:16:9c:9c:9b:10:c6:39:69:97:4a:db:5e:56:b2:9f:9d:
08:25:4a:11:f6:d9:29:c9:47:b9:08:3e:e7:e0:ba:36:6d:67:
94:db:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:26 2025 by rpki-client