Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: 6JOPKcMOTBnrGkLGXiCe9WNq7xW24lUwxRItLCkN5wk=
Subject key identifier: D6:4A:EF:D9:AD:58:CA:A0:56:46:E9:87:97:F9:A6:6E:6C:E7:59:4D
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 01977865D7E6F173DC8F68A8A386DCBC7C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 1079
Signing time: Mon 16 Jun 2025 11:00:29 +0000
Manifest this update: Mon 16 Jun 2025 11:00:29 +0000
Manifest next update: Tue 17 Jun 2025 11:00:29 +0000
Files and hashes: 1: gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa (hash: l0wZmz1eeJH0pgzgb/M7lMO1lTKuzQbmbwUCcga2Ghs=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: NA/75djrEU18+WK5mcu7Rz36xXFEX1gCcvM6cQaL4io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:d7:e6:f1:73:dc:8f:68:a8:a3:86:dc:bc:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Jun 16 11:00:29 2025 GMT
Not After : Jun 17 11:00:29 2025 GMT
Subject: CN=d64aefd9ad58caa05646e98797f9a66e6ce7594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:3e:14:27:e3:23:22:e2:21:b0:b8:a2:58:
fc:56:f7:9b:89:59:6e:66:bb:ed:c8:ba:eb:c8:6e:
19:11:c3:5a:71:59:a5:9a:74:b3:37:46:34:6a:07:
91:e4:02:2b:93:41:f3:ee:50:f5:34:4c:6f:38:d7:
29:7e:62:63:08:eb:9d:9a:df:e0:52:d4:d8:89:51:
70:d3:c5:8d:5e:5b:86:68:47:e4:dd:92:af:e3:32:
bd:f4:e5:e5:9a:b3:14:71:00:3f:07:79:54:82:f5:
01:f0:a5:06:23:e0:36:76:68:2a:b1:7e:43:d8:c2:
c2:6f:47:46:e5:ac:4c:29:f6:17:aa:38:41:b9:3c:
d4:72:35:e9:72:13:91:e5:31:e1:9f:12:43:d5:4b:
b4:b1:f1:ca:fd:9d:57:0d:31:a5:60:ae:fc:c6:1f:
25:2c:f9:07:5a:0c:23:25:d4:1c:61:71:73:38:f2:
d3:8e:50:61:b0:52:eb:ee:94:ea:db:0f:25:3a:37:
83:7b:6a:51:4a:d3:56:e9:20:71:0a:55:4e:40:ba:
e8:d4:95:39:6d:3f:0d:72:17:09:3a:4d:9b:4c:64:
d8:48:49:17:b8:15:15:a6:34:85:5b:2e:61:b8:18:
32:74:a9:31:4b:15:f0:97:d7:df:c2:db:07:d3:1d:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:EF:D9:AD:58:CA:A0:56:46:E9:87:97:F9:A6:6E:6C:E7:59:4D
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6d:df:da:27:f8:31:0e:c6:c9:b4:ef:ba:c2:9f:54:cf:bb:
ee:43:cd:cf:1c:04:02:40:8a:31:ee:f6:a0:5d:ec:6a:53:9d:
f4:63:9c:a8:4f:79:20:32:17:83:2f:10:07:70:21:5f:bf:f3:
51:95:5e:e5:b7:19:27:fe:2e:0b:1c:aa:46:4c:1e:6c:ee:05:
bc:b4:fc:46:1e:82:62:18:93:65:a2:4a:3a:f1:c7:91:b6:6e:
38:8f:10:71:57:34:14:4e:61:ab:15:10:63:06:12:f0:14:c7:
a3:ef:3d:0e:37:13:cc:69:36:cf:e4:44:44:e5:72:6e:65:e4:
96:dc:27:b4:18:f8:ef:1b:57:f9:89:92:67:f6:11:0b:37:78:
5c:f0:cf:d7:62:dc:bb:90:25:13:3f:aa:7a:b0:65:1c:02:ce:
0f:85:63:aa:14:d4:91:18:1e:79:47:82:cf:00:3b:fb:39:3e:
cc:06:3e:c7:33:3d:3f:c2:b1:7d:44:60:1a:2e:27:d7:5d:d3:
b6:51:85:90:0b:5c:93:11:9c:9c:c6:0c:8c:c8:fe:87:30:9a:
72:ce:fb:29:27:92:95:4c:48:3c:b5:43:80:c6:ff:72:b8:0e:
74:e8:a9:95:71:b8:7a:5c:30:90:3a:94:b2:19:4e:ff:9b:bd:
5d:df:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:19 2025 by rpki-client