Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: pj1H30i7rsuPQHgoMAQSk8qF5AnK1WXU5emAFVddQ2A=
Subject key identifier: 0D:E6:A7:F7:87:B8:EB:F2:9B:3E:AC:5D:E7:72:57:F6:F2:E8:04:82
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01978244E099C5EE12625A0588E3DDCADC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 09:00:41 +0000
Manifest this update: Wed 18 Jun 2025 09:00:41 +0000
Manifest next update: Thu 19 Jun 2025 09:00:41 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: 3CGGlVGr83ok29OtKKnkX3l2lDnK7AtKbEQf0jdYSaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:e0:99:c5:ee:12:62:5a:05:88:e3:dd:ca:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jun 18 09:00:41 2025 GMT
Not After : Jun 19 09:00:41 2025 GMT
Subject: CN=0de6a7f787b8ebf29b3eac5de77257f6f2e80482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:0c:05:f7:9f:d8:21:0a:0b:7a:0c:f1:42:
6b:9a:04:c2:2f:e4:b1:49:df:d1:3e:40:5e:aa:15:
79:dc:ca:3a:6e:65:15:86:09:1a:fa:0c:52:be:4a:
e1:81:a7:4b:74:a5:a1:83:bc:7b:6d:4d:c8:86:99:
8f:79:bf:c9:94:1b:ec:80:4f:f9:d2:e8:6f:ad:1f:
7d:cf:b4:f9:9b:e9:f0:34:98:55:2f:a4:46:56:de:
91:25:5b:05:ff:00:a5:bd:e8:97:a2:ce:7e:77:8f:
1c:93:3e:e2:a4:9f:b2:47:4c:45:29:0d:c7:30:b2:
7f:6b:eb:8d:f1:99:00:0c:44:64:4d:8f:81:8f:40:
72:70:99:32:85:99:34:f6:39:ae:53:c7:76:4c:d2:
c8:61:9d:f7:78:03:05:56:5a:86:d5:d9:f6:33:f2:
f4:f5:2d:50:79:8c:13:d6:c7:99:3c:a6:ca:79:2c:
1a:e6:0d:db:05:37:e0:24:83:45:94:56:07:04:b9:
d9:b3:6e:91:10:f1:69:24:e7:56:81:77:58:08:6f:
af:79:c6:7a:25:07:d3:6f:70:f5:83:f0:fc:58:6a:
1d:58:98:50:9a:ff:73:e7:9b:59:6e:6a:10:8e:f7:
12:4a:16:04:39:bf:8b:31:b4:59:ba:4d:ad:4c:5a:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:A7:F7:87:B8:EB:F2:9B:3E:AC:5D:E7:72:57:F6:F2:E8:04:82
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b1:de:60:3a:74:df:76:9e:7c:e6:20:3c:5f:f3:23:27:b4:
6a:73:31:6c:0f:1e:99:8a:9f:8f:92:ff:62:83:94:54:32:f5:
52:e4:66:40:83:e5:76:6f:a1:af:76:06:1b:cf:81:1d:d3:45:
09:f1:c3:d8:37:88:00:42:38:e0:21:3e:38:5d:a4:87:45:86:
11:53:9f:0f:bf:c1:b0:f4:69:ba:df:9f:7b:46:67:27:e0:10:
7e:b2:0b:71:46:42:3a:a1:5d:4c:0a:87:a1:3d:bf:0a:bf:40:
82:f2:e1:4e:fa:81:07:73:a1:ee:4a:bc:48:ea:7c:39:07:ef:
4e:5f:6f:bd:d7:b5:89:76:ff:f2:ea:a0:72:76:1b:a2:fa:85:
e8:c0:a7:6f:61:ed:83:46:e8:5a:78:64:2e:c7:40:8d:fe:ed:
c1:9b:5c:e6:88:96:4e:6b:b2:5f:8c:49:19:b6:a3:32:79:fb:
dd:29:7e:09:4e:86:62:de:b6:bd:b6:8d:1b:64:0d:07:a8:64:
c5:3a:ff:44:e5:b9:29:c8:b2:6b:94:9d:4f:d7:25:59:33:2c:
16:db:6d:ce:15:95:85:36:a6:e2:da:39:b4:34:f7:c3:ae:85:
e7:0b:fe:ff:1a:e5:3f:b3:53:36:3c:2c:1e:b8:8a:bc:4e:ff:
1b:25:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:26:32 2025 by rpki-client