Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: wsVIbuwt/Kc8+yex4v3bbG5f4SqbWdd9g5Ap/z470pA=
Subject key identifier: F7:46:ED:A0:29:A4:C7:6D:A4:74:71:B0:9E:7D:0A:3C:B0:C2:E2:82
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01988CFD215D029AB9C955E09EBD2098CB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 04:00:56 +0000
Manifest this update: Sat 09 Aug 2025 04:00:56 +0000
Manifest next update: Sun 10 Aug 2025 04:00:56 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: v8u2HpTqU9LFu+VbCH9wiUC86EqILMlSYr1K/hwL4M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:21:5d:02:9a:b9:c9:55:e0:9e:bd:20:98:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Aug 9 04:00:56 2025 GMT
Not After : Aug 10 04:00:56 2025 GMT
Subject: CN=f746eda029a4c76da47471b09e7d0a3cb0c2e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:c6:f9:35:c1:21:8e:b4:9c:4b:8f:9b:c4:
e5:a0:88:74:24:16:99:00:cd:d6:96:78:75:cb:54:
6b:d5:15:86:e4:ed:d6:72:15:e3:42:dd:91:0c:03:
a0:4e:e0:3b:3d:e3:c7:eb:31:2d:c4:34:52:1c:06:
eb:37:55:08:af:da:ed:1d:9b:9f:f4:71:74:4e:35:
cb:5d:c7:cb:6a:ef:c0:4a:cf:01:b2:4e:ce:a5:e5:
1c:3f:0d:b8:93:b7:30:1e:67:11:6d:e7:b5:6c:c7:
a0:0f:52:bd:38:dc:b8:f5:6a:70:05:77:ac:54:f1:
c8:0d:0b:5e:57:f1:0c:56:a4:fa:65:19:b7:60:ad:
c5:35:9d:5e:f2:66:7c:8b:a8:86:3b:07:10:61:be:
7a:75:06:6b:70:cf:5d:05:80:52:0f:f5:b5:33:c4:
eb:5a:27:dd:ec:ee:e2:37:e2:53:33:7f:70:d5:5c:
a3:23:32:f7:5f:be:0f:4f:22:a1:c5:3f:14:ef:51:
87:f9:58:5e:61:81:1d:31:5e:8e:64:43:cf:09:22:
bd:fb:83:54:0e:da:ce:22:54:4f:a3:50:5f:d8:7d:
2b:ed:7d:87:6a:26:c5:30:55:47:ac:66:f9:64:0a:
12:92:3a:a2:e5:8b:af:65:45:1b:4f:3f:b8:f6:7f:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:ED:A0:29:A4:C7:6D:A4:74:71:B0:9E:7D:0A:3C:B0:C2:E2:82
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:c4:fa:24:17:79:bb:b2:a0:2b:3b:70:82:45:c1:36:f0:
c5:31:b7:38:f7:52:f3:bd:94:d2:cc:4e:fb:32:a2:8a:6e:a4:
d7:13:63:a6:8e:02:1c:f1:11:00:12:79:9b:68:18:b6:1b:f9:
6f:75:be:41:1e:89:38:8f:d8:58:60:a5:db:37:38:14:87:7d:
aa:ed:55:d1:7b:a6:74:1a:81:e6:9e:3a:83:9c:72:8f:ee:7c:
97:0f:af:6c:96:7e:81:da:97:27:e3:7b:e0:6a:35:26:59:89:
b4:b3:ae:13:30:88:6f:85:5b:b2:bd:c3:9e:a4:94:de:e9:76:
2e:4d:9f:08:aa:6c:a0:bb:fa:71:c6:ff:e9:6c:4d:5f:20:8c:
ae:1f:9b:48:ce:8c:57:77:c4:24:b5:7f:d9:8a:11:e6:49:5f:
62:26:46:ad:64:93:b4:5e:d1:6f:04:d3:89:eb:0a:c6:b6:98:
a7:fb:b4:37:57:36:5d:8b:5e:38:3d:95:fb:e5:07:70:fc:74:
2d:c0:8d:f2:67:52:eb:27:65:ca:3a:8c:f7:d0:39:d5:b9:1f:
1b:a8:02:5a:df:64:7a:a8:da:47:e0:7e:58:aa:82:49:4d:7e:
48:45:e4:c9:20:72:f8:0e:e7:77:a0:57:08:f6:70:7a:7a:e6:
1c:6c:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:45:32 2025 by rpki-client