Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: MAm3wPky3BLOwr+3H0A0StMGfKcR4XuQnhwd7rR20Q0=
Subject key identifier: 0F:31:33:22:B4:9D:31:16:CF:B2:1B:FB:E8:2D:0D:91:C2:08:D1:82
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01968924CC567954E58F5C82A8ABCF372C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 00:00:12 +0000
Manifest this update: Thu 01 May 2025 00:00:12 +0000
Manifest next update: Fri 02 May 2025 00:00:12 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: UmQ4Nw8c5jmdgG958ra2Infg25NnHvzctQSZ0UfJJpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:cc:56:79:54:e5:8f:5c:82:a8:ab:cf:37:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: May 1 00:00:12 2025 GMT
Not After : May 2 00:00:12 2025 GMT
Subject: CN=0f313322b49d3116cfb21bfbe82d0d91c208d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:22:0e:31:61:15:e5:0a:5e:63:93:22:4e:
4b:5f:cb:22:03:93:f5:99:b7:cd:aa:b8:31:a4:34:
3e:52:02:65:9f:94:e7:c4:ac:45:7e:bb:79:33:22:
21:26:0e:80:5e:19:fa:5b:9f:73:2a:8b:ca:d0:7f:
56:2b:f6:4a:15:b1:20:bc:de:c1:44:e7:68:f6:95:
a3:3c:b0:59:5a:80:2e:2f:3b:70:69:2b:0c:a7:db:
46:bb:63:f5:18:fe:d7:10:7a:71:b6:f1:ed:ad:cd:
bf:c5:f7:5c:34:82:d6:3d:a1:ed:e8:91:6c:20:6c:
92:25:35:a5:b0:3b:29:71:86:66:87:4b:98:1f:6b:
32:ad:26:e6:e3:b1:c4:a3:34:cf:2a:78:55:23:26:
32:83:bf:a9:5d:57:73:1b:8a:07:3c:c3:3e:ed:19:
e8:24:19:16:d0:ec:a3:20:11:85:0a:1f:1d:40:e9:
b7:31:b0:0f:04:ba:c0:26:22:f0:8b:d7:8f:8b:cd:
63:b4:91:3d:58:3d:f3:bf:fc:e8:15:db:c2:d2:f0:
44:76:ad:de:f2:64:1b:e8:06:37:e1:a9:76:d0:ac:
63:de:fa:2a:ed:6c:02:bc:1c:51:37:28:de:2f:9e:
a5:1a:7d:b1:b2:c1:31:04:84:ab:21:de:b2:e4:81:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:33:22:B4:9D:31:16:CF:B2:1B:FB:E8:2D:0D:91:C2:08:D1:82
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:02:94:bf:0a:0a:75:44:bd:40:ce:aa:a2:7e:95:45:d9:
0d:70:1f:bb:7a:da:67:dc:f4:24:b0:b0:c9:91:28:e7:cb:22:
12:61:e8:c0:55:fd:f1:80:e3:52:0a:fe:db:50:25:0c:a5:93:
db:6f:cc:e9:e2:b7:56:74:5f:52:14:a1:cc:23:53:f9:67:97:
05:a3:02:92:a6:c9:df:cf:d6:37:2b:16:bc:59:9e:e6:58:e2:
60:14:db:a3:45:d6:63:e0:7a:de:07:3f:a9:c7:cd:83:be:05:
66:d9:5e:51:0f:88:89:ac:9e:9e:26:21:9b:2a:3c:08:7f:3d:
92:5e:aa:3f:9b:27:1a:0c:ce:d0:b6:5f:cf:18:a7:a9:07:75:
c9:e3:e0:f9:1c:28:ca:54:59:b4:d1:e3:46:0c:e1:76:9b:85:
70:f5:8e:28:e3:67:59:e7:5f:1b:63:ec:53:fb:78:6d:20:6d:
56:df:5c:bf:e7:1e:71:c4:e4:9d:d4:ee:c1:ea:d3:5b:f6:fc:
9c:be:23:d2:1b:c1:03:eb:f2:35:02:8b:48:5f:8f:b9:00:fe:
9d:1e:b2:f5:ce:3d:79:e0:94:a4:30:e3:f7:64:1f:35:4e:f6:
cb:f2:d3:ef:b1:06:d9:bf:44:f2:f1:4f:c5:c9:df:d0:db:c1:
83:4f:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:28:19 2025 by rpki-client