Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: Ggj7Ax3WX1CHK/8pB/eBMpeb1bprW2ILFxJ5zdWxjmE=
Subject key identifier: 5F:89:70:F1:F7:A2:83:99:96:F7:BE:31:88:A5:64:D0:91:C0:FB:42
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 01976DE2B08E21497A9A6D1BE9303333D5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 01E3
Signing time: Sat 14 Jun 2025 10:01:02 +0000
Manifest this update: Sat 14 Jun 2025 10:01:02 +0000
Manifest next update: Sun 15 Jun 2025 10:01:02 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: TnC/RNAQSmDhkpQktUIb/EB07zPsbsAkf2+VIS+ECUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:b0:8e:21:49:7a:9a:6d:1b:e9:30:33:33:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Jun 14 10:01:02 2025 GMT
Not After : Jun 15 10:01:02 2025 GMT
Subject: CN=5f8970f1f7a2839996f7be3188a564d091c0fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:08:6e:e8:39:bb:5a:86:b8:54:ee:ab:3d:
1c:48:1d:2e:10:95:a2:76:ff:5a:8b:09:5f:48:9e:
79:7a:e6:cc:54:6b:29:e0:d3:b2:07:8e:bb:65:ee:
7b:4a:6e:b3:0e:16:b5:b5:95:74:54:c1:b2:ad:88:
ce:07:15:a4:29:3d:94:a6:10:53:0f:e5:2f:37:69:
ab:87:fa:38:a4:38:ee:70:cf:a6:6b:87:f2:39:fc:
64:19:00:be:8c:ce:ba:c8:97:cf:c9:53:5b:cc:06:
3e:a3:a2:7a:d5:90:0d:1d:ab:a0:84:b3:a3:45:aa:
fc:44:40:c6:eb:9e:78:e9:b9:40:9f:a0:da:2f:4f:
27:1f:a9:9d:0d:e2:5b:fa:c6:9b:60:be:00:eb:17:
00:c0:32:12:1a:bc:63:cd:a4:e8:da:14:8f:e0:67:
d0:00:92:fe:33:cb:f7:9e:6a:51:0a:f0:ac:78:8f:
d9:1b:08:7c:7d:ee:8e:5c:0c:a6:32:42:c3:f6:7d:
c5:50:ef:ad:20:ab:e9:5b:60:05:90:1a:60:fc:5f:
13:66:4f:d5:ae:35:d2:84:e4:d6:8e:9d:68:c9:d5:
19:4f:65:7f:d7:d2:75:95:35:8b:f5:55:e4:f2:63:
93:eb:48:eb:18:3b:b0:ad:9e:7b:39:3f:23:3c:4b:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:70:F1:F7:A2:83:99:96:F7:BE:31:88:A5:64:D0:91:C0:FB:42
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:30:a7:75:00:b7:2a:f5:bc:e7:14:b4:fd:e0:11:cb:5f:b0:
50:c5:e2:ba:7b:4d:7d:53:8c:c9:60:5c:78:9a:48:72:08:3c:
32:e4:d6:71:60:5f:08:53:e3:b6:1b:8b:3c:e9:a6:24:a3:8f:
e4:fe:89:d2:95:4d:d9:fd:18:7d:3b:25:3b:38:bc:da:09:4f:
37:63:b2:6b:de:39:69:2f:92:2c:97:e1:b7:51:df:8c:ee:7e:
ba:41:9b:ce:7f:d3:be:6f:4a:f1:d1:7e:32:ba:c2:85:0d:1f:
4d:93:fb:e8:84:f1:b1:16:69:e3:2b:5a:f9:fc:ee:f5:0e:a5:
2f:c0:f9:a0:d0:75:ea:36:20:54:47:46:6c:ff:c4:87:7f:64:
17:53:ca:a0:2c:95:bd:1f:2c:e6:d2:be:2e:e5:5c:cd:73:f5:
c9:8e:3d:ec:e7:ed:34:b5:9d:49:f7:07:82:c3:e4:52:67:23:
79:3f:f0:c1:0b:22:29:8c:ff:13:06:69:8a:f5:25:9d:d3:59:
99:a0:4b:3b:fb:45:06:1a:71:5e:ff:cb:62:a5:87:9c:7d:d3:
56:60:e0:fc:6a:e0:d1:ec:40:1c:66:d1:e4:ed:03:db:27:57:
d0:bd:d5:18:d5:ba:fd:57:2f:c4:db:31:3e:5a:e7:49:ff:c1:
80:9a:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:20 2025 by rpki-client