Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: kFaLPJthnpKQrpmwjdW1sfKmk0rNW/p1ajgMH8N3OEM=
Subject key identifier: 7F:81:91:49:D6:87:8D:20:C8:98:A9:E5:CC:E6:0E:E9:42:FA:53:C7
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 0196BCDBAE8BD50766E15A9AE6393BC1C8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0689
Signing time: Sun 11 May 2025 01:00:35 +0000
Manifest this update: Sun 11 May 2025 01:00:35 +0000
Manifest next update: Mon 12 May 2025 01:00:35 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: 06H/nZ1KCQbGwnpo0Eb31jhKa1EjMkxWYfv/IQ44YnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ae:8b:d5:07:66:e1:5a:9a:e6:39:3b:c1:c8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: May 11 01:00:35 2025 GMT
Not After : May 12 01:00:35 2025 GMT
Subject: CN=7f819149d6878d20c898a9e5cce60ee942fa53c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:9f:05:56:37:f2:cd:4c:a9:36:f4:dc:db:
22:a0:b4:30:4d:aa:ad:f1:14:17:37:65:2e:da:77:
b8:f0:20:77:4d:23:12:9f:d3:aa:e5:f4:be:44:7b:
92:12:d8:a3:0d:b2:e8:8b:09:4a:dc:b6:99:e5:29:
b8:1c:87:f3:8e:61:06:3c:4a:5b:f4:3d:66:8b:13:
4c:bd:fc:7b:e3:b4:1a:95:55:92:ca:8c:f5:65:4c:
92:e1:8a:9c:a1:d3:5d:da:de:92:a8:52:2e:a4:4e:
f5:9b:35:09:c4:ef:3b:fe:d2:ae:2a:bc:7a:16:95:
c1:3d:c7:a0:d8:3b:e1:e6:59:aa:3f:30:4a:83:90:
01:b9:4e:b3:b9:4a:d1:38:da:87:ac:7d:4a:c5:ed:
06:8d:52:4d:98:e9:0c:0a:45:96:51:07:67:83:a2:
a3:05:9f:d4:23:10:d1:95:a1:bf:aa:30:c6:0b:ac:
01:fc:0c:29:39:81:19:2b:db:80:8a:a6:f7:69:f1:
5d:99:82:08:06:01:77:ec:51:ac:26:d5:56:a0:a4:
5e:05:7a:e0:d7:0b:0c:81:de:18:95:58:2d:0f:73:
37:76:9f:5f:43:e4:79:60:66:05:fd:f5:aa:03:ff:
9c:e4:ac:0e:6a:a0:ea:88:ca:44:be:42:95:9d:59:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:91:49:D6:87:8D:20:C8:98:A9:E5:CC:E6:0E:E9:42:FA:53:C7
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6f:b4:96:88:01:da:3a:55:b0:e5:b0:c3:34:b9:18:fc:a9:
48:e4:b9:0c:2f:47:d0:a3:76:dc:2c:c8:ac:5f:5a:78:10:a1:
5c:1f:11:df:d6:28:66:39:df:dc:ed:2d:5d:ea:f4:ea:8e:68:
16:54:6e:34:0b:fc:f2:fb:15:21:d2:ef:27:de:bb:2c:bc:49:
d7:17:47:fd:36:28:98:56:32:ca:9e:39:1e:4c:19:8c:db:27:
56:ec:d4:1c:79:81:ad:ec:95:33:9e:62:97:03:94:7a:98:85:
e6:41:df:0a:1e:04:eb:3a:d2:00:83:53:f2:35:50:a9:ee:67:
ac:4d:9d:f3:b2:e6:87:14:d2:21:2b:d9:88:a5:7b:00:d4:89:
8f:0c:65:8f:17:02:23:96:29:ef:ee:5c:ea:f1:3b:f8:ce:aa:
20:fb:18:5f:e6:ac:3b:47:91:23:8c:f6:c4:a1:c9:29:e9:5a:
43:84:33:0f:97:b0:46:13:ff:d1:b7:79:42:f3:86:80:7d:d5:
b8:3b:c7:03:67:d0:8e:be:f8:17:42:60:57:da:85:7a:62:b0:
05:cb:50:93:4b:18:1c:87:89:59:f7:db:aa:e5:a2:86:f1:29:
3b:07:de:24:6b:65:40:a4:bc:af:c5:ea:c1:48:da:d8:47:79:
79:d2:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:10:58 2025 by rpki-client