Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: 3mRGMd48JOXrVy7jzEoZ+OkkTcZunPJNIaSY5XoK8Pw=
Subject key identifier: CB:3F:46:0E:62:6B:AA:D2:4F:1A:CF:18:01:71:30:CD:17:34:32:AC
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 0197B8211C530F096EF0454C5AB495842A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: BB
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: h5XDYzeHNRC78pQldSdBc3wtmlU.roa (hash: y/jCUDtK6aEdyycsVox6EyAhTQt3+YacMPTfw4ggZeM=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: 6k3607p/yVRBBlk8pYVb4a4n9L2DYKsBU24offgKpPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1c:53:0f:09:6e:f0:45:4c:5a:b4:95:84:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=cb3f460e626baad24f1acf18017130cd173432ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:25:22:5e:ba:ac:c6:5e:3d:78:c6:1d:bc:
75:06:e8:96:8a:51:47:61:1d:8b:72:83:1e:c3:c0:
e4:f0:0e:5f:bc:7f:58:d2:94:b9:58:82:0b:f0:35:
a9:e3:47:24:4b:6f:84:68:c9:89:38:20:43:73:f0:
0c:44:bc:ad:3f:08:97:f5:0e:c8:60:31:18:a3:88:
b6:27:0b:a7:8a:be:69:b0:c4:78:db:d0:35:27:2c:
bf:49:6b:a5:7e:23:b8:0a:07:f7:af:1e:0b:6f:71:
7a:ed:67:b2:bb:68:4f:d9:17:6f:6d:d9:e9:24:2c:
5b:a7:49:77:dd:de:3b:d6:02:ed:a5:bb:af:09:4c:
7d:b0:7e:f9:f4:dd:ba:3a:f0:ef:7f:b7:9d:47:16:
04:3b:85:d5:a3:8c:c0:bc:82:18:c2:00:16:64:e5:
40:fa:56:35:79:ec:5f:b6:ec:b0:6f:9e:02:a2:5f:
b7:93:7b:2f:ba:bd:c9:5c:db:70:4e:7c:4d:0f:b4:
14:28:a2:18:2a:4e:f9:28:a3:50:54:8d:30:48:05:
ef:a2:96:3a:2a:31:73:d9:57:e2:9f:95:bd:81:49:
3d:ee:44:d3:4a:4d:20:f3:71:6d:11:4d:8a:99:67:
78:05:11:a1:3a:d5:38:5c:94:c6:79:28:6c:eb:d8:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3F:46:0E:62:6B:AA:D2:4F:1A:CF:18:01:71:30:CD:17:34:32:AC
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:22:16:3b:a3:55:4e:d8:c5:43:83:83:4e:50:2f:7e:3c:
55:7b:c2:12:35:1f:b4:0e:b9:45:0a:e5:02:6a:24:29:dd:ca:
a7:dc:bc:73:17:d0:82:34:c2:e8:57:90:c5:23:34:83:8c:49:
80:b7:ee:88:c7:96:31:d3:e1:c9:7e:61:56:24:55:76:69:7f:
e7:4c:57:92:57:84:b3:77:7b:c3:d5:8a:5b:fa:d1:1b:83:4f:
d8:47:bc:4f:38:a3:7a:2f:da:b9:5e:e1:2a:e9:7d:20:43:93:
b1:d3:fd:17:7a:83:de:57:1f:f5:6d:93:57:d3:78:76:cc:c4:
70:5d:8a:dd:26:07:b1:4d:2e:b2:af:0e:bd:92:5d:55:00:c2:
e0:75:a1:14:31:ec:cc:5c:24:9c:c1:fa:cb:2f:46:ae:dc:84:
38:34:19:5c:48:7c:6a:2e:75:d7:a8:36:72:02:8b:54:8d:b5:
20:a8:a4:2b:40:ed:e6:db:3d:4f:86:ea:eb:fa:7b:01:eb:1c:
cd:02:9e:69:17:b2:a0:df:bd:54:8f:d6:5f:43:a4:6c:b1:69:
ce:fb:2b:e1:10:4a:13:a8:90:9b:d9:d2:11:59:a0:93:4e:df:
02:3b:5e:96:56:00:28:28:56:b5:44:a3:e7:af:8e:d5:dc:dc:
71:28:a0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IRxTDwlu8EVMWrSVhCpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDZhNDlkMjMwMDdmYmIxMjQ3MTkyZmJiN2JkOTgyZWIz
NzMzNWYwHhcNMjUwNjI4MjAwMTA2WhcNMjUwNjI5MjAwMTA2WjAzMTEwLwYDVQQD
EyhjYjNmNDYwZTYyNmJhYWQyNGYxYWNmMTgwMTcxMzBjZDE3MzQzMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YclIl66rMZePXjGHbx1BuiWilFH
YR2LcoMew8Dk8A5fvH9Y0pS5WIIL8DWp40ckS2+EaMmJOCBDc/AMRLytPwiX9Q7I
YDEYo4i2Jwunir5psMR429A1Jyy/SWulfiO4Cgf3rx4Lb3F67Weyu2hP2Rdvbdnp
JCxbp0l33d471gLtpbuvCUx9sH759N26OvDvf7edRxYEO4XVo4zAvIIYwgAWZOVA
+lY1eexftuywb54Col+3k3svur3JXNtwTnxND7QUKKIYKk75KKNQVI0wSAXvopY6
KjFz2Vfin5W9gUk97kTTSk0g83FtEU2KmWd4BRGhOtU4XJTGeShs69gEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs/Rg5ia6rSTxrPGAFxMM0XNDKsMB8GA1UdIwQY
MBaAFInWpJ0jAH+7EkcZL7t72YLrNzNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQt
NmZkNzUxZGU3MTdhLzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQtNmZkNzUxZGU3MTdh
LzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASf8iFjuj
VU7YxUODg05QL348VXvCEjUftA65RQrlAmokKd3Kp9y8cxfQgjTC6FeQxSM0g4xJ
gLfuiMeWMdPhyX5hViRVdml/50xXkleEs3d7w9WKW/rRG4NP2Ee8Tzijei/auV7h
Kul9IEOTsdP9F3qD3lcf9W2TV9N4dszEcF2K3SYHsU0usq8OvZJdVQDC4HWhFDHs
zFwknMH6yy9GrtyEODQZXEh8ai5116g2cgKLVI21IKikK0Dt5ts9T4bq6/p7Aesc
zQKeaReyoN+9VI/WX0OkbLFpzvsr4RBKE6iQm9nSEVmgk07fAjtellYAKChWtUSj
56+O1dzccSigrg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:10:10 2025 by rpki-client