Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: w/hGkq0EKZ4HxIGsJORwHO69t/Qs9xgMmyEY46FyDnc=
Subject key identifier: E8:E8:80:EC:8D:D2:89:E8:0E:FE:BF:15:10:3E:FD:9F:07:BF:0A:CE
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 0196A9C29C9E59E886006EA5AFEC027AF97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 2F
Signing time: Wed 07 May 2025 08:00:25 +0000
Manifest this update: Wed 07 May 2025 08:00:25 +0000
Manifest next update: Thu 08 May 2025 08:00:25 +0000
Files and hashes: 1: h5XDYzeHNRC78pQldSdBc3wtmlU.roa (hash: y/jCUDtK6aEdyycsVox6EyAhTQt3+YacMPTfw4ggZeM=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: dkPob92pDMp5ulOKelPre4rMt9O/jXregkStj+MrDYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:9c:9e:59:e8:86:00:6e:a5:af:ec:02:7a:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: May 7 08:00:25 2025 GMT
Not After : May 8 08:00:25 2025 GMT
Subject: CN=e8e880ec8dd289e80efebf15103efd9f07bf0ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:68:65:a4:da:5d:da:46:bd:3d:2f:85:e5:
e4:d3:01:07:5b:29:e7:7a:0c:66:90:13:f6:01:68:
39:14:9e:73:64:fe:c4:aa:12:af:95:79:08:7a:66:
32:35:f5:14:f0:9c:32:cb:23:0d:81:f0:0e:74:7d:
7f:c6:13:ff:8a:ad:1a:f6:f5:9b:d8:a3:91:a4:b3:
a6:c7:76:d2:35:62:b8:3e:0d:18:39:4e:f2:2a:4e:
81:5f:d5:c1:44:5c:54:0d:08:d4:0e:82:74:5a:17:
76:7d:9d:18:ec:be:40:cc:78:b7:aa:74:97:8b:5d:
c1:66:0b:87:f0:85:26:6b:06:d7:92:f0:12:b3:6b:
e4:c5:9b:4d:4b:5a:69:d0:be:25:59:b1:18:db:c2:
fb:60:e3:93:c5:d7:9f:b7:6a:e0:31:d6:3a:bc:72:
86:0c:0c:c1:15:7c:8c:f9:08:65:89:f1:d9:1e:44:
42:cc:01:cd:f1:f3:41:8d:bb:aa:82:8f:1d:fc:ad:
95:d4:23:39:5b:6f:54:cc:a5:e0:58:c7:86:dd:7a:
40:30:4d:db:cd:f0:6a:0c:a9:d8:49:53:dd:31:14:
77:a9:e1:8c:14:fd:c0:f4:50:30:55:79:c6:c6:a8:
60:7d:78:a4:9c:f0:d2:e5:b9:76:ed:9a:10:e7:9f:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:80:EC:8D:D2:89:E8:0E:FE:BF:15:10:3E:FD:9F:07:BF:0A:CE
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:5f:4b:7a:46:35:70:16:cb:98:34:d2:cc:4b:a0:43:5b:
ad:d0:06:42:42:b0:38:e4:1f:15:e1:1d:d5:9d:e1:f0:04:63:
b5:a3:29:f3:88:c9:a6:9e:28:ed:c8:39:b3:6b:10:3d:5c:f0:
42:d3:15:1a:f2:e9:7c:15:94:34:dd:83:0b:28:09:86:9e:88:
10:4b:dd:cb:c6:92:9a:af:90:cf:1a:5a:73:ce:06:4d:b3:3f:
37:8c:b0:77:03:29:4e:ee:0b:53:53:8d:6b:1a:93:71:d4:68:
3e:38:89:7a:95:c6:15:07:fb:33:ae:64:d3:61:a5:6d:61:11:
ff:8b:c4:fa:24:11:ca:19:5d:9a:04:0d:b0:65:74:89:73:ea:
92:65:f0:24:b8:f9:85:75:d0:ca:5d:ea:6b:e5:e9:ba:8d:58:
ca:57:89:d8:8e:88:a2:12:86:7a:a5:df:b5:5d:a5:ca:7b:af:
0d:76:04:69:da:a2:8d:b3:b3:a0:9b:0d:5b:fd:43:2b:92:90:
2e:88:0d:44:f3:d7:0b:c6:d2:df:98:e7:93:dc:ea:c5:9c:83:
5f:e3:56:74:0d:39:c0:27:97:b6:96:65:cd:25:89:2e:51:b3:
1d:bb:9b:c1:cb:b4:2e:31:e1:48:46:3b:3f:9b:4b:32:a4:88:
29:dc:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:17:01 2025 by rpki-client