Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: gclASa4eByWgEbL1+UWadIC560r8f5aj3pFRD6s7muI=
Subject key identifier: 2B:BD:D0:50:AC:6F:5E:ED:EA:EA:73:4E:03:72:3A:B1:68:7B:B2:B8
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0197CACC4A1C5F9801EA505088AA23C4A80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 11:01:15 +0000
Manifest this update: Wed 02 Jul 2025 11:01:15 +0000
Manifest next update: Thu 03 Jul 2025 11:01:15 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: y2P4M3k42qi0+4nF1CAtxskmJ7xH4PmNfYsmpwiiqLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:4a:1c:5f:98:01:ea:50:50:88:aa:23:c4:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jul 2 11:01:15 2025 GMT
Not After : Jul 3 11:01:15 2025 GMT
Subject: CN=2bbdd050ac6f5eedeaea734e03723ab1687bb2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:59:ca:e0:6f:d4:1b:bb:a0:21:87:a9:70:
74:54:dc:c1:bb:46:fe:e5:26:91:aa:29:9d:24:aa:
73:97:50:fa:df:6d:b1:0f:11:f3:4a:47:36:fd:28:
ec:ae:91:22:68:8d:96:b6:cb:32:3f:8f:7c:01:5e:
78:84:2e:79:22:f1:d3:5f:3d:79:da:78:99:c0:03:
89:0c:86:f3:84:7b:d6:89:f3:f0:08:c4:d8:69:14:
8d:54:dc:78:d3:c6:90:cf:fa:9e:2e:c2:34:75:02:
bd:a6:de:e4:35:d6:7c:0b:3e:90:33:77:8f:a4:a6:
a4:74:04:50:bb:61:ef:56:e9:e6:09:92:53:46:65:
d3:a4:22:26:bc:ab:79:cd:3a:a7:d6:60:80:fc:80:
a9:2b:6f:8c:f0:8a:02:cc:9f:d8:2b:2d:d4:df:88:
bf:f8:d6:ae:c9:28:4a:5d:80:e7:e8:26:01:ee:bb:
c4:60:88:b1:84:f2:1c:3a:97:6a:fe:f7:45:a8:57:
d6:a0:c1:a8:56:1b:da:2e:bb:62:36:74:e9:39:45:
a2:62:62:39:e3:40:91:dc:15:dc:87:83:0b:13:8e:
2d:2e:59:df:21:ce:18:b5:d3:cb:60:23:a6:36:4c:
b8:cd:dc:c6:14:15:07:9b:33:e6:4c:6e:95:c8:7d:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:D0:50:AC:6F:5E:ED:EA:EA:73:4E:03:72:3A:B1:68:7B:B2:B8
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:a5:c8:b7:1f:9d:d6:88:1d:8d:7c:c3:3e:7c:d3:31:43:
0e:c7:f5:f3:4f:28:12:38:44:63:f3:6b:fc:8b:f2:21:6a:32:
57:f3:8f:8a:46:b0:f3:7e:47:75:74:a2:bf:cb:6e:4b:c9:99:
2b:a1:58:34:d5:18:d7:9b:d1:b7:5a:87:07:a1:61:69:e6:a4:
26:84:37:bd:04:d6:34:e3:ac:42:06:da:b8:ec:40:e4:1e:b7:
e5:05:de:c9:73:95:a6:68:cd:96:b5:80:60:f1:1f:d9:9c:96:
14:a6:59:b4:ac:49:52:d3:52:ae:48:3e:2e:f5:f6:0b:f2:e6:
b7:0d:ea:11:7c:06:ef:a3:c4:80:7f:e4:8a:f3:83:b5:7a:59:
ad:46:8d:37:08:1c:12:89:33:13:25:a9:92:d2:ef:c0:ae:f8:
9c:38:13:09:16:4c:f3:27:4e:2b:80:27:dc:d7:22:62:e9:ef:
6a:5d:5a:90:0c:8a:30:c2:f1:f3:d7:24:57:6f:bb:a7:44:13:
73:da:37:f4:2e:21:75:ea:f3:ea:58:8b:a7:78:53:10:41:9b:
1c:c2:c8:3f:c4:2a:42:95:a5:9b:2f:64:78:b8:0f:24:f0:fb:
01:91:dd:d3:4f:d4:50:92:64:c8:62:4e:f4:a3:cf:9e:62:35:
78:3d:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:02:50 2025 by rpki-client