Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: 37AFYZBG0ushoC6VNIuyABks8ZrAGNvWf9xemz/FjF0=
Subject key identifier: 63:D6:BE:2A:53:B4:E5:FD:32:DF:C8:1B:65:83:AF:52:86:EC:A9:AC
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0196A0888A4FD9572C7B7128BF409942188E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0B92
Signing time: Mon 05 May 2025 13:00:24 +0000
Manifest this update: Mon 05 May 2025 13:00:24 +0000
Manifest next update: Tue 06 May 2025 13:00:24 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: DQpIaGuRQqdELlUOvl4dhNQ0+EmAB7VkxrxflVWLLAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:8a:4f:d9:57:2c:7b:71:28:bf:40:99:42:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: May 5 13:00:24 2025 GMT
Not After : May 6 13:00:24 2025 GMT
Subject: CN=63d6be2a53b4e5fd32dfc81b6583af5286eca9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:48:2a:60:5b:56:3d:1d:89:c5:00:68:3b:
6b:9d:5c:74:63:4d:08:80:aa:1c:eb:36:c3:cd:38:
33:1a:b7:8a:73:51:7b:ba:42:6f:68:0f:68:3b:4a:
09:3b:0a:28:d0:3f:da:4a:73:35:f8:c5:3b:f5:c8:
b5:3d:8a:00:78:e0:fd:34:25:33:12:a8:29:84:7c:
64:18:cd:d3:74:5c:01:6a:84:f1:6c:9f:8c:cc:51:
37:90:05:d6:ab:f2:61:5f:89:35:de:57:b6:e3:ed:
98:95:ba:e4:1e:6b:6c:cf:14:35:39:ba:39:22:6b:
88:e4:bf:cc:93:68:b8:a3:e0:37:b3:d3:ec:cc:c5:
5c:39:bd:23:ab:b4:1b:f6:9b:5a:bf:55:2d:18:68:
75:0d:85:fa:76:20:08:f4:4a:f7:78:46:0e:0d:15:
3b:81:7b:c4:c7:37:c8:6f:f8:c7:6f:6c:a0:8c:28:
fb:de:03:f0:52:41:4e:38:4d:58:12:b8:b9:f9:0c:
36:3d:a8:61:36:e5:e8:72:9b:70:37:22:20:19:8f:
e6:3f:58:37:28:e3:44:d4:9e:66:7e:62:c6:61:1c:
fb:98:0a:ed:27:c1:7f:85:6f:43:56:6d:9b:6c:9f:
58:2d:af:7a:ac:df:e5:c7:b8:33:c0:87:e8:5d:c2:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:BE:2A:53:B4:E5:FD:32:DF:C8:1B:65:83:AF:52:86:EC:A9:AC
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d5:95:20:d8:85:82:cb:a1:9d:60:c6:f1:b4:a2:71:9d:d9:
32:45:fb:a1:75:01:13:2b:c3:6d:15:0c:f7:0c:f4:1e:3f:ed:
71:86:7c:bc:22:f0:58:7d:10:86:7f:72:a6:42:e4:d9:62:52:
ae:3d:2b:cc:65:f7:d4:7e:07:91:25:75:f5:e4:6c:08:fe:c4:
3f:47:d1:6c:6c:d0:fe:39:4b:1b:a8:f2:e7:1e:59:be:c5:54:
b6:43:07:cf:59:72:e2:8a:5a:35:bd:57:73:57:5d:29:85:63:
7a:61:cc:3b:70:18:ea:44:b4:d5:c1:c7:16:60:06:75:5d:1b:
0d:43:35:8a:c0:57:54:d4:6f:77:ae:0d:22:06:38:d6:3c:59:
c4:4e:b8:2b:40:38:3f:a7:0b:0b:82:80:10:f9:51:9d:2c:c5:
c5:27:db:d8:90:cb:75:f9:04:ea:4c:3d:bc:8a:25:c9:79:54:
8f:a3:79:6f:72:de:2e:71:23:ce:45:a2:fe:b4:13:f7:67:e2:
bd:0e:73:07:d9:a9:96:17:61:f3:08:9b:e3:b4:12:3a:40:48:
55:78:fa:b6:79:af:5c:44:19:60:27:8b:9a:d2:bf:dd:ab:55:
09:68:23:b6:da:8e:88:c9:a8:ee:af:3b:ef:89:c6:61:85:e9:
99:d4:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:31:24 2025 by rpki-client