Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: 4uJ6dB97ASbarzxPSNXyTJsOBtlFMJaNu1NYiy8iISY=
Subject key identifier: B2:C4:BD:4B:34:F6:26:14:2B:8C:D1:11:F8:57:7A:85:62:BB:CC:21
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 0197CFBBEB5583F5963617603BB040028BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 0F05
Signing time: Thu 03 Jul 2025 10:01:28 +0000
Manifest this update: Thu 03 Jul 2025 10:01:28 +0000
Manifest next update: Fri 04 Jul 2025 10:01:28 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: ki++dlnWwTqNcZmIrXatft78B4l9JUgu9ioTruFjVdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:eb:55:83:f5:96:36:17:60:3b:b0:40:02:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Jul 3 10:01:28 2025 GMT
Not After : Jul 4 10:01:28 2025 GMT
Subject: CN=b2c4bd4b34f626142b8cd111f8577a8562bbcc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:68:31:92:c6:ea:af:f2:d6:26:3d:75:d3:
a5:24:54:e3:36:b0:06:f5:a0:86:4a:7a:c2:c7:ef:
da:df:92:81:83:f1:16:3e:86:9d:3d:4e:dc:e0:36:
4d:af:1f:f0:33:bb:67:63:17:de:84:26:df:8c:84:
ba:46:fe:b2:0d:ce:3a:40:f7:3e:da:4c:56:2f:26:
e4:56:7e:f9:94:89:ac:a3:0f:51:68:96:c7:b4:82:
e9:0f:d6:d1:65:fa:7d:f4:0f:57:95:e5:25:5a:be:
71:a5:8d:1c:7c:4e:97:a5:fd:1b:77:d4:de:de:1b:
67:3d:7f:76:bb:3b:56:b4:5f:c0:2b:57:36:f3:38:
8b:c3:cc:be:65:21:c9:d3:a5:9a:ba:c2:2f:24:c1:
89:01:78:fa:cd:c7:be:0a:40:cc:d2:1e:83:23:da:
b4:14:0f:8b:3d:1c:51:eb:7b:b2:b9:49:14:a2:bc:
b3:9d:c7:2e:e5:03:d5:1a:43:af:ac:35:7c:7a:e3:
3c:a1:6a:73:f0:a4:11:75:99:d0:e5:2a:95:d2:d4:
20:1b:5b:c6:e8:48:8c:b2:a2:c8:04:06:9b:bb:6e:
6d:e3:69:a3:0c:8f:d7:e2:a4:b7:26:48:60:5a:73:
11:2f:b8:51:a6:e5:ef:cc:be:42:b7:33:20:63:b0:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:BD:4B:34:F6:26:14:2B:8C:D1:11:F8:57:7A:85:62:BB:CC:21
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:78:d2:ec:3b:ab:56:19:42:06:cc:35:4d:b2:38:97:28:
ea:24:ae:c8:bf:31:22:70:33:ab:07:0a:68:fe:40:8a:e6:ee:
d0:b7:07:46:f9:c5:19:32:c9:09:22:0f:a5:83:b6:12:ec:a3:
52:a9:38:82:d0:dc:e2:8f:c4:6b:84:10:5c:22:3b:7c:8e:4d:
17:6e:3b:5d:31:93:b7:8f:91:d6:3b:e2:94:ac:e7:0c:8e:1f:
f7:cc:c9:ca:f6:87:90:1b:4c:40:a1:c5:ef:f8:3a:d2:6d:36:
df:1d:4b:5f:5f:ec:38:c6:74:db:f7:0f:67:70:97:98:d0:20:
52:89:8e:0f:e3:9d:92:d3:c3:6c:11:5e:8b:13:74:2a:bc:d9:
54:b0:0b:ae:9e:50:ab:8d:c3:ac:6d:f5:3d:52:02:92:4f:f5:
af:14:4e:55:57:73:f8:e4:b6:fe:e2:95:37:d8:8d:30:2e:cf:
da:ea:e3:3e:28:26:e3:8c:12:e8:01:1d:84:e8:93:04:3e:53:
8e:b4:b5:43:5e:06:d1:c3:74:d0:db:60:48:c0:4b:7b:a2:40:
31:a7:2d:f0:00:0b:b7:62:99:23:8f:37:6b:8c:26:a1:24:c3:
91:2b:1b:80:8e:41:0c:89:92:59:47:c7:70:9c:6e:b3:36:02:
2e:94:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:35:10 2025 by rpki-client