Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: t/kAwA9D3noAn+U1UJ7qVIhKrVZsbVNCQCHpMzSBPV4=
Subject key identifier: 4B:D3:11:44:30:7F:60:C8:2E:EB:98:EF:7D:8B:FF:DF:5E:25:5C:61
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 0197B88EFE55D7587604993350A864DD03E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 01C3
Signing time: Sat 28 Jun 2025 22:01:08 +0000
Manifest this update: Sat 28 Jun 2025 22:01:08 +0000
Manifest next update: Sun 29 Jun 2025 22:01:08 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: 0R7Zq7dWYBZKOb8WSMptJiJdXVzdW0tu6eKR1tIhzjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fe:55:d7:58:76:04:99:33:50:a8:64:dd:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Jun 28 22:01:08 2025 GMT
Not After : Jun 29 22:01:08 2025 GMT
Subject: CN=4bd31144307f60c82eeb98ef7d8bffdf5e255c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:11:d4:d4:e8:81:08:39:ed:e6:e4:4d:3c:
f7:60:ea:8a:1f:60:e2:f9:c7:43:18:ac:f4:5d:e1:
1f:72:a2:d2:8d:76:8a:81:19:11:a7:c1:14:77:8b:
3b:49:76:50:bb:50:07:8a:24:43:69:cf:09:b8:09:
ab:56:4c:bc:0d:46:6c:33:18:f3:f5:e5:d2:43:7a:
0e:14:14:5c:b3:26:31:6d:cd:0e:78:b3:c0:08:5c:
1d:80:7c:d3:13:89:83:aa:cb:49:89:62:68:fa:f5:
b5:77:83:bc:de:29:63:28:fd:00:7c:50:77:92:f5:
bb:48:0a:21:09:82:5b:9d:bd:cf:b7:7d:42:a4:34:
19:52:2c:99:99:ab:a2:a7:c2:c8:3c:99:8a:a5:f7:
71:ed:84:7a:53:6b:88:97:ea:e3:b2:18:b9:37:43:
b6:30:56:4a:11:dd:81:2f:f9:93:8d:9d:71:93:b1:
b8:cc:02:fb:8a:90:14:08:70:06:e0:03:2e:0c:e6:
1a:0a:17:19:75:d9:f0:36:b6:91:15:41:1e:a5:db:
40:a5:21:d1:af:ef:b8:43:ab:86:b3:91:ff:84:cd:
08:3e:16:2d:54:16:3c:cd:29:5a:15:46:91:d0:83:
f3:3e:41:23:73:e9:3a:29:d4:f5:df:d2:43:73:13:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D3:11:44:30:7F:60:C8:2E:EB:98:EF:7D:8B:FF:DF:5E:25:5C:61
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:41:c1:67:ef:09:0f:81:ff:d8:c4:a3:10:7c:68:c7:75:
90:c6:4f:98:43:a9:e2:df:d8:69:47:95:b3:df:cd:e3:4c:40:
80:04:c0:80:45:fa:04:81:c7:2b:87:74:b8:92:fa:04:40:3d:
dd:5b:8d:be:23:01:9d:26:64:92:16:8e:13:f5:f1:7d:32:6f:
29:1a:a5:2d:b3:45:4b:23:41:a5:50:66:44:94:38:9f:50:1d:
10:3b:e6:dd:4f:59:f7:66:df:d7:b7:5b:ef:97:34:b0:25:d2:
9a:2e:be:ae:be:4c:30:fd:dc:8e:b6:f6:17:01:4e:1c:f2:16:
80:c2:c4:69:bc:6d:4d:d8:87:e9:bf:a2:54:d0:ec:59:86:33:
bf:2d:3d:37:fa:5f:32:73:61:42:9a:91:b5:2b:e3:90:c9:18:
97:ac:a4:c4:ee:4c:61:3d:b4:d7:79:45:39:62:cb:63:9a:42:
11:27:04:80:28:b6:81:a0:64:8a:10:cd:59:ac:c7:6c:b0:bb:
f5:61:7a:47:a7:97:ad:d1:cb:07:0b:30:75:95:a0:02:99:d1:
db:83:a2:d8:1c:41:86:98:76:8f:9f:d8:9c:05:a3:f2:97:bf:
96:1a:04:07:e9:94:55:0c:cd:37:85:17:39:7d:4f:d6:4f:b9:
f3:33:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:54 2025 by rpki-client