Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: IFLLcviMD+DxbKgFtWYe6oo+IVhNw5pO3l3uyKopC68=
Subject key identifier: 7C:E1:42:E8:D5:89:D6:9F:82:10:B0:05:EE:10:A0:1A:AD:70:76:2C
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 0196C3F0A2F1EA677E003AC9D541E7FC0F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 02D8
Signing time: Mon 12 May 2025 10:00:49 +0000
Manifest this update: Mon 12 May 2025 10:00:49 +0000
Manifest next update: Tue 13 May 2025 10:00:49 +0000
Files and hashes: 1: 8USyjcIT_1GOHpkZIowE_fxQy7g.roa (hash: SrhI+FQKoLnBdoVigVeYKJo+5g+IVUyEqc65USNCWB0=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: U5EX5yM9NHEGITZ6zxB02imhVNXYuHg9XAorNk+hsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:a2:f1:ea:67:7e:00:3a:c9:d5:41:e7:fc:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: May 12 10:00:49 2025 GMT
Not After : May 13 10:00:49 2025 GMT
Subject: CN=7ce142e8d589d69f8210b005ee10a01aad70762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:99:a4:cc:91:be:2c:47:cc:a7:23:03:ab:
9a:87:94:cb:d5:3b:d4:6c:be:f0:84:f8:5e:c2:c5:
c1:86:b3:3f:f4:83:90:aa:4c:1b:aa:1c:10:fd:06:
42:1d:80:77:a0:4e:63:3c:43:7c:cd:69:1f:8f:aa:
37:67:b9:3e:f1:d7:b1:c3:52:61:db:84:b9:4b:fa:
e5:3e:e9:38:dd:b3:a0:cd:59:76:39:23:e6:7f:8e:
21:ff:42:1f:b0:ac:a6:da:32:a9:6e:37:06:cd:81:
86:3b:24:42:a5:a2:f3:49:55:d9:56:70:32:a8:68:
73:d8:68:f7:c3:0a:de:28:b6:02:10:f9:ea:d2:6f:
68:18:56:48:de:7d:bf:cd:fd:72:76:56:0e:cd:1a:
fd:b3:ef:76:6a:7f:e6:89:19:c5:94:b4:94:14:d1:
a4:25:c3:2f:cb:b0:04:35:bc:a7:e6:f8:ce:f3:ff:
03:13:89:7c:83:88:f0:97:75:d4:8d:75:3e:45:9d:
0b:84:3c:bf:88:35:b5:dd:24:43:68:b5:74:b8:10:
d2:a5:36:d1:49:d8:ad:0f:0f:37:6d:da:e7:02:f9:
06:8e:e4:7d:6e:e2:1c:e3:c1:80:0d:55:02:01:a1:
e2:1d:ad:10:aa:1e:62:24:d2:d5:96:2a:2c:99:74:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:42:E8:D5:89:D6:9F:82:10:B0:05:EE:10:A0:1A:AD:70:76:2C
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:54:fa:9c:ab:96:9f:04:f1:54:67:d9:a4:d9:5b:dd:53:
a4:b4:af:db:61:dc:e9:52:49:39:fe:69:84:f2:a7:35:f5:b8:
3d:44:7f:85:59:f3:62:0f:6b:c3:4d:45:f9:2a:35:70:10:5f:
4b:be:f4:20:29:e3:3f:2f:60:35:cc:27:96:bd:d2:79:1f:63:
91:d4:a2:f0:d8:f0:d0:74:92:4c:39:96:97:08:52:f3:f5:f4:
53:d5:bb:17:e2:62:cd:78:13:82:e0:f0:97:fb:dd:3b:70:dc:
70:51:e5:5f:cb:eb:b2:ff:2a:c5:b8:c1:60:fc:06:07:a4:cc:
3f:1c:47:42:82:41:94:96:06:7b:97:b3:05:9b:12:9d:a6:34:
93:9b:4b:51:0c:9b:44:93:1c:3b:f6:d8:0c:23:8d:02:3d:f0:
33:49:ab:bb:d4:64:bb:5b:08:eb:72:62:63:53:67:8d:bc:36:
74:e4:fe:b1:48:e9:b9:fc:bf:52:3a:7e:7b:da:0c:30:23:c3:
cf:96:d3:42:66:65:4e:b5:24:04:b9:a6:1c:e0:68:00:b2:8e:
71:f7:86:96:ca:81:01:96:99:fe:6f:47:7e:4d:de:0e:9e:38:
64:0d:00:b1:b7:55:75:56:ca:ba:3a:9e:c2:a6:0e:b5:27:ea:
ea:81:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:37:36 2025 by rpki-client