Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: bw0zjfACyon5YIV3lF+UM2K/rpVq3Nm8gJGPYD0Essg=
Subject key identifier: 21:A4:62:CF:AF:84:38:01:97:2E:B5:23:6D:53:BC:74:B7:71:D8:D6
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 0197B88F20B94655EDDA2BA190AC2F09E235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:17 +0000
Manifest this update: Sat 28 Jun 2025 22:01:17 +0000
Manifest next update: Sun 29 Jun 2025 22:01:17 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: ssXbQF5xtYyPDVYjqiPGG9uitlQJ/mUiq444sd/XnL8=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:20:b9:46:55:ed:da:2b:a1:90:ac:2f:09:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Jun 28 22:01:17 2025 GMT
Not After : Jun 29 22:01:17 2025 GMT
Subject: CN=21a462cfaf843801972eb5236d53bc74b771d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:26:ad:ff:86:ca:f6:39:a8:42:8c:fb:51:
be:f0:19:71:bc:b5:66:e1:68:49:e6:78:1d:bf:e6:
c9:4f:d2:cc:1c:c5:59:2c:7b:30:f0:a2:c0:c2:ba:
f4:59:f0:ce:8a:4b:de:a8:da:26:82:2d:d5:10:e0:
f5:01:a6:2e:4d:42:68:2a:d8:ac:22:b5:ec:2a:70:
bd:9c:bf:95:30:9c:b4:44:86:15:87:f0:dc:2a:c7:
f4:25:8c:03:89:10:37:a6:3f:fd:77:a0:a6:8a:f9:
d0:9a:ff:64:96:73:40:3e:70:85:82:20:2b:6e:38:
84:db:c0:55:c0:56:db:49:61:ae:1e:a1:97:1d:14:
95:d9:df:50:12:45:eb:fc:be:8c:bd:ce:05:86:9f:
21:78:fb:29:58:09:80:0a:1a:6f:24:7d:da:3b:f5:
f6:9e:94:ac:79:c4:a3:bf:34:34:66:5f:27:6b:4b:
48:36:cf:63:5e:a1:03:06:f6:66:7e:25:07:67:b3:
b2:5a:33:e6:46:01:23:87:bb:5e:3f:50:b4:11:40:
37:26:93:5e:7d:35:d2:6d:e1:5c:a2:1b:0b:d3:a1:
82:9a:a7:3f:4f:b2:45:94:c8:9f:75:29:04:7c:0b:
e3:08:4d:0b:4d:3a:0e:ff:35:0d:96:30:06:9d:ec:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:62:CF:AF:84:38:01:97:2E:B5:23:6D:53:BC:74:B7:71:D8:D6
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:f2:8d:51:d2:4a:04:6b:1d:1f:19:0b:23:49:14:7e:37:
a8:79:86:1c:7c:db:5b:a0:d1:2a:72:5b:f4:95:c5:ee:d0:d2:
e6:bf:06:6d:68:d9:f7:5b:8f:d2:48:60:41:57:5b:54:1e:e4:
6b:83:9a:14:17:16:aa:7c:aa:17:cf:30:64:58:dd:09:ad:9f:
2f:96:bd:ba:f4:d6:66:7f:a6:3e:81:0c:a0:02:d6:39:83:01:
3e:d3:f3:82:82:41:af:b0:d2:e6:fb:ce:c2:b6:ef:0f:97:0d:
3c:7c:43:cf:2f:83:95:69:4e:70:ea:f6:d6:57:1a:13:b1:83:
57:a8:e1:fb:5a:10:11:99:de:e9:05:e8:b4:60:9c:fa:10:50:
ba:93:6d:3c:93:a7:b7:94:1b:5c:f0:4f:c2:f9:88:9b:54:15:
aa:75:e7:18:bc:b0:99:52:12:cb:13:1a:e2:eb:2a:a6:0c:88:
70:f6:f3:f8:d1:be:f4:4c:27:40:75:97:d9:a6:e1:dc:7b:c5:
eb:78:f5:c6:93:d8:93:c7:85:64:d4:fd:d9:51:78:18:3f:de:
ad:4b:ca:f3:ce:4d:25:37:8a:a8:08:35:0a:72:fb:be:31:65:
c3:4b:db:5a:be:a7:4d:7e:69:6a:63:a6:1d:40:c4:a0:19:16:
ad:07:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:33 2025 by rpki-client