Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: xgJ964JmmDNx4A+n5wtMconTToka0O6Un2jUZdqlZw0=
Subject key identifier: FD:3A:BF:E6:24:59:CA:CA:77:18:FA:2C:40:5E:35:F7:0B:4D:A8:8A
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 0196BE5C185EB72BBDDAB0C42A2FA378D1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0DA7
Signing time: Sun 11 May 2025 08:00:28 +0000
Manifest this update: Sun 11 May 2025 08:00:28 +0000
Manifest next update: Mon 12 May 2025 08:00:28 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: +ssyfdsghnnaGk+KbQobs05W4s/jMqpxo3NJQl8QnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:18:5e:b7:2b:bd:da:b0:c4:2a:2f:a3:78:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: May 11 08:00:28 2025 GMT
Not After : May 12 08:00:28 2025 GMT
Subject: CN=fd3abfe62459caca7718fa2c405e35f70b4da88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:cf:a5:e9:17:c8:e0:11:42:c4:33:11:7c:
14:33:3d:7c:0f:cb:37:75:29:f3:4a:07:d2:a6:fd:
40:2d:ef:0b:8b:98:b4:6d:b1:5d:69:6e:ce:00:f0:
09:86:59:b3:d0:1b:ad:4f:ad:b9:41:4b:c8:45:30:
1c:ca:8b:99:ee:98:3d:74:0f:1f:24:4d:e6:4a:01:
92:40:ed:99:c2:5b:02:84:1d:89:5c:8f:10:71:5a:
f5:d3:cc:34:9c:29:c2:75:b6:3c:4f:65:4f:80:63:
20:d5:ce:28:63:e9:62:d6:18:c4:c9:b7:35:4b:a0:
3b:e4:9a:dc:22:f5:f2:e5:cf:1a:c7:81:cd:04:ed:
ed:8e:42:53:1c:00:3b:ac:ab:74:3a:ea:51:4c:f9:
72:d3:cd:01:f2:b7:4a:8e:59:ea:ed:64:b3:fd:c7:
2c:d9:c1:a3:2f:fc:cf:27:0d:4a:65:29:d8:07:65:
f1:14:b3:6a:79:50:d2:b6:49:2a:5c:db:97:2c:a6:
04:ad:a9:fb:9f:2a:84:61:e2:4d:c7:18:45:9f:78:
31:b1:d2:7f:f0:34:eb:d6:6c:f7:1f:73:e0:fa:66:
3d:11:37:a1:79:12:ea:8e:ff:a0:7d:8b:b0:95:9d:
fe:f7:ae:8b:d3:46:2a:df:a4:5a:e6:5b:19:0d:bc:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:BF:E6:24:59:CA:CA:77:18:FA:2C:40:5E:35:F7:0B:4D:A8:8A
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e1:18:b6:87:a7:09:e2:9c:50:9f:d8:22:62:3b:d5:7b:84:
15:b7:5f:81:51:8f:7c:65:26:cf:d9:75:54:cd:c4:18:a4:1e:
c9:d6:02:ec:4c:e2:96:82:18:27:9b:32:0a:fa:af:4a:c4:d5:
cc:cf:93:38:24:a1:ae:2b:c9:be:fe:de:7f:37:a0:d1:38:7e:
c9:77:a6:3d:f5:7b:a5:e6:94:d9:94:04:47:f8:4c:d3:d9:8a:
ff:27:5f:72:e4:90:f6:87:9d:21:13:3c:4f:2b:70:af:50:4b:
bd:c3:43:62:b7:b7:49:d9:00:80:a7:e6:3d:9a:83:be:48:68:
da:05:2a:0f:86:ac:ba:cb:db:93:60:ec:a4:10:27:28:98:e8:
c7:2b:e3:08:05:f9:41:59:0d:aa:20:c2:89:bf:bc:ef:0b:84:
ea:98:01:99:ab:76:cd:81:43:10:da:18:07:70:de:84:8d:90:
58:0d:e5:78:c0:f0:b6:e5:46:61:25:53:8c:80:ed:22:7d:ec:
56:49:ff:7f:63:1b:31:ba:52:53:25:e5:59:d8:fc:bb:45:5b:
f2:86:63:88:ef:d2:62:0d:be:60:58:15:c7:84:63:5e:ff:c4:
af:de:0e:0b:53:bf:bf:d2:6d:77:94:8a:27:84:5f:72:d0:92:
1e:f6:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:03:33 2025 by rpki-client