Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: ElzS4mGUQTWraMmYB500X+8Ijef+3xKO8vTA0exz9xg=
Subject key identifier: 9E:44:DA:D9:21:A5:22:22:BE:D1:27:FB:9F:35:28:A9:29:E8:48:3D
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 0196C3148425E0B7C876868F2AA9CCAB9A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 06:00:23 +0000
Manifest this update: Mon 12 May 2025 06:00:23 +0000
Manifest next update: Tue 13 May 2025 06:00:23 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: yDD8mA0nefXyCMduu2viYwuvW7x6LA6MyTeiUz67fck=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:84:25:e0:b7:c8:76:86:8f:2a:a9:cc:ab:9a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: May 12 06:00:23 2025 GMT
Not After : May 13 06:00:23 2025 GMT
Subject: CN=9e44dad921a52222bed127fb9f3528a929e8483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:40:46:bd:76:60:6c:d8:54:b6:7a:45:83:
f1:10:5d:2f:db:2f:39:c1:ad:99:4b:a3:f5:ae:ca:
82:2e:e8:2b:d6:c7:38:a9:34:a8:f7:b7:12:78:42:
10:f5:e0:ea:11:4c:44:82:0a:87:2c:87:29:1c:1a:
29:7b:0a:7b:d8:ba:98:48:1c:f0:64:1c:80:e4:3f:
6c:01:55:9a:0f:6e:fd:a4:58:4e:57:19:33:4f:a4:
e5:bb:20:ca:0b:2f:30:b7:79:b3:2a:4f:d7:5b:d9:
d2:b9:7b:6a:24:ec:4f:1a:60:58:8b:a9:a2:1b:9a:
09:7b:6d:ba:94:4c:79:ff:70:b6:f8:ca:33:b4:8c:
75:02:04:69:d3:81:28:3e:96:3b:7e:76:0d:8c:75:
42:b2:d3:a7:05:ac:b3:d0:f8:0a:bf:e7:81:fa:07:
8d:16:87:0f:e2:83:58:da:35:97:41:4f:31:0f:1f:
f0:e9:fb:9f:29:de:85:bb:ed:8a:ad:e9:fd:fc:22:
09:8c:c7:63:72:4f:a0:89:82:b9:b2:8d:47:dc:4c:
7e:b8:a1:94:f1:e2:8c:62:70:78:f1:f6:5d:79:c3:
84:67:e7:eb:cc:e7:1a:3e:d5:57:ba:a0:84:bf:d7:
97:49:35:1e:08:b3:77:95:22:8e:ce:07:d7:45:27:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:DA:D9:21:A5:22:22:BE:D1:27:FB:9F:35:28:A9:29:E8:48:3D
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:84:ea:de:93:62:7f:7f:aa:d1:b5:e9:6f:c1:44:53:59:
11:16:a7:d8:7a:34:00:5b:1d:70:68:66:ff:ab:50:a9:a4:ed:
6e:d5:60:4a:d1:79:d5:3a:98:f0:15:c5:85:45:a7:c6:26:93:
60:45:e4:bd:19:24:7e:f0:77:40:72:23:f9:65:a7:b2:b6:ae:
c2:42:b8:23:c5:e8:d0:d0:56:ea:9d:dc:08:08:2c:18:27:80:
81:b1:16:fa:5a:4e:8b:13:b1:2c:d0:bb:a1:5a:47:3f:84:18:
07:f2:52:43:e4:94:bb:6a:73:d9:d1:39:18:3c:e9:83:26:61:
58:e0:25:bc:6a:96:b0:99:8f:70:8d:54:29:06:07:63:4c:ec:
a0:e2:e6:a1:cd:2b:44:92:18:6e:30:f1:3f:a4:8e:91:67:11:
0b:83:67:a8:a2:44:6c:17:56:2b:74:f4:32:8d:29:9f:af:aa:
64:7f:9b:a0:98:9a:98:83:82:47:3b:ca:7b:28:5d:d2:b8:1a:
1d:38:32:c8:f8:7a:10:09:86:d5:8c:97:3f:ee:10:8f:17:c0:
b2:cb:ed:73:93:2c:cb:a2:d0:c4:1f:f1:75:92:d0:ef:82:2e:
f9:95:6d:4d:a1:60:68:02:f9:61:16:6c:96:4c:c2:2b:3b:a7:
86:92:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:53 2025 by rpki-client