Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: 5tJ2hnsmyTb+i+3V/d0/4Oug6xnRQHKux+xIHWyNBpo=
Subject key identifier: C3:A5:64:F1:35:2B:B1:74:D6:E9:83:57:34:A6:DA:F7:B2:10:28:A7
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 0197B70E523C542B24B4F5AD43E7E50104DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 0F1D
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: EdHSnxSbAr5pNFnKGydpttVpM3pivakmChVXC7watSY=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:52:3c:54:2b:24:b4:f5:ad:43:e7:e5:01:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=c3a564f1352bb174d6e9835734a6daf7b21028a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:93:df:1c:64:eb:64:66:67:d4:ee:dd:0d:
98:ed:4d:cc:be:e5:d4:7d:fa:24:95:e6:6d:8c:2f:
bb:2c:c6:df:c6:9f:53:29:c9:9a:55:f8:f3:45:a7:
e3:0e:0c:ff:55:4f:62:49:66:ad:d9:1a:8f:b9:12:
37:6d:ac:96:ca:bd:d6:af:af:6f:8e:0f:6d:7f:90:
61:20:3d:0c:d5:ac:ca:48:66:6f:65:66:f4:a8:4e:
de:e2:56:b4:f9:af:6e:df:91:56:c7:36:b6:7a:66:
ce:a6:61:c7:b3:5d:cf:28:1e:9d:33:8e:25:fc:bb:
24:15:24:5b:1c:c3:1a:84:0b:a2:2d:ce:0c:fa:bc:
b5:58:b1:4a:86:85:96:f3:92:95:d7:c1:1d:10:d4:
83:5c:dd:bd:fe:36:96:05:77:a4:82:9b:01:36:2f:
4b:da:5a:ef:00:0b:92:0d:be:06:d4:e4:2d:e0:8e:
1f:95:6a:27:e4:96:b1:63:c2:c3:10:9b:2c:54:a8:
f8:63:d1:10:3f:94:aa:59:18:08:c4:ff:95:ec:52:
51:35:b2:f8:f8:47:64:68:dd:0d:b8:18:e6:50:a5:
84:b8:ef:c3:8e:3c:43:4d:95:3b:de:9a:50:61:34:
6f:9f:5c:e9:df:b8:25:43:ac:52:dd:d0:90:be:31:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:64:F1:35:2B:B1:74:D6:E9:83:57:34:A6:DA:F7:B2:10:28:A7
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:19:05:48:73:d6:08:00:06:91:ce:d7:2d:53:09:8f:2e:
f4:c2:5f:e3:d9:73:82:30:9d:4d:e2:74:e2:6a:b5:d9:05:af:
69:f6:9f:4f:20:03:72:c6:05:b1:12:ef:11:a6:a1:a1:82:4c:
c9:dd:88:ab:1c:15:c3:3e:2e:80:44:8e:2f:05:1a:a6:6a:52:
71:56:ba:2a:66:07:bb:ee:b7:a9:69:c1:15:36:46:76:c3:8a:
14:4a:97:bb:c8:c0:ac:b1:7f:8a:25:7e:6d:bd:ab:9f:99:87:
6b:5d:44:58:4c:9d:ae:1b:d0:db:4b:ff:64:c4:d3:e7:e9:ec:
36:6e:de:fc:25:66:a8:b0:f2:ff:a1:10:38:3d:95:66:fe:fd:
71:f4:6c:d9:9d:a5:0e:a1:03:e7:a2:a0:db:62:ea:55:9f:f5:
1e:7b:6c:cd:bf:48:c0:20:44:50:74:42:46:de:b9:0a:74:56:
62:f9:15:8d:8a:00:6a:7a:c9:43:18:55:92:c7:9a:ff:e2:39:
31:83:88:47:48:96:cd:89:b5:69:98:89:c4:81:ec:05:81:bd:
44:a7:31:eb:02:5a:54:14:50:7f:92:69:89:61:6c:c4:6d:79:
89:5e:59:26:db:35:43:cd:17:d8:57:15:96:87:ea:fc:42:b4:
74:fc:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client