Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: v5M2gyurIOJEb9qOnUY7lYjmE54Rig/YvnvAI2358w0=
Subject key identifier: 03:75:F0:39:A9:A2:E0:2E:F9:5D:21:D8:7D:F9:35:86:8F:CF:DE:BD
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0196C8DFE2A2FB151387250F0F6B0DAE2E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 07BE
Signing time: Tue 13 May 2025 09:00:37 +0000
Manifest this update: Tue 13 May 2025 09:00:37 +0000
Manifest next update: Wed 14 May 2025 09:00:37 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: sBPwelsVB1lScsj1ikg7IqsnVAmYo143XHvC4j4AREM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:e2:a2:fb:15:13:87:25:0f:0f:6b:0d:ae:2e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: May 13 09:00:37 2025 GMT
Not After : May 14 09:00:37 2025 GMT
Subject: CN=0375f039a9a2e02ef95d21d87df935868fcfdebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:0d:65:55:78:7c:d7:81:4c:7d:f3:11:2c:
cc:4e:3e:69:c7:78:0a:8e:0f:bc:8d:e4:bb:e1:b3:
3f:ee:0a:b0:6b:f1:9e:66:3e:9f:cd:db:0c:7b:b6:
54:23:9d:46:1c:f5:ce:7c:71:3f:cd:45:ba:b1:ef:
ab:a6:46:f4:f4:ab:ae:c5:2e:a9:58:ca:a0:18:6c:
14:d5:85:60:2c:4d:18:a5:26:fe:f5:02:2c:96:63:
48:95:f2:99:9f:03:85:ce:b5:5d:47:43:6f:6d:f8:
f7:93:15:50:24:b3:ef:9c:5c:a6:d8:0a:82:db:22:
08:db:f9:ce:fa:00:d8:91:f1:e2:1e:24:14:f1:17:
0d:89:a3:dd:7f:19:c1:90:f9:24:d9:35:fa:53:04:
3d:ea:57:c2:67:68:48:57:b1:cc:c8:fb:8a:23:45:
50:ee:23:8e:72:e4:aa:95:48:ae:f4:d4:e5:83:95:
56:4e:4b:f3:39:bf:86:49:c2:62:df:77:69:05:74:
d1:79:07:cd:ba:76:c4:1b:12:70:b4:e4:38:6e:f1:
10:db:a2:dc:b1:e7:9b:cc:49:fb:49:74:2d:a7:25:
48:51:ee:ce:85:2a:02:36:ca:a5:14:bc:11:f9:bb:
6d:6b:5f:63:44:0c:a9:bb:a0:61:7a:b6:85:10:3b:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:F0:39:A9:A2:E0:2E:F9:5D:21:D8:7D:F9:35:86:8F:CF:DE:BD
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:21:ca:22:cd:dc:88:ff:28:32:fa:49:62:17:13:72:43:9f:
a1:ae:bc:71:b7:51:90:52:71:68:1f:c8:48:96:8d:7f:3a:2a:
d7:77:94:0b:94:99:57:9b:7c:e8:b6:60:74:23:39:50:95:09:
90:d4:d3:b2:98:9d:7b:a3:0e:9c:75:a0:5a:ab:c5:1e:71:43:
98:5e:9e:58:da:bd:53:56:74:f3:e7:31:9a:96:b9:b0:07:ff:
c7:ff:cc:c3:f5:fa:9c:50:6c:e3:6d:d6:1e:db:e6:6f:94:b3:
eb:d0:79:2b:b3:b2:ff:d5:0f:38:60:7a:1f:64:dd:42:7d:4c:
4e:fb:7d:b1:fc:78:37:20:f8:c6:e3:da:1c:b6:fb:3d:34:a1:
18:a0:3f:da:d6:29:96:8d:45:dd:5f:c1:5b:ad:2b:07:e6:a5:
5a:f8:04:f2:67:82:e7:22:b5:a8:3f:91:a0:57:73:ea:1b:7e:
fa:96:97:e0:04:aa:ce:2c:c2:c6:e7:8a:76:21:25:6e:1d:55:
51:25:0d:c4:9c:1c:f8:f8:a2:0b:f9:45:1e:2c:d6:e9:02:0d:
f7:14:11:20:1a:02:31:26:6b:8c:bc:69:d6:b2:10:68:d0:21:
fc:07:0f:bf:c6:3f:07:eb:40:05:12:51:b5:a0:ee:ed:3e:b9:
93:97:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:21:10 2025 by rpki-client