Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: iTnZVWPE59ue5AJn7/i/QHNg6ZGZMk8hoLyh09k+PU0=
Subject key identifier: 68:57:FA:41:B9:ED:04:89:90:40:5B:8A:B1:C7:5D:4C:15:63:8B:35
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0197CBDF62C8A23FC87359ABA24526AE096E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 16:01:44 +0000
Manifest this update: Wed 02 Jul 2025 16:01:44 +0000
Manifest next update: Thu 03 Jul 2025 16:01:44 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: uJazzJtNNdkV/lXRT9s4+RD8jwqiJYrRhTwXXUzjaKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:62:c8:a2:3f:c8:73:59:ab:a2:45:26:ae:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jul 2 16:01:44 2025 GMT
Not After : Jul 3 16:01:44 2025 GMT
Subject: CN=6857fa41b9ed048990405b8ab1c75d4c15638b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:f7:36:cf:98:28:1c:bb:08:6f:b9:6f:b1:
53:8d:5c:80:06:d9:3b:34:4b:23:40:ad:ed:dd:77:
bd:54:b9:18:87:35:3d:7c:fe:f7:b2:3b:99:5b:2f:
7b:2b:c9:54:15:ad:e9:5b:40:c0:1b:39:a4:24:ca:
4d:cb:bb:a9:6f:12:28:f1:fd:21:d7:cc:16:98:96:
66:26:f8:48:38:ca:25:42:17:cf:ca:ba:9c:76:e7:
35:f5:92:70:ba:bc:a0:f7:cb:d6:a8:18:cf:bc:cc:
28:9c:46:f7:07:f5:42:31:54:ca:75:70:a9:97:fc:
9e:0e:0b:09:1c:48:b7:e6:7b:df:e4:e4:fd:db:25:
6e:23:a8:7b:0e:0f:93:86:97:09:e0:c0:e5:12:dc:
59:c1:50:f6:34:52:bd:25:51:16:6d:bb:1d:f1:23:
6b:37:99:00:96:b4:c9:c6:33:e1:dd:76:b2:20:0c:
bf:3b:ec:a2:04:1f:09:e9:c0:78:b9:c5:d5:de:31:
9d:e3:e0:90:20:a7:0c:62:d3:ae:49:98:4f:4a:c8:
1f:2d:17:de:9c:c7:4b:d8:68:a1:62:00:63:73:b8:
d2:d2:3e:76:d9:cb:18:74:f3:3e:e5:cf:c0:e0:9d:
30:37:f5:68:c4:30:29:0b:63:ca:b5:a9:3f:0b:a1:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:FA:41:B9:ED:04:89:90:40:5B:8A:B1:C7:5D:4C:15:63:8B:35
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ec:79:eb:11:97:aa:a1:3f:2e:f2:f9:e3:be:71:ab:56:33:
9a:41:27:70:a2:a4:e1:59:5c:ce:25:f1:5f:65:5d:c7:0a:32:
00:0b:9a:ec:7a:31:10:5e:1b:e6:74:18:84:a8:b7:ff:f2:a1:
34:78:a0:39:a2:66:30:4a:f2:32:f7:3a:33:42:31:5e:05:e6:
21:e7:91:c9:9f:0c:56:d2:01:b0:7d:3d:92:d2:b5:6f:0b:a9:
05:9e:d5:ca:4e:26:70:84:67:63:ec:60:3f:4c:75:f5:5e:5b:
bb:a0:6a:4d:45:8d:53:a4:3d:5e:7b:1e:a4:7f:9b:c5:e5:70:
2c:7b:df:4e:f4:15:9f:46:e7:a6:80:75:fd:6b:e1:20:7f:33:
17:d2:37:0c:8d:01:d7:56:c0:ff:d4:bc:be:0d:d4:57:dd:b0:
db:ca:72:bc:1d:1b:1d:ec:a9:f6:70:d5:ec:49:fa:2e:19:90:
ec:70:ee:0d:4a:3f:cc:a2:98:2a:63:6d:b6:ff:57:7d:79:60:
7e:8e:2b:d0:b3:01:04:d7:0b:90:30:3d:8d:e0:2c:0f:26:1c:
65:3e:01:6c:a9:46:2a:15:64:9d:40:e6:e6:26:0f:8e:ce:f6:
56:44:d5:0d:81:67:df:03:3d:af:1e:61:87:83:f8:1b:52:4e:
31:83:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:52:53 2025 by rpki-client