Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: G13ffA1PSnHzF2BosBnvT+M72j9pBTFPg9lsLZbMqGw=
Subject key identifier: 7D:5C:42:0B:F0:C0:B4:04:FE:10:F8:79:01:A1:B9:4D:B6:50:E9:90
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0196C5030441FB5509BE2AA8DE3909E49309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 15:00:31 +0000
Manifest this update: Mon 12 May 2025 15:00:31 +0000
Manifest next update: Tue 13 May 2025 15:00:31 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: lQvulflom724VJPTivWS6P0itHt56sbjXWqPdLTM08U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:04:41:fb:55:09:be:2a:a8:de:39:09:e4:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: May 12 15:00:31 2025 GMT
Not After : May 13 15:00:31 2025 GMT
Subject: CN=7d5c420bf0c0b404fe10f87901a1b94db650e990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:b3:f0:99:d2:77:03:17:a3:e5:93:ab:a1:
18:99:80:33:c7:e5:b5:ea:d2:1f:7f:a2:a3:dc:78:
1f:c5:6c:42:c1:f3:de:e2:33:3d:1b:de:f5:a9:7c:
2f:d0:3b:fe:c9:ce:d6:1e:e2:aa:3f:bf:df:18:3b:
2c:24:e2:75:d2:f1:d6:7d:2e:85:d6:c6:a0:4b:c3:
8f:21:20:1e:83:ab:fa:8e:42:11:e9:02:49:15:a6:
e6:8d:9e:c4:e4:6a:a2:1d:eb:5b:f8:91:2f:90:49:
90:c8:39:2d:8b:9b:16:be:6e:7b:69:a4:a3:e3:f9:
14:92:40:f8:43:a2:1c:08:42:04:5a:99:a7:52:f9:
d9:6c:88:df:ac:ed:a0:f2:c0:72:f0:10:12:c8:4c:
b7:be:dd:73:e8:15:d3:47:83:4c:3a:18:81:9d:98:
7f:ac:d2:19:be:d0:49:80:67:54:22:72:3b:30:93:
ab:02:dd:36:26:1e:27:8c:52:6e:11:b6:e8:01:65:
bc:16:fd:0c:2e:4a:51:6b:2b:08:05:3b:f9:e0:dc:
2a:cf:be:38:57:da:c0:0c:81:41:1d:86:b7:46:d2:
d5:1a:bc:83:66:31:6d:10:b2:9f:a9:d0:cb:26:ec:
a8:2d:b4:9a:47:76:f7:9c:b5:52:73:13:bf:be:26:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:42:0B:F0:C0:B4:04:FE:10:F8:79:01:A1:B9:4D:B6:50:E9:90
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:6f:b0:77:07:14:91:f1:c6:95:0b:aa:69:ca:1f:82:38:
83:69:a6:66:92:7d:95:0e:5d:a9:3a:e1:e6:6f:f5:f2:4c:8f:
93:bd:43:80:8a:8a:9d:01:d7:9c:d4:1e:81:b3:42:46:f7:99:
b5:2b:42:6e:c0:dd:c0:ee:ef:37:ac:f3:57:ce:5a:03:ad:65:
9e:88:11:70:1a:43:37:d6:8d:b9:ee:62:3d:ed:9a:40:c0:18:
61:ce:bb:99:a5:e0:9a:61:a2:5e:34:96:b1:10:dc:cf:40:9f:
21:01:1c:6f:4e:91:c8:4f:d7:2f:77:54:c0:06:88:99:36:19:
10:b4:c8:01:bc:53:34:a3:aa:d6:89:22:9b:ba:73:65:4e:a6:
89:0f:a1:25:af:90:e2:8f:f2:9f:bb:ef:75:d2:18:68:3c:80:
9f:2f:9b:3d:7a:fc:94:a7:4f:b5:f3:9a:28:7b:a4:d1:22:2e:
21:4b:5a:30:aa:1a:cb:57:36:c6:eb:02:2e:5a:5b:97:bf:28:
2e:2c:59:c1:f4:76:19:8b:00:3a:4e:ff:97:9c:13:79:90:01:
5f:62:31:46:9c:c2:60:7e:76:9a:04:07:5d:8a:2b:b4:23:8d:
29:de:fd:fa:d1:26:74:df:cb:f0:69:26:3e:b8:a1:41:30:d8:
44:e1:c2:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFAwRB+1UJviqo3jkJ5JMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjUwNTEyMTUwMDMxWhcNMjUwNTEzMTUwMDMxWjAzMTEwLwYDVQQD
Eyg3ZDVjNDIwYmYwYzBiNDA0ZmUxMGY4NzkwMWExYjk0ZGI2NTBlOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOGz8JnSdwMXo+WTq6EYmYAzx+W1
6tIff6Kj3HgfxWxCwfPe4jM9G971qXwv0Dv+yc7WHuKqP7/fGDssJOJ10vHWfS6F
1sagS8OPISAeg6v6jkIR6QJJFabmjZ7E5GqiHetb+JEvkEmQyDkti5sWvm57aaSj
4/kUkkD4Q6IcCEIEWpmnUvnZbIjfrO2g8sBy8BASyEy3vt1z6BXTR4NMOhiBnZh/
rNIZvtBJgGdUInI7MJOrAt02Jh4njFJuEbboAWW8Fv0MLkpRaysIBTv54Nwqz744
V9rADIFBHYa3RtLVGryDZjFtELKfqdDLJuyoLbSaR3b3nLVScxO/viZyYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1cQgvwwLQE/hD4eQGhuU22UOmQMB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixdvsHcH
FJHxxpULqmnKH4I4g2mmZpJ9lQ5dqTrh5m/18kyPk71DgIqKnQHXnNQegbNCRveZ
tStCbsDdwO7vN6zzV85aA61lnogRcBpDN9aNue5iPe2aQMAYYc67maXgmmGiXjSW
sRDcz0CfIQEcb06RyE/XL3dUwAaImTYZELTIAbxTNKOq1okim7pzZU6miQ+hJa+Q
4o/yn7vvddIYaDyAny+bPXr8lKdPtfOaKHuk0SIuIUtaMKoay1c2xusCLlpbl78o
LixZwfR2GYsAOk7/l5wTeZABX2IxRpzCYH52mgQHXYortCONKd79+tEmdN/L8Gkm
PrihQTDYROHCKw==
-----END CERTIFICATE-----
Generated at Mon May 12 18:54:09 2025 by rpki-client