Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: qw2UDW3hME9+gAjhxm/jE39XzF/BA0PzSjFCfTPR3y0=
Subject key identifier: C5:5E:E5:FE:ED:13:DF:AA:67:10:68:12:0B:00:0B:8D:A6:AB:25:8E
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0198D4736E8EDCF5D9A0BB9D1EAA6F1E4B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: FYY4O1HN3FcpD4O3ZO9stvXjcE5of/i7iCUx4qo+aEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6e:8e:dc:f5:d9:a0:bb:9d:1e:aa:6f:1e:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=c55ee5feed13dfaa671068120b000b8da6ab258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:1d:07:76:73:83:c1:b7:3c:3e:11:4a:c2:
8f:f5:d2:2e:aa:e2:96:9d:ec:f0:cd:1c:b8:6b:6e:
4a:3a:87:d4:a0:be:e5:83:c3:fd:6d:32:85:55:18:
23:df:bc:bb:da:86:69:70:ba:76:80:f9:07:7a:25:
80:d0:ab:ca:7c:94:c6:9e:bf:ac:04:88:36:34:5d:
09:e2:71:61:36:01:66:8e:7c:1c:82:80:b0:d7:63:
ec:a5:5f:56:22:0f:b3:e5:55:61:14:eb:30:52:c5:
6b:8f:5e:59:9d:76:fd:12:a7:96:f1:0f:3c:dd:17:
0d:91:68:a3:ab:ea:1b:9d:1d:17:aa:f6:a4:b7:4e:
a0:80:29:14:a1:a9:19:90:58:b3:47:dd:6a:15:d0:
ed:03:85:0a:4f:bd:ac:8a:eb:f5:ae:af:79:f3:e0:
35:b5:35:65:f0:27:4e:41:85:b6:24:18:2a:93:dd:
83:26:69:c1:9b:32:41:ef:f9:81:b8:2f:b8:42:42:
4b:64:d7:20:8b:27:f4:ce:37:d1:9f:4d:e6:d7:a5:
54:89:8f:97:e1:00:ed:e0:ea:29:93:36:c1:42:0e:
4b:e1:bf:13:35:e0:c5:26:f3:07:88:d4:dd:5f:55:
4f:53:75:87:ac:fa:7c:44:50:df:90:8b:45:77:9a:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5E:E5:FE:ED:13:DF:AA:67:10:68:12:0B:00:0B:8D:A6:AB:25:8E
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:ea:97:1d:4a:c4:72:18:ce:25:7e:17:fa:6e:ca:b9:e3:
ea:3a:78:96:13:2e:5b:b3:72:6b:01:e2:e9:87:14:dc:b2:d3:
c7:6e:de:46:4d:95:2f:fc:96:5c:fc:2f:7f:97:f0:4d:fc:c2:
d3:ea:f9:09:f8:8e:06:e3:07:fd:87:8e:8e:07:d7:aa:71:52:
02:c8:28:08:56:3b:6d:48:26:b0:e6:4e:a7:6c:a0:8e:39:4f:
2b:a9:b6:05:dc:a6:c2:6f:1e:21:45:b2:7e:71:8d:d9:d0:46:
95:4a:77:4a:03:82:56:92:e6:68:6b:ce:30:86:04:32:05:82:
3d:8a:6d:70:b0:35:13:9e:c9:f7:7b:9b:9c:90:07:fe:0d:09:
f2:56:fe:d3:c2:1f:58:63:61:93:28:f5:95:02:89:fb:e8:a0:
3e:30:74:c8:89:f1:e3:7c:68:e9:d6:93:7c:bc:4d:50:e3:3c:
8f:2a:4a:6e:47:52:49:3c:08:9e:be:b7:00:48:44:3b:9f:c3:
ba:ed:68:35:0d:3c:79:ea:7f:89:36:c8:a2:96:ff:27:43:7f:
d5:35:22:b8:29:d5:56:a7:c8:35:60:a6:04:1e:99:1d:bd:fb:
22:15:af:cd:2e:c9:b4:40:a3:56:92:32:6b:73:03:26:f7:cb:
80:13:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:20 2025 by rpki-client