Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: s8hPMCTCpFCVfb/XurlaGQ+Fi8os6/xDHnTB6WtBqUc=
Subject key identifier: 3E:24:7C:F6:26:55:D1:78:C6:B8:A4:9C:4B:4F:5F:3E:BA:DF:BB:5F
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 0197B74506A120E714862E2830D72DF638D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 0209
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: keSHZeB9zUpA55L+hUPGLKBLIJ2rKL/VYSXpYN+LWdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:06:a1:20:e7:14:86:2e:28:30:d7:2d:f6:38:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=3e247cf62655d178c6b8a49c4b4f5f3ebadfbb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:b7:d7:03:ab:03:ef:2f:c5:05:99:ab:68:
65:59:48:a4:13:41:b5:35:d0:07:d9:c1:40:2a:4f:
a6:27:33:a9:bf:ca:2c:f6:05:89:7f:3e:7b:7f:19:
b0:82:36:e4:df:49:f9:b7:5d:76:d8:7e:95:0d:ab:
fe:4f:3d:df:b6:97:02:b4:ca:8b:29:72:62:76:05:
f0:7c:12:9b:8b:6e:8d:0b:97:64:99:e6:fd:66:18:
20:30:1b:a8:45:53:a9:51:9c:02:4d:07:92:13:fa:
f2:37:50:5a:6d:54:9a:06:dd:83:c6:fb:d3:bb:41:
53:39:54:db:68:4d:78:4c:a3:a9:1a:a7:ba:52:51:
d3:95:33:a4:38:75:c2:20:0e:8f:e9:e9:ee:63:e4:
24:80:fc:1d:13:ae:dc:55:cc:5b:a2:3f:04:e1:8a:
20:ad:ba:8d:ff:ab:1e:54:3d:dc:2f:e8:01:4a:93:
46:79:b9:b4:e1:e0:38:02:c2:38:30:1d:fa:6b:cf:
d8:64:0b:eb:4d:f0:f9:5a:ae:e4:6a:c0:bc:2b:b0:
ab:a8:1a:dc:c7:1c:17:13:31:68:02:e4:9c:34:c9:
38:48:5a:7a:74:2b:df:ba:8e:66:86:e4:f4:7b:3f:
14:d9:da:93:d3:7b:98:51:6f:ae:c7:35:86:26:44:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:7C:F6:26:55:D1:78:C6:B8:A4:9C:4B:4F:5F:3E:BA:DF:BB:5F
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6b:2f:c0:c0:c1:ea:1c:61:db:f7:85:29:b4:e8:06:cf:35:
9b:d9:f2:e5:69:bc:33:aa:2a:a0:23:b8:2a:7a:bb:4c:fb:0c:
97:06:d7:b3:a4:9c:e8:8a:9b:00:b3:1d:ba:aa:fc:2b:08:b4:
4c:65:17:b6:bd:4c:c4:c5:c8:da:1f:59:2e:39:5f:2f:9c:86:
6d:07:f3:53:a1:f3:94:13:ea:76:4b:fd:6a:15:07:fc:30:13:
c0:35:60:80:58:99:ca:fe:bd:da:80:db:e7:f7:ae:0f:40:7c:
f0:e9:2e:33:93:36:ab:11:3e:5c:bb:8b:36:d6:08:c5:00:0c:
12:25:11:40:f1:e2:f1:9f:80:cb:80:03:fc:0c:4d:e0:8e:a9:
e6:b4:0f:3b:4f:df:32:32:eb:6b:74:ab:a5:2f:f4:d0:71:ec:
d4:0e:dc:9d:de:97:a4:89:65:8f:e2:df:c2:8f:09:13:62:f0:
7a:88:66:7e:62:5d:b5:6d:92:3a:43:80:4e:09:68:a6:03:1a:
06:7e:a7:1b:cf:39:92:2a:bf:b0:4e:e6:2a:a4:a3:e8:60:51:
0e:14:27:2d:48:b8:fe:a7:7d:36:07:eb:b2:8a:72:1f:df:03:
b3:3b:99:f6:7e:50:70:58:b4:2f:d9:b1:7d:88:3d:fb:69:76:
02:7e:22:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:23 2025 by rpki-client