Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: 6Jz+iLLq4gVqUAMkz+WjadOZYbBNymP1w3D4rswCtjg=
Subject key identifier: 6E:0D:14:50:9E:95:50:09:5B:D0:18:86:0C:BD:4F:CF:0B:95:6D:96
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019656EF61C7EC8F8B53484EB2D2FD8B5651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 098E
Signing time: Mon 21 Apr 2025 06:00:50 +0000
Manifest this update: Mon 21 Apr 2025 06:00:50 +0000
Manifest next update: Tue 22 Apr 2025 06:00:50 +0000
Files and hashes: 1: etKj8JxSADxAtwhWdtAcvp8APJo.roa (hash: hbDx1XXs3wCIknS0MzRqrwmZihS636bz/OW9FAqx/a8=)
2: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: I0ZQ2VLSSGtKwSr61ccnlLunazjyd5b3viK5vbIIgZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:61:c7:ec:8f:8b:53:48:4e:b2:d2:fd:8b:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Apr 21 06:00:50 2025 GMT
Not After : Apr 22 06:00:50 2025 GMT
Subject: CN=6e0d14509e9550095bd018860cbd4fcf0b956d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:9a:67:bd:f4:e2:f7:33:48:ca:87:37:61:
e5:71:76:71:98:16:d4:43:c0:05:c0:17:9a:c3:89:
9c:8a:26:e4:e7:de:9a:49:dd:1f:d2:5e:58:96:f7:
9f:0c:3e:8c:5b:27:14:ef:7f:74:b2:c6:d0:a3:35:
a3:2c:c4:2d:60:e3:06:44:3b:44:d2:72:8f:ee:72:
ef:16:37:85:94:22:79:6b:49:32:7c:88:94:3d:37:
bd:42:4d:ba:16:af:31:d7:db:ae:dc:a7:d9:69:7a:
b2:1e:e4:42:e7:f2:f5:ff:4e:8a:af:67:e4:e2:40:
88:6c:ff:3c:74:b2:c9:49:7c:24:b7:43:b8:6e:a9:
66:14:a1:b7:0c:23:9a:e7:9a:24:cc:74:f7:dc:4e:
6e:5c:14:4d:e4:3c:b8:f5:4d:9a:03:9e:47:4d:52:
cd:d5:a1:a7:1c:65:91:2f:f0:37:8c:7d:de:64:73:
d5:12:51:44:97:a0:76:98:bf:ba:8b:a5:b6:41:37:
be:65:07:6e:87:d4:38:fe:89:88:63:7f:76:7a:b8:
0a:00:cd:bd:7b:46:58:b7:0a:8e:11:b8:ee:03:29:
3f:2b:85:b4:64:70:e7:e3:7e:fc:7e:44:cb:70:5f:
f9:36:48:f0:28:31:31:e7:5a:f9:d0:c1:05:d9:96:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:14:50:9E:95:50:09:5B:D0:18:86:0C:BD:4F:CF:0B:95:6D:96
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:9e:2c:6d:7d:5a:ee:d1:b7:04:2e:f4:e8:d7:cb:92:e6:
28:1d:93:02:28:28:21:76:d0:30:ed:21:70:2a:2d:69:dd:ff:
e2:b9:62:b6:d9:9e:0d:4e:93:db:75:8a:9d:1c:0b:10:a6:92:
ca:e7:0e:5d:4c:be:61:5d:f0:60:6a:36:ff:c1:31:2a:60:ce:
79:ce:23:d4:b0:70:5d:b6:1b:16:f3:2c:cc:0c:5a:60:99:7e:
2f:64:33:56:ee:92:de:c0:f4:e8:72:d6:9a:22:8b:ec:81:91:
9a:22:57:f9:58:c3:4a:51:b7:3f:c1:83:4c:f8:4c:c6:e0:cb:
a2:ef:d4:13:f8:d8:e4:08:23:8a:61:b3:ea:0b:a2:24:8c:24:
46:25:e7:a8:33:18:0b:f2:48:b9:18:a6:5d:ec:3c:2d:ee:52:
ad:62:66:63:f2:d0:47:a8:0a:aa:11:ac:8f:bc:48:25:70:6b:
e2:e0:01:7b:3d:18:4b:b3:3b:ba:fe:9c:52:58:d4:df:b5:6d:
62:f9:54:3c:c1:70:bd:1a:96:4a:a6:2f:93:1b:d2:a0:12:f3:
4b:d6:bb:5d:80:44:72:bc:e4:50:9b:0f:24:5f:42:03:8f:c2:
fa:a3:97:34:1a:5d:1c:2f:df:9d:52:17:1e:ac:06:22:dd:e3:
a9:34:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client