Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: qzAjnShX8wd/DVRtHTAIPdA/ovMXBI7f2mg13fLtIG8=
Subject key identifier: FA:9E:52:AA:3D:72:3F:26:9C:8C:7D:07:16:BF:F7:73:58:03:F1:16
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 019657948C510B14E8C8F74DB7DD67EFFB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0BE9
Signing time: Mon 21 Apr 2025 09:01:15 +0000
Manifest this update: Mon 21 Apr 2025 09:01:15 +0000
Manifest next update: Tue 22 Apr 2025 09:01:15 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: J5MbM9JLlUk/yMTgPvx4HnpB9KIiIQu4VjtjVm+wVGY=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:8c:51:0b:14:e8:c8:f7:4d:b7:dd:67:ef:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Apr 21 09:01:15 2025 GMT
Not After : Apr 22 09:01:15 2025 GMT
Subject: CN=fa9e52aa3d723f269c8c7d0716bff7735803f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:0e:3c:c8:1e:15:f1:ab:a1:3f:3f:d1:85:
7d:64:f2:cd:3f:fc:e9:fd:73:a2:f7:bf:1f:56:fc:
27:b5:3a:07:b0:c9:19:83:8b:ad:e5:d8:41:f0:59:
f9:9c:0f:ae:08:ed:09:78:73:4d:19:bb:3e:82:05:
41:ea:bf:8a:d0:df:e8:c8:a7:ea:05:5a:d5:96:2b:
9d:5b:9d:70:d9:42:67:ef:fb:f9:0a:40:01:e5:c6:
ef:aa:e3:5a:54:36:ed:63:0a:bc:65:8a:66:01:0c:
d2:65:28:cd:0c:dc:8d:89:0a:de:e8:2f:10:f2:d7:
4b:4a:40:15:32:61:3d:64:ad:5e:e0:7b:f9:be:8c:
5d:33:6b:fa:6f:ef:95:ec:7b:8c:b6:d1:d8:c3:00:
2e:27:c3:4a:d5:f1:78:cb:44:4e:2d:78:7b:31:cc:
f4:77:5d:d1:16:c5:e1:a9:77:56:70:19:28:ad:f8:
ec:14:33:6d:49:f7:8f:8a:ff:69:40:d5:21:ae:76:
3f:ae:af:16:50:c7:66:4f:9e:d4:45:e7:42:65:fb:
40:04:00:8b:6e:10:14:24:fa:30:b5:62:54:78:64:
db:b1:0e:4d:d4:79:65:eb:b6:05:b9:4b:5d:d1:13:
b7:7e:9c:0c:95:42:be:d4:5d:ab:fa:39:8b:7d:f0:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:52:AA:3D:72:3F:26:9C:8C:7D:07:16:BF:F7:73:58:03:F1:16
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:00:8d:92:da:29:23:e5:fe:4a:37:b7:a6:96:ce:0c:59:
10:68:30:de:96:f3:0a:32:80:45:6e:d8:af:dd:77:c6:4f:54:
0c:04:ea:c4:ff:5d:6b:57:0d:ed:08:0d:52:b8:6a:69:86:45:
7a:4c:ff:57:fd:92:39:f8:b2:6f:9a:18:86:6d:b1:60:56:ca:
36:a5:72:ff:b3:ab:0f:05:09:32:9f:cc:42:be:21:bd:9a:c7:
c7:5d:7e:3d:10:ce:46:6b:be:1d:30:90:b2:51:98:14:68:cd:
39:31:92:f5:2a:8c:3c:cb:09:51:72:ac:fe:6c:6e:20:2e:bb:
40:7d:ac:76:b5:2a:d4:48:b2:46:f7:f4:c3:1e:79:0a:92:78:
af:8c:fc:a4:5b:6a:84:23:45:05:60:6c:fc:f3:e1:4e:5f:16:
05:a3:07:af:e9:d6:15:bf:d7:47:7c:a5:9a:ba:bf:7c:ed:f7:
e5:63:61:f6:d1:aa:e6:37:eb:cf:66:bf:95:08:f1:79:6e:0a:
42:47:7d:46:25:69:93:5a:50:0b:71:98:8e:f7:d5:0a:7a:55:
50:81:93:8d:3d:6b:d4:69:2c:99:59:1a:9a:70:65:66:f7:da:
13:33:d9:d0:94:5f:b3:67:36:f5:ca:4b:b1:97:1a:77:dd:cd:
16:4e:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:59 2025 by rpki-client