Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: 7cnimQahdMTjtEgTrVM6Ha80EmdPd5HBQ82tCDmt4Ns=
Subject key identifier: 1D:20:2E:BE:3E:AE:46:69:0B:C6:55:A4:35:F8:4C:B5:6E:03:21:44
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019655A56BDF5B19A2D944DD02BECC549AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 00:00:26 +0000
Manifest this update: Mon 21 Apr 2025 00:00:26 +0000
Manifest next update: Tue 22 Apr 2025 00:00:26 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: AEig8u7+atTDOYC5AgE+Zqns6k3jHrlvE6bg69KJR4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:6b:df:5b:19:a2:d9:44:dd:02:be:cc:54:9a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Apr 21 00:00:26 2025 GMT
Not After : Apr 22 00:00:26 2025 GMT
Subject: CN=1d202ebe3eae46690bc655a435f84cb56e032144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:d4:8e:d6:29:7f:50:8f:fd:ab:3f:7f:31:
5a:47:da:70:4d:20:9e:a0:a5:4f:b3:67:0b:0b:b7:
00:8b:86:ed:fe:7a:18:c6:76:ed:d0:b1:71:37:50:
6d:ce:14:36:86:83:66:6d:02:c8:7b:83:ce:ee:1a:
a8:99:fe:7f:12:e3:1b:44:03:f4:e6:99:d3:8b:12:
10:e6:51:7e:d2:f3:f8:bf:30:e9:38:21:19:d9:32:
40:09:1b:c8:52:00:1c:bc:14:8c:d9:19:b7:4a:a4:
c5:36:de:b4:e0:72:cb:2c:c1:72:08:4c:4b:71:2b:
73:63:eb:6d:e2:a7:d9:df:38:3b:00:e9:da:20:9f:
68:12:45:b9:46:52:aa:c5:42:88:6b:b2:66:a7:c0:
37:ca:28:bd:28:97:b7:2b:5f:5c:2a:8b:99:2a:65:
ea:d8:b7:08:f0:30:7a:9e:f1:e0:6c:35:ba:42:b4:
c3:4b:99:c6:c6:7a:a3:a4:2d:f4:df:58:03:d8:34:
e6:c8:7a:53:06:96:a8:9e:5f:e0:5b:63:58:cb:b9:
b0:bb:e9:fd:c0:79:9c:f3:a7:dd:51:1e:49:3e:c8:
45:3d:09:d7:ca:99:aa:0b:1f:cb:77:9e:2f:f9:f5:
c8:d2:a8:2d:8e:c1:09:b5:3b:be:e4:72:47:da:8a:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:2E:BE:3E:AE:46:69:0B:C6:55:A4:35:F8:4C:B5:6E:03:21:44
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:80:66:24:e3:40:68:16:fe:c8:81:aa:c1:a0:5a:b5:72:e5:
8d:91:1e:0b:be:37:c3:d4:d6:33:42:5c:53:d2:f8:33:5a:86:
0d:b2:2b:20:c1:4c:85:18:03:1a:40:da:75:24:c0:00:e7:dd:
f9:c3:d4:0b:15:e2:1b:ea:52:ea:27:ed:e6:2f:61:3c:ff:43:
0f:e0:9b:89:25:b6:a7:d0:98:3e:42:86:c6:31:75:f3:cd:ad:
2e:c9:fe:e8:de:55:b9:78:ae:d1:31:64:93:e5:44:e3:1b:7b:
72:1a:10:6b:25:91:1d:55:29:a3:3e:60:a3:a8:55:2d:27:70:
10:4a:63:c9:82:d7:5c:01:3d:10:6c:58:9e:05:23:78:e7:81:
5a:f0:e7:b0:b2:b8:e8:7b:f1:1d:fd:6c:8a:c1:2f:36:d0:7c:
c1:9e:e4:46:f3:c3:3d:22:20:66:3f:03:a9:9b:f0:ff:dc:29:
ac:de:1e:2a:cd:d7:ce:47:c2:77:75:62:97:d3:5a:57:57:b3:
79:b9:ef:ed:d9:53:1f:2b:f1:eb:4d:f4:b9:8b:3b:43:b2:bc:
7f:64:72:d9:d5:4b:cb:39:1d:04:05:70:39:99:45:7f:fc:bb:
17:b0:b6:e5:af:8e:8f:53:ac:ff:04:93:8c:55:36:f2:92:6b:
bc:e9:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:42 2025 by rpki-client