Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier: ao88AKtF+bgTXS+Y+zTuBXBf5t+NW0JD8K1RNU0+BU4=
Subject key identifier: 3C:36:AF:CC:18:34:F0:21:7B:E2:2E:CF:BF:D9:EF:21:13:8D:8A:91
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial: 0196549302A793A8306A202A5B5C6370E02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 19:00:42 +0000
Manifest this update: Sun 20 Apr 2025 19:00:42 +0000
Manifest next update: Mon 21 Apr 2025 19:00:42 +0000
Files and hashes: 1: QKCpBgruuyz3i6ikVFdg6qQ3F0Y.roa (hash: G88p/gWLQ6tFindRbDEI4oT0jR5gYy6dY2FWfseB5AQ=)
2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: 16D2Zki4PV65wU0iK4xccR8EHMkTfO5QaB9gsAfu2ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:02:a7:93:a8:30:6a:20:2a:5b:5c:63:70:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Validity
Not Before: Apr 20 19:00:42 2025 GMT
Not After : Apr 21 19:00:42 2025 GMT
Subject: CN=3c36afcc1834f0217be22ecfbfd9ef21138d8a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:20:35:80:20:87:a0:bf:82:74:4d:1a:da:
6e:a2:38:43:29:99:6c:de:24:f3:a5:14:8c:f9:62:
56:95:9f:19:b8:7d:96:82:44:14:c4:cd:25:ba:e1:
b3:58:53:b1:76:4d:9f:84:60:5f:34:41:07:77:f0:
d9:11:d6:bb:39:4c:d8:6f:fa:f6:6d:66:34:c2:74:
93:58:6b:4c:c1:43:f8:2d:a2:71:7a:c9:62:6c:e0:
98:b3:4a:82:96:d5:e5:68:51:0f:a3:f6:60:b9:f9:
c7:4e:e5:73:45:04:5b:85:9c:65:fa:01:c5:44:20:
89:47:95:34:c2:87:f8:eb:d9:eb:f0:3a:36:d6:94:
d1:c7:a1:70:39:bc:70:10:67:fc:fc:66:32:f0:45:
4e:d0:7b:03:60:96:35:3e:d7:4c:ec:31:d3:6d:bc:
50:30:70:29:97:19:62:ec:46:9c:c0:e5:62:51:0c:
1a:6d:c6:97:64:aa:42:ae:61:e9:3e:c4:17:1e:dd:
59:87:73:77:ee:3f:78:07:79:9a:de:b0:7d:ef:df:
2c:15:fe:4e:48:ea:51:f6:df:f2:77:6d:76:d4:53:
ae:81:a7:cd:c3:27:bb:23:eb:b1:0b:75:d2:41:34:
03:3a:72:82:dd:78:f1:23:b7:15:5d:e7:d6:69:c8:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:36:AF:CC:18:34:F0:21:7B:E2:2E:CF:BF:D9:EF:21:13:8D:8A:91
X509v3 Authority Key Identifier:
keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:8a:c2:9c:00:8f:14:36:c7:22:32:30:af:26:95:cd:d3:
59:76:32:61:4d:53:72:62:e4:ee:64:c4:92:67:5d:eb:a7:ef:
32:47:a0:d6:f3:9f:dd:0e:12:be:46:db:df:ae:e4:18:fb:7e:
66:f8:38:ad:1c:68:f0:e4:fe:8d:8b:fe:25:b7:fa:94:1e:a6:
e5:0c:b2:a7:59:8d:14:dd:6b:87:b7:f1:07:f0:cb:22:aa:60:
f2:5c:f4:7a:2e:8f:a7:35:5d:ba:1d:91:26:0c:bb:59:60:95:
67:71:5a:76:01:5b:77:e2:95:0d:cc:b1:dd:a6:22:c0:cb:3c:
6d:44:29:0d:19:ec:51:59:3b:c7:95:52:5d:fd:b8:78:b8:5e:
0b:61:91:8a:ee:39:0b:b4:b5:1e:ef:31:54:8b:68:c2:9d:d5:
12:73:fa:18:89:fb:4e:6d:9a:b8:e9:7f:19:0b:4d:58:74:4a:
f1:cb:47:d8:27:2d:c9:9c:4e:aa:48:af:30:0e:d8:0d:c0:b9:
76:ed:c4:68:aa:de:76:23:30:89:72:05:a6:f6:b2:41:d3:b3:
e4:5b:f7:fe:55:6a:bf:62:15:f1:fc:90:f2:3d:eb:de:35:64:
17:a8:fe:e1:7d:eb:18:66:cb:3b:6a:c8:cd:b3:3c:53:ce:ad:
51:0e:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:11:22 2025 by rpki-client