Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: HZBSbxPF4NRYT5nYOoUxpAb5T8IIUkKQ/lzhuMWA8no=
Subject key identifier: E9:34:06:04:80:60:27:F3:D3:FB:98:97:83:17:B7:57:CE:7E:0A:46
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019658A6BA04DAD0FD8AE41B111915DFBFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 05
Signing time: Mon 21 Apr 2025 14:00:43 +0000
Manifest this update: Mon 21 Apr 2025 14:00:43 +0000
Manifest next update: Tue 22 Apr 2025 14:00:43 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: 0YkTQ0i7j0P/+2tyjzxXNSMVKmocjDy4zONccfD1mEo=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:ba:04:da:d0:fd:8a:e4:1b:11:19:15:df:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Apr 21 14:00:43 2025 GMT
Not After : Apr 22 14:00:43 2025 GMT
Subject: CN=e9340604806027f3d3fb98978317b757ce7e0a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:be:05:a5:4d:56:db:1b:46:97:ff:ea:20:
05:d2:6f:db:cb:45:19:bc:f6:e3:37:8f:be:82:a5:
8a:82:6d:40:a9:f9:fa:08:59:8c:98:2d:ab:76:34:
21:59:ef:a5:15:38:39:54:5e:ab:1c:f5:ee:0b:da:
5c:ec:72:d3:4f:f8:c2:32:67:6f:2b:bf:03:c9:24:
f9:29:6d:ef:c4:36:9b:59:10:06:f8:fe:27:46:cb:
98:68:21:59:0c:4c:a2:b5:81:7e:5e:dc:f3:b0:d4:
6c:db:c8:06:db:0e:37:43:49:95:4c:93:f1:32:ad:
a6:40:6e:53:41:da:6f:1e:62:8c:a6:34:ec:74:f5:
78:13:76:ca:8d:f8:bd:77:22:1b:f2:b2:f1:e0:c3:
bc:ba:ef:50:90:80:b1:22:a5:22:00:f8:8d:d0:4f:
de:ba:5f:2d:90:a1:37:ca:0d:1c:9a:9d:2a:2c:ec:
c2:af:f5:33:c5:3f:dc:64:3d:bc:4d:77:06:9c:06:
8c:35:94:d1:8b:a0:a3:23:a3:8d:22:5e:5e:66:74:
40:31:20:b0:f2:a1:86:8b:3d:e2:c8:f2:20:ff:20:
89:da:67:12:82:80:1f:75:67:a4:4a:74:3f:c8:4d:
38:c2:52:6c:ee:2a:cc:3a:ac:bf:95:ad:04:0d:f4:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:34:06:04:80:60:27:F3:D3:FB:98:97:83:17:B7:57:CE:7E:0A:46
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b6:72:9f:d4:58:5c:a6:1b:41:eb:bf:f5:ae:41:93:b4:6c:
5b:2f:6c:84:6e:69:c4:7f:c1:12:17:d0:f2:d0:27:39:7c:b4:
b5:46:42:d3:c9:fd:a3:5a:e3:ca:f4:4a:f2:e5:1e:7c:f9:e3:
84:e7:e3:3d:6c:6d:25:7e:d9:fd:96:8c:8e:8c:57:94:68:79:
1a:9b:cc:1e:30:c8:34:b3:36:54:10:2a:04:c6:e6:90:79:64:
1e:09:87:53:5a:78:0f:6f:13:e8:34:9a:74:17:c0:a6:a0:a6:
b0:2f:12:4b:e6:b8:35:36:ad:89:c1:82:69:4a:b1:0d:71:b7:
8b:e0:2f:9c:24:c7:5c:00:81:02:4b:89:29:70:23:f4:eb:64:
ed:90:96:a6:34:69:17:01:eb:af:9a:3f:cb:25:0f:f5:5b:f4:
46:42:20:37:ab:03:9a:27:b8:b2:41:bf:96:3d:3e:0b:db:90:
99:89:d5:73:3d:b4:fe:2a:4f:78:86:a0:1f:7c:38:26:50:2c:
65:b4:5a:5f:7d:97:93:d3:79:d0:44:6d:43:14:18:f7:00:cd:
2a:b6:2b:4f:24:a7:fd:e9:9c:0c:6e:1b:c7:70:1e:7c:45:29:
26:55:39:72:21:aa:5a:71:fb:36:45:ee:23:9f:31:cd:0f:8e:
b6:37:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:05 2025 by rpki-client