Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: AXSeRewp2iX+3LqrCqsm+epl3o/lNIi69paRjJ9AZJk=
Subject key identifier: 9E:74:92:CF:63:76:61:95:2F:E1:89:61:EB:70:6D:E5:FB:A9:40:78
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 01961020BB919CDC9E234D9193A0671650CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 1285
Signing time: Mon 07 Apr 2025 12:01:42 +0000
Manifest this update: Mon 07 Apr 2025 12:01:42 +0000
Manifest next update: Tue 08 Apr 2025 12:01:42 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: d5FluHD1d55nW1uRk3MVT8hsGq601PRwy7qQ8GENFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:bb:91:9c:dc:9e:23:4d:91:93:a0:67:16:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Apr 7 12:01:42 2025 GMT
Not After : Apr 8 12:01:42 2025 GMT
Subject: CN=9e7492cf637661952fe18961eb706de5fba94078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:0f:7c:d1:9f:cb:0e:ca:00:ea:7c:62:68:
02:67:8f:6b:41:b0:e9:ac:dd:6c:14:fd:43:f7:ce:
7c:45:4f:58:0f:57:7c:ba:53:5c:0a:95:39:74:70:
74:c7:55:ce:55:5e:6d:eb:9a:a5:9b:37:1d:96:48:
1a:9d:cc:2a:14:42:2a:84:b5:23:06:ba:eb:dd:43:
6c:f1:76:d8:28:db:3e:d1:a6:fc:3c:1c:b0:b0:fe:
3c:a7:12:48:c9:c9:5e:33:74:54:00:96:31:6b:bc:
ec:80:4e:8e:ec:2c:75:68:f7:23:66:76:e0:d1:4b:
15:e5:ad:36:4e:cc:80:c1:1a:ce:a7:fc:64:1c:cc:
88:2c:64:ba:f2:91:e8:8c:d3:af:ab:33:bf:53:54:
80:82:55:0f:bf:90:c8:28:49:b7:da:de:db:b8:d1:
9a:7b:5b:34:f0:4a:ad:4f:7e:bc:17:89:ba:0d:5e:
6e:3a:33:79:84:3a:1e:1b:38:df:46:3e:7d:06:67:
df:ba:72:7a:1b:59:94:4f:12:42:7d:21:b8:95:5b:
00:98:ee:7c:91:52:68:39:fb:18:3b:4e:86:ed:2b:
fd:c4:d4:aa:3a:01:25:69:d8:e7:cf:92:7f:f8:7e:
8e:89:d3:e0:38:b7:ff:78:e3:2a:ec:0b:41:35:c6:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:92:CF:63:76:61:95:2F:E1:89:61:EB:70:6D:E5:FB:A9:40:78
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:59:92:d7:18:df:1d:b8:80:2d:fe:4e:87:c8:4c:9d:32:
4e:ae:4a:af:e6:fc:47:0b:a1:d8:6b:d4:ba:55:ca:d3:a5:45:
09:2f:45:cf:9a:38:8f:75:24:59:62:36:23:ba:9d:7f:ae:22:
e8:51:db:8e:d4:10:26:2a:9e:e4:55:71:72:4a:78:5c:47:b9:
cc:ef:e7:0a:8c:e7:eb:bc:f5:38:0e:55:3f:e4:05:de:cf:86:
ce:05:d0:7e:b9:a7:6e:4a:d9:2d:08:c8:12:99:95:68:17:82:
18:9d:2b:88:b5:13:df:e0:66:be:ef:a8:3e:e1:f7:a6:12:b5:
07:b2:47:66:33:a3:d4:2d:92:ab:8d:84:5f:cc:74:74:cf:3a:
c8:37:cd:14:02:bb:de:5f:73:09:21:7e:79:31:f5:83:1f:c3:
62:33:ac:ae:0f:f8:ef:22:b5:34:97:43:80:5b:03:c3:ac:cf:
57:7d:5e:7e:32:84:ed:c3:86:41:f0:5f:22:00:e0:c5:a2:60:
1c:93:8d:30:43:5b:a1:8e:ee:d3:99:c1:75:47:7a:cb:f9:44:
39:ca:9c:06:ab:0b:0c:dc:7f:d5:c2:44:49:f1:ac:35:d6:cf:
05:8f:d8:86:22:84:04:77:ac:4b:4e:21:67:98:91:f1:dc:9f:
62:52:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:17 2025 by rpki-client