Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: 1pONWxtZ3cOO2nL7eQFNWwmZ+Ky+WYO2ojC57lhOIxk=
Subject key identifier: BE:66:32:4D:7F:3B:D9:6D:90:82:48:06:AE:CD:A5:C8:EB:24:89:59
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 01964A7D443A37A3278AF9C01215F4A7E327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 20:00:45 +0000
Manifest this update: Fri 18 Apr 2025 20:00:45 +0000
Manifest next update: Sat 19 Apr 2025 20:00:45 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: 7tfYNkYjpyy+6mtp4WOGjRsGiF8KBHBEzy+u1PwBEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:44:3a:37:a3:27:8a:f9:c0:12:15:f4:a7:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Apr 18 20:00:45 2025 GMT
Not After : Apr 19 20:00:45 2025 GMT
Subject: CN=be66324d7f3bd96d90824806aecda5c8eb248959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:4e:1e:e0:08:d4:33:80:e2:9b:8d:ae:61:
ed:a4:f3:1d:a9:fa:60:3e:ab:c8:d0:cc:af:96:a8:
93:d3:da:53:18:e5:ac:03:93:22:4c:fd:a4:cd:9c:
2d:4e:91:7c:59:2f:84:9d:ed:3a:d2:c5:0d:11:48:
5a:09:d4:a6:17:c9:a4:d6:a0:20:ac:26:9c:c9:04:
7c:81:a6:5f:25:03:82:fe:24:9d:75:bf:7c:9f:e3:
84:fe:15:8e:f3:da:d2:d9:3c:37:15:80:89:52:b0:
4d:84:00:18:d1:f3:0e:f8:16:6e:e2:45:e7:ff:9d:
14:91:e0:f8:28:40:74:19:77:e7:fe:23:7e:16:ea:
0b:56:c4:bd:01:d5:8e:04:31:bc:20:4f:0e:52:c4:
98:39:e7:9f:03:9f:a8:13:99:dc:0c:97:5b:92:bc:
f6:78:7f:71:b4:0b:88:0b:99:8b:83:bc:5a:56:71:
70:63:78:91:74:7a:05:e9:a0:b5:db:80:2b:d5:87:
a1:48:1c:07:9b:7f:af:fb:ea:c7:78:98:74:f3:f5:
61:3f:e6:aa:49:be:1c:5f:72:b6:3d:73:76:ba:db:
56:89:42:c4:77:b0:cd:7a:d3:4b:ea:e8:a0:30:c2:
32:60:7d:f0:3b:23:f7:90:fb:21:a8:38:8c:bb:77:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:32:4D:7F:3B:D9:6D:90:82:48:06:AE:CD:A5:C8:EB:24:89:59
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:ed:01:23:2a:fb:a4:5d:79:33:04:00:c7:33:ba:b8:3d:
00:ed:6d:c3:15:fd:70:61:43:48:fe:d4:d6:28:15:b5:c3:7b:
3b:f0:3c:b2:e8:fa:d3:cd:cb:bd:71:56:f4:26:3c:8e:aa:11:
34:eb:a4:0e:ed:f8:0e:cf:33:3f:a6:22:69:95:6f:d0:3f:b6:
b0:47:a4:f6:50:1e:25:f1:b6:9d:ab:2f:24:89:c0:e6:70:30:
d5:80:ca:d3:5e:af:ba:e8:69:74:e9:29:73:11:f4:32:19:09:
78:31:8d:5d:8c:4e:8c:d2:03:88:fe:16:c2:29:39:1c:02:5c:
65:af:ac:35:2b:9e:7b:27:03:d7:0f:51:a9:71:e7:97:6a:43:
d7:b1:8f:db:68:f9:b3:33:cc:df:93:8b:cf:47:1b:e5:97:7d:
f9:0b:3e:00:d1:74:7e:73:a8:dd:37:c7:52:ca:d2:35:e1:68:
1d:a2:1d:45:21:96:a1:38:30:33:c6:43:0c:94:71:f4:8b:78:
73:2b:68:12:6f:43:81:6e:e0:3d:1b:75:63:3a:2f:ca:c3:19:
b1:83:21:27:33:47:79:27:88:0c:65:9f:b6:ba:47:f8:64:c3:
16:a4:45:f2:1e:f1:50:89:99:05:d8:7e:64:c6:f6:75:48:10:
8f:f0:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:44 2025 by rpki-client