Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: qMs2KEl7a3/yN2TdbzWbeQrF83ioTaFmxLCW9FvNH7A=
Subject key identifier: 3D:D7:3E:EA:E2:6C:62:76:F5:19:F1:0D:53:5B:6A:06:21:F5:56:AD
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 019655DD39D75C3A638E97171EB90817C916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 0152
Signing time: Mon 21 Apr 2025 01:01:23 +0000
Manifest this update: Mon 21 Apr 2025 01:01:23 +0000
Manifest next update: Tue 22 Apr 2025 01:01:23 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: TK1u5IddCszKvZg+VKZMBAScDEv42nHhe58cibW5AI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:39:d7:5c:3a:63:8e:97:17:1e:b9:08:17:c9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Apr 21 01:01:23 2025 GMT
Not After : Apr 22 01:01:23 2025 GMT
Subject: CN=3dd73eeae26c6276f519f10d535b6a0621f556ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:ae:36:9e:29:90:e6:4e:cd:77:77:53:78:
d9:db:f8:51:b9:15:e0:fc:83:6a:9d:50:fe:75:cb:
26:f1:5c:7d:a4:f6:c8:be:88:af:bd:9b:6e:e9:f4:
ac:bf:7c:37:c2:54:d9:33:be:1f:f0:29:f0:48:56:
51:5f:db:ad:8a:f7:2d:5e:18:d8:0c:53:b2:08:8b:
e8:ae:a4:16:67:00:ef:76:48:d4:76:53:b1:dc:09:
66:e9:9a:2c:fd:e8:9e:53:2c:dc:46:38:af:9e:e2:
34:ec:f5:56:de:dc:68:d2:f7:7c:8b:ba:ba:80:70:
ad:44:f9:38:ce:73:92:ec:8b:30:89:03:3b:71:f7:
01:e1:63:2c:94:ee:9a:1c:ce:ab:8e:65:1a:2c:bf:
0c:0e:2c:e7:26:16:15:2c:46:a6:cc:79:6e:4a:0c:
05:58:51:a2:7a:80:3f:bf:cf:18:32:67:52:bc:6e:
25:dd:a8:9c:3c:0d:85:1f:76:03:54:50:74:51:00:
bf:74:0a:15:07:e6:16:a2:51:f6:36:c8:a5:18:8f:
25:c3:ea:37:a5:2c:10:b9:96:96:a0:7d:19:fb:63:
a8:8f:3a:c1:dc:4e:23:1e:c8:7a:19:42:2a:b7:93:
29:fd:56:8b:db:d2:a8:ca:cb:3f:03:4c:d3:eb:9c:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:3E:EA:E2:6C:62:76:F5:19:F1:0D:53:5B:6A:06:21:F5:56:AD
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:fd:8f:22:c0:1e:87:6d:80:8f:e9:08:97:c4:96:02:85:
d5:ab:23:ad:47:ce:e0:03:0b:fb:f6:b9:f4:b2:8f:44:93:55:
01:70:42:2f:c2:a6:4d:56:a4:64:96:3a:4d:2c:ef:4b:e3:5b:
fe:ab:4f:49:af:9a:54:50:4d:17:d0:ba:da:34:d8:0f:cc:08:
09:fb:0d:25:6a:0b:6e:5e:79:44:81:e9:44:c5:a7:99:85:0d:
af:5e:09:ef:79:e3:17:31:99:08:89:61:04:aa:92:95:5b:f6:
93:ed:c0:e5:4d:51:e4:a3:8a:5a:00:1d:fa:1c:82:1c:2a:61:
ff:b0:62:24:af:e6:33:1a:35:f3:27:de:c6:73:3d:72:ee:b7:
de:62:44:d6:64:da:ef:d8:a3:86:ca:41:bc:e2:be:fd:a7:9f:
d7:ea:7e:88:e3:4d:30:d6:b5:2d:69:55:7a:8b:64:2f:fe:e4:
04:14:cd:23:bf:75:86:3a:ea:b2:70:a8:f7:4f:e2:db:bd:b6:
4a:34:db:c7:f4:0e:83:5d:96:99:1c:e5:05:f0:20:53:47:f4:
36:e5:57:e6:a3:ee:b6:36:4e:c0:9d:60:d0:42:39:36:0c:ae:
4a:9c:8e:4d:b7:93:ff:cc:95:79:bd:a4:8a:d3:0e:70:ed:4e:
5d:0f:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:05 2025 by rpki-client