Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: 8khgawboYTTgeSDI8VibZSz669izQrPlD7oKkB0KS4g=
Subject key identifier: 4C:FD:09:40:BB:62:62:F0:A6:A5:AB:D1:49:D0:B1:E2:EB:38:45:DE
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019606E6714253473B7B09B918355C9CB6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 11F6
Signing time: Sat 05 Apr 2025 17:01:27 +0000
Manifest this update: Sat 05 Apr 2025 17:01:27 +0000
Manifest next update: Sun 06 Apr 2025 17:01:27 +0000
Files and hashes: 1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: Zc7+pZ0RT08wFLQGCO1fgNQWkF4eg5L91RTu13VZXiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:e6:71:42:53:47:3b:7b:09:b9:18:35:5c:9c:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Apr 5 17:01:27 2025 GMT
Not After : Apr 6 17:01:27 2025 GMT
Subject: CN=4cfd0940bb6262f0a6a5abd149d0b1e2eb3845de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:70:ba:45:e6:6c:83:b0:64:aa:60:bc:bb:
45:36:3e:be:d8:14:dc:8b:02:c4:cd:ed:60:d4:25:
40:18:4f:6a:d5:ee:0b:7f:b8:20:bd:a3:83:31:e4:
2d:a3:19:e3:b2:54:19:5c:ca:46:aa:17:9a:e6:7d:
7c:82:c0:dc:ed:4b:78:4d:d8:8e:ab:fa:67:72:13:
37:e3:48:ee:d8:4f:09:a8:65:25:91:aa:a3:0b:20:
98:1e:19:e5:b5:cd:e6:68:8d:94:a2:e5:35:19:a9:
1b:0d:29:a7:e5:e8:bd:f6:5c:50:b9:3c:e1:7e:20:
39:69:65:ff:19:dc:fa:f7:85:62:0c:48:77:ad:0e:
03:b7:cc:0a:02:83:6f:43:dd:e8:fe:90:8b:82:23:
38:bc:9c:c1:2d:68:b8:4d:9c:86:6c:14:ba:83:12:
45:a9:ac:fc:52:1d:38:3c:78:09:5d:c1:3e:9c:db:
d0:fa:03:37:44:82:db:45:c8:51:bd:c5:3e:5a:ad:
15:47:b3:cf:79:32:60:88:85:c7:34:57:d2:76:f9:
20:01:0a:87:a8:52:37:c4:5c:66:35:9a:8b:74:41:
d8:3c:d8:60:7d:b7:62:5b:5f:1b:31:df:55:f1:26:
01:04:7d:8e:2b:05:27:c6:8a:c6:e7:ee:82:27:bd:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:09:40:BB:62:62:F0:A6:A5:AB:D1:49:D0:B1:E2:EB:38:45:DE
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ac:55:50:9d:96:67:7e:be:bc:38:d7:d5:f4:a8:4e:3c:4a:
a7:76:b7:66:49:34:df:5b:64:5e:6c:da:88:14:cc:65:05:ce:
b4:3f:28:37:05:96:e3:d1:52:40:16:70:29:40:d7:0c:6d:b1:
31:05:37:33:92:98:e9:b7:3f:d5:6a:f7:9b:5b:09:ce:b6:d5:
ec:63:ee:b4:e2:bb:ae:74:d7:49:86:16:17:ea:06:e8:4d:1a:
b1:f4:02:1f:52:fb:d4:ea:d4:c9:08:0e:4a:e9:eb:24:f4:fd:
ec:1e:9b:a2:e7:de:40:47:f7:6b:d8:19:70:6a:ca:10:97:ab:
8c:64:d7:81:2c:f6:c1:2d:f5:89:97:4b:18:cf:41:ed:91:c5:
c5:a1:24:4d:e8:00:96:c7:4f:46:d3:7f:99:4c:10:cd:1b:de:
48:c6:c3:d6:fa:0a:6c:1e:c2:91:48:df:d9:6e:35:41:39:bc:
66:f2:69:7c:22:74:6a:39:16:57:ef:15:cc:b9:18:dc:9c:a0:
5a:74:1d:fc:be:e5:0e:11:c2:00:b4:a4:3a:21:e2:ca:5a:eb:
5c:b7:f6:4d:10:e0:ea:a6:80:2c:45:53:58:57:23:b7:ae:3a:
4a:fc:e1:e8:7f:ce:9e:b2:29:05:02:7d:28:18:d1:ca:cc:50:
79:01:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:44:03 2025 by rpki-client