Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: 156hr5GPqHVSkOWNWi+NTUKQsFrt8kI/yXFSsPDtB5Y=
Subject key identifier: 1F:3F:27:8B:30:69:3B:22:04:A6:23:5D:D1:06:E2:B7:7F:4D:71:96
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019643D749AF76408E9159D35C74C9D8C658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0B99
Signing time: Thu 17 Apr 2025 13:01:44 +0000
Manifest this update: Thu 17 Apr 2025 13:01:44 +0000
Manifest next update: Fri 18 Apr 2025 13:01:44 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: I22cfc3PVhO2hJIUAd3bs4/hueAQQLzIWZAznfhx2Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:49:af:76:40:8e:91:59:d3:5c:74:c9:d8:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Apr 17 13:01:44 2025 GMT
Not After : Apr 18 13:01:44 2025 GMT
Subject: CN=1f3f278b30693b2204a6235dd106e2b77f4d7196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:c9:02:5b:99:2b:8b:db:14:85:85:50:f5:
2b:f9:78:bb:c8:e4:d6:e2:1f:a5:58:06:ca:65:1a:
b5:e9:cc:e5:d6:45:5c:60:1b:c3:da:0c:08:17:1a:
e2:dd:2c:a9:27:33:33:c8:69:69:7f:4c:0a:a8:fd:
88:f8:ef:c7:b9:6a:f4:48:63:2a:b7:84:84:11:ba:
a7:34:b6:00:ad:26:8c:df:b1:b1:4c:78:0b:dc:7e:
55:50:87:9c:5a:7c:db:e1:89:4f:93:b2:18:75:70:
67:1f:b5:4b:00:e0:1d:72:08:a5:a5:69:66:ac:e3:
b8:61:89:19:ca:22:44:89:02:da:ff:1e:e8:c2:0f:
c7:fb:cd:e7:08:3b:43:00:6a:1c:f5:06:04:2b:ea:
91:27:4e:d4:2c:46:2f:a4:d7:00:92:b4:c0:14:5b:
93:f2:ee:14:cc:2c:f1:9e:36:42:ad:cf:e9:b0:87:
59:99:dc:e7:fc:1c:75:ac:58:69:ce:38:72:02:11:
4e:ba:02:f7:5e:38:0a:9d:fa:ea:b8:fd:d7:e4:a7:
a1:2b:ca:ba:7b:c2:e6:d3:cb:a9:51:f2:ee:5b:69:
a6:03:bb:dc:eb:f1:82:a3:bc:86:cc:27:32:ef:1c:
02:14:5d:e3:9f:14:44:48:e8:57:42:9f:2b:0b:03:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3F:27:8B:30:69:3B:22:04:A6:23:5D:D1:06:E2:B7:7F:4D:71:96
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:be:01:08:78:d1:f3:0d:51:ea:03:8b:16:66:77:e2:aa:bd:
ad:ba:1b:5b:41:88:3a:2e:a7:d9:4b:41:25:e9:89:6c:85:a7:
9c:ab:b0:b4:9f:04:27:12:35:82:2c:3d:39:a6:fe:39:6a:24:
0c:32:ab:e0:c0:3e:39:17:ce:23:d7:6c:3f:88:a2:e5:26:ae:
bc:24:f7:31:d0:98:5c:dc:29:47:85:bb:fd:a3:a5:dd:18:9d:
13:43:c0:ef:e8:2e:35:4a:5b:87:c8:f1:ff:bb:41:4c:70:b9:
fe:6e:5c:7c:ef:39:39:2f:c0:e7:99:e2:d4:db:90:ff:2c:03:
1c:06:f3:ac:63:0a:11:87:f5:ab:60:f5:99:49:a1:18:33:6b:
46:91:52:63:4e:9f:e7:9b:1a:52:53:10:04:75:36:5b:ee:c1:
ee:bc:46:90:e8:4f:48:5c:8e:31:97:ac:b3:2c:53:3e:61:ac:
42:cb:3e:d0:41:c0:0b:da:b0:26:35:b1:c1:11:12:6c:6d:bb:
af:0a:28:89:95:c6:d0:97:3c:5f:16:f2:45:52:5a:bf:40:00:
81:4a:04:77:57:d9:0c:7f:5e:bb:b0:75:b4:2a:a4:9c:19:47:
a3:0e:1f:46:93:8e:a8:3e:55:ae:e8:22:00:09:a0:b8:87:13:
bb:2d:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:28 2025 by rpki-client