Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: C2C5n1m8hfBRHkVQ+FjEAvdQ3gmcgiN/FcZ3rbpWbZs=
Subject key identifier: DE:A7:C5:4E:9E:C4:14:A3:6A:A5:67:BE:37:80:29:12:32:C0:BA:9C
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 0196550095E23C3F5499EE1846CF5A3947D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 1110
Signing time: Sun 20 Apr 2025 21:00:23 +0000
Manifest this update: Sun 20 Apr 2025 21:00:23 +0000
Manifest next update: Mon 21 Apr 2025 21:00:23 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: XKLIhmK6HlMVA5DtFsv5F8oDH+P+J3R0Y6Cj0Op4T6M=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:95:e2:3c:3f:54:99:ee:18:46:cf:5a:39:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Apr 20 21:00:23 2025 GMT
Not After : Apr 21 21:00:23 2025 GMT
Subject: CN=dea7c54e9ec414a36aa567be3780291232c0ba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:49:d3:11:a9:61:c5:e2:bb:89:34:78:47:
33:41:f9:36:d2:9d:6d:ef:cb:7e:5d:5c:8c:d1:4a:
45:89:d4:cd:27:81:ae:6f:d3:d1:81:7e:db:a7:e3:
9b:5b:8b:5d:6a:d7:83:44:f8:ab:2a:77:4c:5c:e7:
22:ef:cc:07:ec:41:c5:66:a2:03:ea:62:84:86:a8:
ca:05:cf:2f:d3:8c:a0:50:45:92:61:f0:21:87:df:
45:41:f5:55:55:da:64:ce:74:3a:9d:ac:80:6e:ee:
cb:ac:8c:4c:7b:8c:10:66:2b:7c:68:a8:04:e5:8a:
ba:6a:a6:a0:20:0f:56:92:c3:54:37:0d:54:50:bc:
43:3d:07:37:7f:03:2e:a4:8d:ee:46:af:25:04:a5:
0c:25:9b:5b:3e:90:5d:e1:ad:ea:37:ce:d9:7f:c6:
07:42:df:26:64:e0:f1:e4:e4:b9:1c:f8:28:77:da:
d9:8e:42:42:9c:fa:46:fe:79:e4:9e:81:3f:9e:8c:
b0:eb:39:eb:2e:46:5b:50:da:19:5d:26:af:d7:d2:
67:4a:19:69:e1:b3:4d:a9:0d:66:98:e8:5a:f5:3a:
e1:c8:6a:db:39:4e:d6:18:11:36:52:c0:a5:3c:c5:
5f:d7:d6:7a:43:75:64:61:72:d1:7c:4d:91:25:ec:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:C5:4E:9E:C4:14:A3:6A:A5:67:BE:37:80:29:12:32:C0:BA:9C
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:98:fe:51:b6:c2:09:5b:73:1d:e3:12:b4:26:0f:7d:bb:19:
21:87:4d:8b:1d:45:03:c5:99:3d:46:3a:62:ad:4d:af:89:77:
35:50:d4:49:c6:e4:99:6e:b3:e5:26:b4:b5:b2:90:ef:7a:11:
c0:5c:ce:11:b9:1f:aa:88:dd:08:c3:70:ed:e0:3f:a7:c5:84:
f2:dd:d8:7b:aa:0e:b9:9e:a6:63:24:67:df:35:e1:32:e5:0f:
5e:43:88:fe:74:50:80:c2:b2:b8:9e:4f:ad:01:c3:fc:6a:13:
10:47:6c:c4:ac:b5:e7:c6:76:2d:f8:bf:61:38:84:84:7d:20:
d7:c9:1c:20:f2:cf:42:01:ad:04:e3:02:2c:dd:02:57:09:18:
62:b1:7d:f4:c2:f5:1c:0e:51:bb:0f:a9:23:11:b9:52:40:02:
0e:73:7d:51:ea:92:44:cf:e2:46:00:4b:dd:e2:f9:29:8c:23:
30:8d:c1:c2:d9:1d:0e:5b:cc:5b:96:37:1e:b9:ee:05:4f:ac:
6f:0c:e0:64:af:b6:78:33:0a:73:29:25:00:a0:75:ba:82:49:
b6:a1:cb:ef:f5:4f:18:20:8b:f9:99:e2:13:11:d4:10:b3:0f:
1f:2c:6c:06:0d:38:f1:6d:8f:a1:5e:9c:85:60:c1:68:a5:00:
ef:fa:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:38:24 2025 by rpki-client