Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: /hjLn8SRCTKxWR4Aj18ls5SFVKixgedFMEkbqbwj5q4=
Subject key identifier: D9:D6:1B:B0:AA:DD:17:F0:67:5A:E1:B0:76:2B:62:AF:EC:64:65:9F
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 01964DB4F84807D0BE34FE0702E57CC1BB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 11:00:27 +0000
Manifest this update: Sat 19 Apr 2025 11:00:27 +0000
Manifest next update: Sun 20 Apr 2025 11:00:27 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: tk+0aeAWlVz61muh6ZOeAAhPIRODJImZvGcvJeIDpoY=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:f8:48:07:d0:be:34:fe:07:02:e5:7c:c1:bb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Apr 19 11:00:27 2025 GMT
Not After : Apr 20 11:00:27 2025 GMT
Subject: CN=d9d61bb0aadd17f0675ae1b0762b62afec64659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:34:95:22:94:13:cb:b6:df:6f:62:37:88:
69:98:ca:6a:c7:fc:06:55:ac:28:e1:6d:a7:57:a8:
8b:32:d5:b0:5e:91:62:2b:cf:36:7e:fb:8d:2c:b1:
b7:4f:51:b7:5e:73:65:6e:df:e1:06:d0:dc:3c:23:
b3:b7:1a:46:cc:df:3a:36:dc:9c:62:6b:1e:f6:35:
ba:d5:bf:86:34:cc:ab:26:dc:27:75:c7:c3:64:0d:
7c:34:a9:d9:a1:95:26:8c:b1:18:72:d7:df:b1:9f:
73:2a:fb:3c:19:7c:be:3c:b8:82:b9:ba:14:a4:37:
70:05:a4:11:bb:1d:9d:8f:87:51:6a:ca:21:99:a8:
77:35:c1:f5:01:b0:3c:59:a6:da:c7:a4:79:8a:b1:
95:b6:55:7b:b7:0b:11:02:7c:27:1e:ca:f5:05:fe:
c4:7f:39:89:7e:56:20:43:0e:51:8a:7b:6f:ac:59:
d9:d5:9f:91:84:76:a2:5d:d9:68:80:43:aa:5f:a8:
d4:cd:8c:65:65:ba:86:64:1a:a4:3c:1f:a3:1e:2a:
52:c9:89:b1:b4:14:51:13:9e:1e:6a:b0:ec:16:08:
81:50:eb:f5:bd:7a:d2:5b:63:00:23:7f:91:50:e8:
bf:2c:43:e0:90:29:ce:92:d8:c1:b8:4f:90:ff:2b:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:1B:B0:AA:DD:17:F0:67:5A:E1:B0:76:2B:62:AF:EC:64:65:9F
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:15:24:33:85:97:16:0f:d4:e7:ec:22:45:a8:aa:a1:c6:0a:
c0:56:2a:26:b3:3c:29:fc:37:7e:87:5e:11:8c:41:dd:0b:18:
ce:a6:1d:86:76:82:4e:a9:ff:13:ee:86:f3:42:92:d0:d1:9b:
43:ce:84:94:c8:85:7b:a5:47:20:0b:21:b0:d9:9e:38:4f:4e:
ec:c4:02:e8:b6:a8:95:88:67:8f:19:c9:f2:42:f3:8c:b2:e4:
29:aa:05:b9:93:82:5d:12:a8:8c:bc:53:14:79:89:03:d7:27:
02:65:68:9d:97:fc:59:9e:a4:4f:d5:26:76:ab:ba:c7:81:98:
9a:c1:c8:53:68:3c:98:9d:90:d8:25:ea:75:59:ea:06:3b:3b:
ad:0b:b4:f0:af:55:07:6a:e5:48:b0:8d:2b:e2:82:76:b2:3d:
67:49:84:5b:0d:a0:de:97:92:eb:d2:9b:f2:de:cf:4e:16:e6:
42:a3:78:ec:71:11:b4:2b:3b:8c:9f:49:2a:a9:c4:49:1d:c2:
d6:d8:8c:d6:a4:fb:7b:ae:59:0a:84:b6:0e:e9:3f:b5:99:0b:
8f:63:57:82:0e:61:c8:a1:f1:97:39:ed:04:5a:20:7b:00:06:
c3:bf:42:5f:e0:db:1d:41:53:f6:5d:5e:b0:c9:bf:76:6c:20:
7e:a5:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:19 2025 by rpki-client