Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: 28VCuX2UTG55+i/wornWZyDfZg6/xmoIAXVFzu83K8U=
Subject key identifier: 3D:C0:93:E2:C4:9D:DC:EA:88:6D:24:D2:41:48:0D:FF:D6:CC:EF:23
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 01958CCEE7AF266FE2FA1372924DC2EC5E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 05DA
Signing time: Thu 13 Mar 2025 00:02:04 +0000
Manifest this update: Thu 13 Mar 2025 00:02:04 +0000
Manifest next update: Fri 14 Mar 2025 00:02:04 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: P1INyXEsGGw/ku5D6Ke8yly8GpWpF3lfvbBM31BMroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:e7:af:26:6f:e2:fa:13:72:92:4d:c2:ec:5e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Mar 13 00:02:04 2025 GMT
Not After : Mar 14 00:02:04 2025 GMT
Subject: CN=3dc093e2c49ddcea886d24d241480dffd6ccef23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:df:bd:85:22:fc:33:78:67:1d:47:b6:50:
8a:cb:fc:7b:59:10:a0:bb:70:9c:4a:2b:cc:1e:27:
fa:3b:7d:49:64:dc:0e:5a:d2:09:02:a0:fc:67:00:
c7:95:bd:c7:f6:cf:57:3d:52:89:e7:2f:cd:74:99:
8b:1f:3d:49:f9:26:97:66:fd:70:ea:4e:b8:34:ba:
c8:c8:e9:20:80:de:7d:1b:d6:59:9e:2f:0b:bf:73:
39:21:67:04:bc:74:84:1d:69:90:fe:14:c6:b7:19:
c1:7b:13:a5:3f:8a:c5:54:bb:93:3e:e7:eb:7b:f3:
22:a1:5c:a0:b6:46:e0:27:d2:44:c5:49:0c:64:05:
ea:c8:a6:1e:e1:b8:ee:80:69:c1:76:5b:0a:00:fb:
30:bb:d4:94:09:30:b4:94:03:33:01:d1:88:3d:d4:
44:88:8a:4e:03:e7:ac:49:a3:e3:be:8e:5c:da:ab:
c3:9d:63:84:4e:72:ff:48:bf:be:58:da:46:e3:b0:
82:ba:91:40:12:0a:f1:48:6c:8e:e5:c6:70:06:8b:
d8:23:8c:16:61:1c:f7:7c:b5:d1:5f:a1:44:30:ea:
1d:5f:bc:af:ff:f3:85:00:e1:bd:c1:29:c4:9c:53:
59:1b:e1:f2:58:a9:1a:7d:f5:59:78:14:07:78:fc:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:93:E2:C4:9D:DC:EA:88:6D:24:D2:41:48:0D:FF:D6:CC:EF:23
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:bd:41:d0:bb:a4:e5:0f:4b:2a:0b:dd:bd:4d:9e:70:6e:
17:5f:3c:5b:bd:36:a0:74:a7:78:0c:ca:3c:b8:64:25:8f:c0:
f2:24:8a:12:01:23:d1:bc:be:02:d4:79:2f:1e:24:d9:7f:3b:
49:dc:ca:eb:cd:f9:46:92:5b:41:8b:86:1d:29:0d:f1:be:70:
ee:ec:a2:5c:6d:a5:e1:4b:76:7f:c2:2a:d0:01:7d:bd:59:87:
15:fd:20:29:2b:b0:44:1e:f9:0a:ee:d8:8c:e6:64:a3:91:50:
b0:77:03:de:39:12:ec:22:70:c6:ad:4b:0d:12:56:3a:eb:1a:
0b:69:23:37:d9:71:58:75:ea:88:52:2b:ce:ad:7d:25:ce:64:
f1:9d:95:97:cb:8b:22:5d:0e:a9:41:2f:5d:ba:ef:7f:8c:39:
df:66:b5:ee:c1:a0:07:23:98:db:e9:d3:65:7f:2c:87:e8:31:
cf:ed:80:d7:fc:ae:84:62:ea:8b:6e:f4:eb:61:b5:02:02:9c:
3f:8a:89:e0:68:01:8f:f5:55:a0:82:26:94:f3:a5:ba:77:cc:
2c:b5:ef:e9:86:1f:6d:4c:26:ec:66:6c:50:0e:50:ff:0a:83:
ea:7b:ae:1d:38:33:fd:cf:e4:9a:f6:e6:a4:33:09:c6:fa:bd:
55:fb:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:11 2025 by rpki-client