Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
File: iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft (raw, json)
Hash identifier: EPS90mPpbtpCZn4GLKBvgq7Uxr57F39U97zIvbTKIU8=
Subject key identifier: 8D:5D:39:39:35:D0:3D:3C:FE:E2:4F:6E:79:8B:1E:15:C2:4B:27:67
Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3
Certificate serial: 01965537FC3ABB2951931FC5C23F2548DCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
Manifest number: 1380
Signing time: Sun 20 Apr 2025 22:00:54 +0000
Manifest this update: Sun 20 Apr 2025 22:00:54 +0000
Manifest next update: Mon 21 Apr 2025 22:00:54 +0000
Files and hashes: 1: iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl (hash: n55anFAzujYdLfGiAYaDiRtBwZ7LmELaAJLsxFQ6OPc=)
2: zbnBRUeVPnEEwLI2vvj0r39FPtE.roa (hash: 4AvpkRySedv9+g3/SFfJUIRAayJwpWmaa1FdREtJu9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:fc:3a:bb:29:51:93:1f:c5:c2:3f:25:48:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3
Validity
Not Before: Apr 20 22:00:54 2025 GMT
Not After : Apr 21 22:00:54 2025 GMT
Subject: CN=8d5d393935d03d3cfee24f6e798b1e15c24b2767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:ca:32:d0:92:47:d2:42:dc:90:2e:b9:b1:
86:aa:eb:b6:00:94:d2:b7:11:83:bb:e4:7c:9b:b9:
bf:94:b3:22:18:b4:ee:46:bd:8c:db:18:31:24:4b:
e4:68:dc:b6:0c:63:75:8d:eb:05:10:d3:f4:e0:49:
6c:44:35:5c:ad:90:54:74:83:8a:90:f0:0c:b0:b8:
01:77:af:01:57:14:ec:52:71:ec:dc:6e:03:e1:bb:
f0:90:1b:29:2b:14:d8:b1:81:f4:bc:38:90:cb:d3:
19:58:dc:07:5d:0c:3b:33:fc:c8:79:3c:b2:3b:df:
59:17:cf:fe:cd:4e:12:ea:24:51:1b:8b:60:1f:9d:
39:40:a1:2b:b7:0e:4a:41:bc:b9:04:12:86:cf:56:
7d:38:1c:89:10:f5:54:b6:26:41:1b:e0:83:a7:fe:
f8:37:f9:6a:70:f9:e5:6a:cf:fc:04:b3:c8:78:0c:
ef:d5:21:f1:00:5d:d0:d5:ec:3c:2c:12:3e:4d:9c:
53:a3:87:93:5f:2d:bd:33:0f:eb:4e:80:25:9f:09:
91:13:38:3e:54:e3:fa:b3:d8:a2:4d:39:d9:27:f5:
d6:27:f0:e2:35:55:bd:8b:e7:ee:73:8b:73:1e:ed:
95:15:cf:97:2e:22:b9:dc:75:a5:a4:ff:c9:52:d0:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:39:39:35:D0:3D:3C:FE:E2:4F:6E:79:8B:1E:15:C2:4B:27:67
X509v3 Authority Key Identifier:
keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b7:45:1c:1e:48:df:96:eb:c3:38:7a:14:b5:32:73:20:9b:
e9:dd:2d:7f:43:23:95:b5:cc:32:4c:ba:8d:ee:1d:1d:07:25:
eb:a0:23:78:45:b6:df:56:68:cf:cb:c3:e1:0c:49:22:63:77:
6c:0b:e9:2a:45:37:4a:b5:d2:a1:d7:4c:81:d9:5e:51:b5:6a:
89:96:7b:76:3b:54:cc:3d:57:ac:b2:38:d6:bb:6e:25:26:ab:
2d:99:3a:ce:8a:93:dc:8a:37:ff:3a:31:df:91:4b:93:cf:5a:
f1:e4:0c:00:10:f1:88:36:24:66:50:0e:cf:56:6a:cb:58:a0:
94:12:10:ae:69:9a:9c:98:12:1c:80:f2:31:f6:cd:74:0a:ac:
7e:47:d5:bb:41:c8:83:04:84:6c:6d:38:0a:93:0f:f0:1b:f5:
8e:fb:cb:d6:3c:bd:6e:7b:46:b7:11:f8:cc:fc:64:32:2b:41:
be:fa:3b:7b:ca:e1:d6:70:23:b4:2c:c7:5c:c9:f5:9a:0c:b8:
8e:1f:18:e4:03:33:ec:e0:4e:d4:1f:25:c2:5f:83:93:17:2e:
a8:92:bb:2d:65:37:7e:03:2b:00:f8:bf:8d:7a:70:b1:4e:55:
14:cd:41:18:49:1e:83:ea:c6:86:b9:89:d3:23:66:4e:15:02:
15:3e:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:23 2025 by rpki-client