Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: bQ1XVIZZmOa5SIWxikEDGJKBiY8lHIK/fRKSJ8Qdssw=
Subject key identifier: 35:0C:44:80:2B:5D:22:CD:A0:4F:1E:A6:AB:59:A4:15:BD:30:5A:66
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0196451F98ECDF3634F2FA1849574EBB67B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 121A
Signing time: Thu 17 Apr 2025 19:00:20 +0000
Manifest this update: Thu 17 Apr 2025 19:00:20 +0000
Manifest next update: Fri 18 Apr 2025 19:00:20 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: m2nJo5Ph0KrIlCBaP8rgUGo5Q2O7ApenGe55uEFgx8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:98:ec:df:36:34:f2:fa:18:49:57:4e:bb:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Apr 17 19:00:20 2025 GMT
Not After : Apr 18 19:00:20 2025 GMT
Subject: CN=350c44802b5d22cda04f1ea6ab59a415bd305a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:b3:27:af:ed:7c:e1:46:b0:82:b3:15:0a:
56:ca:76:10:63:e9:27:4d:11:01:8f:2a:a4:4d:00:
6d:5d:c4:cc:09:f1:5a:9e:aa:b0:79:3c:0c:b2:76:
bc:94:a7:25:ae:e0:1b:f5:72:5d:cd:ec:43:cb:c2:
6b:af:a2:0a:67:bb:eb:51:c8:54:04:db:2d:e9:52:
d8:ce:67:1f:2a:92:62:e4:2e:e3:75:2e:cc:12:56:
39:27:08:a6:02:9c:82:00:cc:a9:e3:81:ff:e3:58:
e0:2a:d8:47:85:62:c7:64:0d:5f:84:a8:f7:38:3a:
d7:62:86:13:79:a8:45:04:c8:74:32:ff:af:7a:c2:
82:0e:5c:8b:40:d6:17:78:c9:dc:97:f7:6c:b1:d4:
0a:cf:27:24:55:c2:50:37:23:ee:ce:ac:ad:a3:87:
50:76:ff:c9:71:e1:60:7a:eb:dc:7f:60:b3:85:39:
32:d0:c3:54:3e:d4:12:4c:25:ba:2f:bf:26:b6:2c:
c4:23:1b:1d:54:9b:c4:61:22:37:4c:be:a6:c8:0e:
5d:70:25:9e:28:73:05:23:42:ba:e7:6c:dc:cb:f6:
e8:cf:1e:f2:eb:53:97:0d:75:3f:f0:25:7d:32:8f:
17:6c:33:59:9f:be:ed:23:e9:ee:0d:b7:ea:90:e4:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:44:80:2B:5D:22:CD:A0:4F:1E:A6:AB:59:A4:15:BD:30:5A:66
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:a4:68:f7:1b:67:e9:42:64:44:9e:9e:0b:66:9c:f2:bf:
f3:3a:07:a2:47:0d:3f:4f:99:b3:13:5e:b8:d1:aa:bc:58:d2:
8e:0d:98:b4:1c:b3:2d:ff:c8:c6:7d:4f:b8:95:7d:45:0b:ec:
13:a4:61:b9:e2:98:62:1f:ba:da:8d:a8:cb:bd:99:64:74:01:
7a:57:86:8b:46:09:d2:f7:d6:a3:80:90:0c:40:cb:50:51:4c:
a1:2a:4d:71:81:61:1b:5a:75:27:51:9e:1a:ff:51:63:be:2d:
a1:9a:d0:f6:65:b3:a7:e0:e2:a8:16:6f:4e:82:fb:2b:4c:80:
55:d5:d8:32:fa:d7:75:fc:97:ba:4e:65:f5:0f:17:87:f3:95:
4d:a6:2c:c8:10:3e:4c:2e:e5:e6:df:e7:f0:2d:09:9c:f5:8e:
e0:84:0c:d1:29:6c:57:b1:3b:ca:08:fc:44:3a:ec:d7:c9:00:
f8:e3:72:87:ce:4b:83:4a:89:86:22:ed:1d:f2:75:fa:d1:1c:
01:cd:88:2c:27:91:4a:94:72:06:ff:5f:b8:13:33:c9:bb:17:
e8:3e:9c:b9:85:43:76:87:55:92:df:d5:54:7e:c8:51:df:92:
6d:db:f3:dc:89:5b:89:2e:42:ce:be:86:17:13:d8:da:a0:0a:
67:1f:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:18:53 2025 by rpki-client