Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: Sv672jyc4qTdS6omQy0m/uYvQ+89UmIByLvL/fdX3Qw=
Subject key identifier: ED:49:90:D9:21:C1:0E:78:A5:09:99:7C:9A:A9:60:D4:99:45:D0:C7
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019641E86A87E4E585BB71BC1EBC504A6E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0616
Signing time: Thu 17 Apr 2025 04:01:12 +0000
Manifest this update: Thu 17 Apr 2025 04:01:12 +0000
Manifest next update: Fri 18 Apr 2025 04:01:12 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: 6YsX303yNYq/TpPs+iR9YtDOr59U64KbZZMp5e+3TYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:6a:87:e4:e5:85:bb:71:bc:1e:bc:50:4a:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Apr 17 04:01:12 2025 GMT
Not After : Apr 18 04:01:12 2025 GMT
Subject: CN=ed4990d921c10e78a509997c9aa960d49945d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:34:71:50:d6:f4:ba:cb:91:02:80:7c:2d:
61:21:64:1e:98:d9:54:ec:99:2c:88:da:6b:c6:31:
fb:d1:52:a0:96:ed:2e:6c:3c:49:26:ff:9f:ce:01:
fa:af:5d:5f:c0:a9:28:6e:72:52:84:f7:af:30:db:
fd:b2:cb:67:52:d8:c1:da:31:dd:05:be:6e:72:87:
b0:16:ca:dd:b1:ae:21:5e:58:03:81:c0:a9:53:1b:
1d:0f:5f:94:e4:7d:b1:36:7f:e1:9c:54:ff:ea:d5:
7a:1c:24:56:9f:3d:fa:f0:cf:bf:48:dd:7e:b1:69:
c8:6e:4f:e8:4e:81:e4:8e:08:eb:2b:c3:88:d6:39:
8b:6e:35:a6:be:b7:49:ee:e9:3f:05:c3:ca:dd:47:
1a:db:99:83:dc:a4:05:38:96:80:19:55:c8:8a:ec:
9c:9a:32:83:77:7d:71:35:cd:cb:4d:37:be:73:2b:
ef:4c:8c:11:17:c3:a6:83:05:0b:b6:83:c1:f8:ad:
75:7e:35:e9:72:17:16:d5:99:0b:d4:e3:de:1b:13:
24:39:38:36:2b:17:bf:eb:2d:71:ef:ba:16:93:6a:
c2:fe:bc:93:47:7a:35:6f:b0:b8:ee:af:d5:13:72:
f1:dd:8a:2b:16:fa:38:02:d1:6b:a4:02:04:6d:e9:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:90:D9:21:C1:0E:78:A5:09:99:7C:9A:A9:60:D4:99:45:D0:C7
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:a4:b9:20:13:86:68:c1:15:70:c7:55:84:6e:87:7b:fe:
39:36:64:47:97:d1:2f:04:da:b5:32:34:57:66:d9:71:e2:1f:
5c:0e:a7:19:05:c2:ac:b5:08:6c:28:0c:d2:0d:d1:34:fb:97:
70:96:af:21:95:cd:cd:b3:c9:31:03:53:54:2e:ef:14:d0:8e:
73:27:4c:6a:10:53:50:59:92:11:f6:bb:57:fd:ed:36:88:f5:
c6:35:f4:e0:b0:92:52:91:68:c8:f3:49:02:71:27:9b:00:bf:
2f:1a:44:d7:0f:c2:9c:b7:9e:3f:fd:54:27:1e:0e:eb:24:bc:
d3:2b:bf:eb:cb:c5:ed:de:03:f9:44:62:c7:f1:90:fd:cd:31:
eb:be:59:74:c3:46:f4:c4:ff:22:f7:b6:cc:e9:dc:e1:a2:7a:
c1:5f:43:a5:7d:64:f1:dc:9a:44:2a:bd:59:bb:04:5a:e5:f9:
63:2a:ea:19:52:df:8a:1a:04:20:3e:f0:25:d8:3b:98:10:6a:
ab:02:8d:49:d4:8d:c3:2a:5b:a7:49:94:fb:90:0d:54:41:01:
28:df:04:07:7b:e0:55:37:48:6e:f6:cd:30:c3:2f:82:16:9c:
2b:6a:f0:77:76:85:fd:9b:af:1b:56:37:d4:ac:7d:8b:95:9a:
9f:98:7e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:22:57 2025 by rpki-client