Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: LSb0ZMfL/U9n8o2Tn8S4OLYP9AXssz4ctH+dee/ioDk=
Subject key identifier: E9:4B:B0:AE:C5:33:33:3B:7F:E8:FF:0D:EF:80:9F:C0:B5:B5:0F:60
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 01964D7E020448D8B05D6C1B151CAF85B2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 0EE8
Signing time: Sat 19 Apr 2025 10:00:25 +0000
Manifest this update: Sat 19 Apr 2025 10:00:25 +0000
Manifest next update: Sun 20 Apr 2025 10:00:25 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: 3DxIXNYFIJg9V75DChL3jJ/+pAERcH0CuFsu12zmlfk=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:02:04:48:d8:b0:5d:6c:1b:15:1c:af:85:b2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Apr 19 10:00:25 2025 GMT
Not After : Apr 20 10:00:25 2025 GMT
Subject: CN=e94bb0aec533333b7fe8ff0def809fc0b5b50f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:82:3e:54:ff:29:ed:75:a4:d6:77:8a:a0:
d8:07:d8:ef:2e:79:fa:95:64:a8:e0:aa:e2:79:bb:
4f:f6:ca:33:b8:e7:ad:df:d7:9d:cb:cf:e3:6f:a3:
3d:d7:31:4c:71:6c:4b:95:b1:f9:17:51:79:25:b8:
80:78:81:48:d7:9f:25:a0:02:32:4f:d7:ab:3b:f0:
22:e9:a4:fe:b6:be:75:c1:d0:61:5d:76:be:78:48:
2a:e5:db:a6:6d:8d:7c:3b:7a:80:c0:0b:64:91:d8:
98:87:61:82:35:a0:4c:e3:e2:c9:d9:1b:ec:8e:9a:
62:48:83:e2:0e:a0:68:2d:27:8e:d3:94:07:6f:09:
67:78:a3:ee:64:90:9b:3c:25:90:29:c4:3d:15:f3:
21:3b:7d:32:71:ef:0e:b2:b1:41:e8:3b:98:fe:62:
87:cd:0e:ed:75:6c:1c:73:fd:4a:5d:d7:9f:b3:48:
45:ca:aa:af:98:e0:0d:83:c4:c2:2c:a2:eb:ee:33:
c3:1c:4b:25:9f:35:3c:b9:fd:3d:f2:82:40:44:24:
73:c8:3c:4c:30:3f:c4:94:d4:67:57:21:ee:03:37:
5e:6b:7b:f5:50:30:d8:5c:59:ae:7b:33:01:31:56:
d3:2b:11:28:b2:ec:42:ae:24:7e:bd:01:c2:60:23:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:B0:AE:C5:33:33:3B:7F:E8:FF:0D:EF:80:9F:C0:B5:B5:0F:60
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:84:fe:df:26:11:37:4c:8e:d8:a0:0f:e6:96:54:ce:83:ab:
92:b9:5d:5d:f8:4a:a4:0a:0b:b1:be:98:d3:29:bc:8c:28:8a:
f4:9d:98:3c:39:d8:4e:8d:6b:7f:34:38:0b:f3:74:bb:1f:af:
61:52:c5:1b:57:10:f8:47:59:3b:f1:06:a0:fe:9b:1f:bb:9a:
f7:e2:d0:f0:bd:05:00:80:22:a4:90:37:92:85:61:8b:0a:98:
e2:22:49:d2:37:e3:54:1b:12:b7:32:62:b0:d4:3f:fe:09:8e:
5d:6a:3c:10:38:35:dc:7d:86:98:97:3f:63:84:fb:1a:56:f8:
f0:6e:63:0e:2a:7a:6a:f6:76:d9:00:1c:ad:66:67:f9:2f:74:
4d:72:d2:f6:e0:d5:a1:8d:12:72:df:42:30:69:1d:17:8b:5b:
29:dc:61:92:b5:5d:ff:66:5e:39:74:0a:a4:96:0a:c1:bc:45:
2d:e0:28:51:4d:65:f7:44:42:bc:03:32:a3:56:91:2e:f3:a6:
9c:74:65:a7:20:b0:61:8a:01:10:02:7f:eb:75:85:8d:42:c8:
a1:2a:28:e5:c4:d9:f0:fd:a2:fb:46:35:32:08:37:4f:7b:48:
79:1f:94:ef:5a:a3:27:1f:cb:29:2e:22:cb:3e:99:dd:85:77:
a6:f7:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:01 2025 by rpki-client