Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: kyq4qYBjgGvQ6r0fGpi3cwqAJ7ahZxoBT5VvWQvMZUI=
Subject key identifier: F5:36:BE:9F:7B:8A:F9:6D:DF:87:5D:0E:97:EA:E0:32:2A:10:9D:B2
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01960B9EA8EBA6D970D697133DC6CD75B549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 03F8
Signing time: Sun 06 Apr 2025 15:01:09 +0000
Manifest this update: Sun 06 Apr 2025 15:01:09 +0000
Manifest next update: Mon 07 Apr 2025 15:01:09 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: aBNteDWVu2TIDeOafXXAZQ4A7oUNAqxtVZqKj3IscDg=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
3: dSWnDMzGU7w05-szcewuViNoYXc.roa (hash: Z3YzI+In7TPyeUHO276uy8/ZGrKKO82F7EoRqQw0E6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:9e:a8:eb:a6:d9:70:d6:97:13:3d:c6:cd:75:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Apr 6 15:01:09 2025 GMT
Not After : Apr 7 15:01:09 2025 GMT
Subject: CN=f536be9f7b8af96ddf875d0e97eae0322a109db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:a5:31:1f:8c:e3:d7:a2:63:ea:fc:a1:80:
30:f9:22:28:ae:86:e0:b6:ed:50:91:2c:8a:d1:75:
48:7a:3a:74:6e:0f:10:a6:1a:08:99:cb:81:07:b6:
02:50:24:78:ed:75:cd:cf:00:35:61:aa:69:bd:3f:
b7:8a:38:7d:10:96:87:57:a3:b7:3d:72:9e:7c:92:
d3:3e:b7:4f:6c:d8:5c:61:cd:62:bd:a3:77:e4:17:
be:24:fc:85:66:72:f3:8b:0f:a2:74:44:a6:94:a2:
af:96:f0:c0:11:56:a3:31:aa:04:35:1c:57:1d:28:
15:fc:02:1a:df:8c:61:f3:36:a3:33:b0:ba:bf:e6:
2c:39:82:8c:d9:67:55:fe:27:79:7a:40:b3:fd:7c:
98:f6:72:72:32:cb:1b:aa:bb:7e:92:b6:f6:0c:dc:
41:8a:e9:7a:2d:a0:78:d9:e3:42:32:f4:99:ae:eb:
13:81:9a:91:4e:82:53:8c:5e:b7:2d:60:86:68:0b:
3e:27:cf:72:31:bd:31:3c:e9:e7:31:4c:d5:36:15:
7a:c4:31:d0:31:ac:bf:f9:e0:00:ca:88:46:01:77:
2c:55:cd:a6:b1:bc:08:5e:ed:75:ab:bb:0f:b4:39:
c2:c6:a1:4b:b3:7e:10:3d:ce:58:ee:87:c5:77:0f:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:BE:9F:7B:8A:F9:6D:DF:87:5D:0E:97:EA:E0:32:2A:10:9D:B2
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:84:2d:b1:02:9a:e5:c0:97:1f:08:77:78:b6:cc:af:13:08:
4c:81:ab:44:fa:2b:be:fa:1c:d2:66:8e:bc:a2:61:91:38:76:
28:4a:8b:f6:10:73:c2:05:ec:cb:aa:b9:2a:fb:05:c4:52:36:
5c:53:5f:28:2a:2c:0a:82:1c:22:10:2b:24:b0:b5:50:50:0c:
73:dd:00:f5:9a:71:e9:81:3a:35:62:a2:d6:ea:a1:b7:ad:c1:
c9:f3:f9:95:e9:59:08:d3:c4:b3:da:05:26:55:1c:57:22:3a:
c7:de:30:48:38:90:de:bb:0d:75:5f:0f:a6:a8:83:73:1f:15:
27:6e:a1:9d:02:b1:11:f0:73:b1:a5:4d:0d:b4:2b:04:62:9b:
3e:50:da:28:da:35:81:3b:f1:65:b4:38:d6:80:26:ec:83:a8:
4c:be:e4:01:22:c8:03:49:6d:ed:5e:b7:20:91:be:b9:63:b3:
4d:1a:d5:d3:bd:07:92:12:73:3a:97:03:50:dd:85:71:99:e0:
8a:55:27:50:aa:0e:c1:35:6b:c7:9c:be:d8:5b:7e:60:68:6e:
eb:5c:bf:d4:67:8f:2c:40:d4:ee:23:4b:c0:1c:1d:ed:71:8a:
a5:ce:92:11:60:c3:b6:88:72:dd:33:c7:37:07:a6:27:7d:88:
04:8b:fc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:54:13 2025 by rpki-client