Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: vSsibt1vhLh19s5iPBDDdFxa6YDh8het75eMgzC8d2E=
Subject key identifier: 1B:A0:E9:F2:A7:4C:89:74:68:64:07:F4:A0:42:CF:EF:F5:4E:65:41
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 01963C8B1D128819824FAFC5624D80C5B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 03:01:11 +0000
Manifest this update: Wed 16 Apr 2025 03:01:11 +0000
Manifest next update: Thu 17 Apr 2025 03:01:11 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: 9OCcfvLNoqEISEWSgWJvLlY+WDgyMJWekf6ijEN8pdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:1d:12:88:19:82:4f:af:c5:62:4d:80:c5:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Apr 16 03:01:11 2025 GMT
Not After : Apr 17 03:01:11 2025 GMT
Subject: CN=1ba0e9f2a74c8974686407f4a042cfeff54e6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:b7:7e:40:05:47:dc:9d:af:69:13:21:e9:
9c:b8:9e:09:e1:bd:b8:cd:cc:95:0b:b7:70:b9:36:
61:f0:e4:0f:62:2f:99:89:fb:77:e7:94:46:1d:a1:
d4:5f:c4:d5:7d:85:dc:6e:53:50:5c:96:f7:47:fb:
d9:03:b3:40:b0:ea:4b:56:1c:19:df:90:d8:82:29:
ae:56:0a:00:ee:41:08:c7:7b:53:96:43:7a:d7:af:
ea:9d:c2:bf:e1:b5:59:54:a6:b9:ab:fa:f0:05:4e:
7e:af:3c:04:3d:34:17:86:a4:18:79:7a:c6:9a:c2:
92:fb:a6:a6:6f:0e:d0:a2:ef:85:c1:19:de:b2:0e:
ce:58:36:c1:c9:51:55:8f:98:fd:03:fc:f7:81:e8:
30:79:e8:73:df:e4:89:67:cf:20:8b:32:87:3e:53:
74:96:c9:55:21:33:08:60:c2:45:0a:e5:45:0e:e5:
28:17:54:48:12:3e:9c:26:15:d8:d9:8f:5e:80:2e:
09:89:5d:52:9e:b9:04:c6:34:b7:31:d1:b1:a3:4f:
23:22:cf:12:6d:95:b9:9e:47:b0:69:b6:e3:19:82:
86:92:f8:8f:71:bd:55:7e:ac:8e:f5:66:91:29:c3:
af:88:3a:ec:c2:9e:19:af:1e:c2:eb:0f:4a:23:56:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:E9:F2:A7:4C:89:74:68:64:07:F4:A0:42:CF:EF:F5:4E:65:41
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:30:1e:62:6b:6a:23:49:01:ac:80:c8:24:fb:f5:55:4b:
ea:c2:d0:5b:1e:cd:14:fc:dd:bc:84:4c:7a:25:f4:b9:26:b3:
41:06:f9:94:96:cc:2a:70:6a:3f:d8:09:ff:02:3a:6a:1a:af:
8a:95:00:0d:85:97:96:41:df:7e:df:19:88:4e:46:3b:dd:37:
51:69:10:9e:38:6e:30:d9:b1:e0:6c:98:5e:99:d3:67:4a:d5:
14:5a:53:39:cf:a8:c5:c0:05:11:e2:5e:d5:a1:1e:93:d6:fc:
0c:66:7d:b9:cb:ab:cd:7c:a9:a2:38:07:1c:26:7d:03:b7:ad:
b1:e8:c6:6e:f5:b1:4e:a8:be:1d:59:4f:c0:e0:d8:5d:4c:f9:
94:e7:7f:6f:86:95:fe:94:e4:c5:a3:5a:95:a0:80:e1:1c:f8:
b7:ad:a9:94:74:b7:0e:32:e1:b4:07:7d:21:df:81:7b:aa:b8:
3f:f2:ad:96:4b:53:fc:d9:3a:3e:3e:db:e7:8f:6b:09:a4:71:
42:2d:2d:c9:0b:d3:05:68:ea:80:b3:a2:93:ce:69:85:d6:b5:
57:29:b1:cc:c5:e1:b1:89:5d:ed:c8:29:9c:e7:ea:cb:c7:04:
4a:85:3c:28:e7:12:6f:53:a1:26:27:cf:79:9f:53:42:62:e8:
c4:1f:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:24:51 2025 by rpki-client