Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: ND7yAbMNE0LheYDCUfTuGaXqbz41OQZ9mPlt1PXhkH0=
Subject key identifier: B3:97:9D:0F:40:58:7D:2D:1F:9E:D9:50:EC:C9:44:E4:20:5E:5C:B1
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 01958CCE99AA22BE4E03FDD736CEEE3F288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 00:01:44 +0000
Manifest this update: Thu 13 Mar 2025 00:01:44 +0000
Manifest next update: Fri 14 Mar 2025 00:01:44 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: Lq6OS/o0+zbM79hpD/NlU9wLXywz5uZEILnx7jSnd5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:99:aa:22:be:4e:03:fd:d7:36:ce:ee:3f:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Mar 13 00:01:44 2025 GMT
Not After : Mar 14 00:01:44 2025 GMT
Subject: CN=b3979d0f40587d2d1f9ed950ecc944e4205e5cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:c6:17:02:9f:bb:bd:53:cc:c3:fb:27:7e:
22:df:e2:ad:ef:cf:1e:5b:99:0c:83:49:44:0b:2e:
42:ec:5c:28:17:a6:24:4e:8a:69:80:7a:97:9c:f0:
99:b4:44:a9:2c:30:22:55:d6:2c:8c:7d:83:10:ad:
18:f1:2b:cc:87:b5:fe:9e:b3:62:3b:d3:2e:52:dc:
d9:b0:10:fa:66:91:00:e5:f6:d8:01:55:83:03:e0:
65:93:bd:07:37:d1:5a:49:f3:e1:76:a7:bb:15:a3:
40:f6:97:d7:ee:d1:45:77:29:6e:f7:d2:41:c9:46:
8f:ec:97:40:a1:40:32:f1:73:25:8f:86:00:c4:a7:
2a:50:55:0d:3f:b9:b5:04:7f:95:2d:62:5f:59:bb:
92:10:c3:39:f6:ad:52:71:66:9e:93:46:81:7d:1c:
9e:8d:ef:ab:d1:4d:4d:23:bb:75:f5:a2:84:ab:8a:
de:d1:80:69:b0:e9:07:ef:88:81:c4:2f:da:0c:7e:
78:3e:b6:94:20:16:19:a5:9f:b6:f3:fa:06:c4:8a:
51:17:8b:e4:35:5e:0a:0b:77:99:32:f2:0c:b1:a9:
a0:d8:da:75:24:60:7f:2d:29:ea:d2:4c:43:55:63:
5e:87:d5:f2:01:ef:10:bb:53:23:d6:09:cc:2b:ad:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:9D:0F:40:58:7D:2D:1F:9E:D9:50:EC:C9:44:E4:20:5E:5C:B1
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0a:26:cf:41:07:10:2e:80:26:64:24:b7:db:b3:1c:7e:1b:
7c:e5:2b:24:de:42:d5:0d:ee:8f:3b:cd:64:6f:8e:5f:ed:ea:
ba:08:c9:91:b3:39:71:15:2a:b1:35:5b:61:03:af:e3:1a:3e:
17:82:8a:28:73:08:4c:06:75:86:46:7f:7e:aa:e4:35:a6:29:
ad:a3:64:5b:46:85:46:6b:64:1e:dd:7b:0d:f9:b2:5c:ed:d6:
de:75:3e:36:00:44:d9:95:29:15:1b:52:dd:22:1a:71:ad:3b:
94:7f:29:82:a1:9d:4f:7e:ec:a2:8c:f3:47:e7:31:57:80:6d:
96:60:1e:4a:b1:f5:ad:42:a2:86:77:1a:b2:35:67:cb:6f:82:
8d:cd:94:2b:44:1c:8d:c2:5a:20:52:9f:f8:47:7b:61:60:44:
5a:6a:03:55:f3:b2:5b:87:22:58:14:59:4d:a2:3b:95:50:25:
a6:89:72:a1:c2:1a:eb:71:36:b2:71:08:b7:39:62:69:02:42:
31:36:2a:14:bc:67:83:d7:83:6b:5b:1e:94:bb:b8:4c:f3:21:
af:0c:81:5e:b7:ee:4b:25:3c:6e:32:42:2e:af:07:fe:04:10:
82:8c:36:b6:59:ff:bc:33:db:52:b3:fb:fd:92:79:af:89:b4:
95:6d:4e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzpmqIr5OA/3XNs7uPyiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWFmODVmODFkZDNmM2IyNGFiMTRlZDFmNDJjN2NjNDY2
NTAyZjAwHhcNMjUwMzEzMDAwMTQ0WhcNMjUwMzE0MDAwMTQ0WjAzMTEwLwYDVQQD
EyhiMzk3OWQwZjQwNTg3ZDJkMWY5ZWQ5NTBlY2M5NDRlNDIwNWU1Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vjGFwKfu71TzMP7J34i3+Kt788e
W5kMg0lECy5C7FwoF6YkToppgHqXnPCZtESpLDAiVdYsjH2DEK0Y8SvMh7X+nrNi
O9MuUtzZsBD6ZpEA5fbYAVWDA+Blk70HN9FaSfPhdqe7FaNA9pfX7tFFdylu99JB
yUaP7JdAoUAy8XMlj4YAxKcqUFUNP7m1BH+VLWJfWbuSEMM59q1ScWaek0aBfRye
je+r0U1NI7t19aKEq4re0YBpsOkH74iBxC/aDH54PraUIBYZpZ+28/oGxIpRF4vk
NV4KC3eZMvIMsamg2Np1JGB/LSnq0kxDVWNeh9XyAe8Qu1Mj1gnMK629WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOXnQ9AWH0tH57ZUOzJROQgXlyxMB8GA1UdIwQY
MBaAFIga+F+B3T87JKsU7R9Cx8xGZQLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUt
ZjI1NTY1OGJiODgxLzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNDQyYTctNzRlNi00NzZhLTg3NTUtZjI1NTY1OGJiODgx
LzEvaUJyNFg0SGRQenNrcXhUdEgwTEh6RVpsQXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgomz0EH
EC6AJmQkt9uzHH4bfOUrJN5C1Q3ujzvNZG+OX+3qugjJkbM5cRUqsTVbYQOv4xo+
F4KKKHMITAZ1hkZ/fqrkNaYpraNkW0aFRmtkHt17DfmyXO3W3nU+NgBE2ZUpFRtS
3SIaca07lH8pgqGdT37soozzR+cxV4BtlmAeSrH1rUKihncasjVny2+Cjc2UK0Qc
jcJaIFKf+Ed7YWBEWmoDVfOyW4ciWBRZTaI7lVAlpolyocIa63E2snEItzliaQJC
MTYqFLxng9eDa1selLu4TPMhrwyBXrfuSyU8bjJCLq8H/gQQgow2tln/vDPbUrP7
/ZJ5r4m0lW1Olg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:02 2025 by rpki-client