Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: ECNLxcG2Ev2qdTFWG04qDyIzRAFyMk3OcKOBpGTCM5I=
Subject key identifier: F8:12:F0:00:D1:F8:60:44:85:3E:E1:4C:E5:E3:62:2D:0D:51:BF:65
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 0196181048460A0AA84D5A73D4E930AD9AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 121B
Signing time: Wed 09 Apr 2025 01:00:42 +0000
Manifest this update: Wed 09 Apr 2025 01:00:42 +0000
Manifest next update: Thu 10 Apr 2025 01:00:42 +0000
Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=)
2: 6n6eBKfvBliO2E4gkLt3eFYs114.roa (hash: RH+pf4eZP9zTs6UNzlcLIEdcDd3ZwVvqZYyWYbfqbRQ=)
3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=)
4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=)
5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: z63e+Dejr4VyluQV4nJ4zR8fI5IJ9uAAlBYfsJ/BRNI=)
6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=)
7: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=)
8: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=)
9: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:10:48:46:0a:0a:a8:4d:5a:73:d4:e9:30:ad:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 9 01:00:42 2025 GMT
Not After : Apr 10 01:00:42 2025 GMT
Subject: CN=f812f000d1f86044853ee14ce5e3622d0d51bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:76:f3:5b:5f:dc:6d:9f:2c:3b:08:b5:c3:
da:e0:01:23:a1:51:a5:2e:51:2a:e8:00:0c:d2:27:
e0:f5:15:53:cb:3b:73:fa:51:00:24:ea:c2:ba:a8:
75:19:8f:37:f8:7e:2a:82:c0:94:af:05:66:ee:dc:
c6:46:8a:80:ce:4d:00:e3:01:81:36:f0:4a:be:87:
07:bb:9e:f1:7c:90:09:88:ec:0c:15:c7:3f:f7:70:
66:01:05:36:d3:a2:38:29:08:ff:32:38:53:b9:36:
f1:49:2f:ff:52:ca:ba:13:ea:4c:11:02:2d:94:34:
9b:6c:cb:30:8d:27:3e:a6:d7:2a:13:8d:0b:35:a3:
ef:96:fe:04:91:68:92:ac:e3:5f:ec:d6:4a:d4:d3:
62:bf:14:54:9c:b6:18:1d:53:b4:94:6a:f7:e6:38:
86:62:2e:1f:61:57:15:a6:82:cb:d5:04:ff:b5:7c:
93:61:83:62:c4:26:d3:93:18:6e:2e:58:94:32:df:
e3:4a:9d:68:af:41:c5:ef:34:5c:d5:41:86:58:9c:
02:a9:bd:83:e9:d5:d9:9c:32:58:fc:e6:05:87:8d:
55:b7:33:e0:ef:60:fa:a2:b7:d8:af:78:35:f1:30:
07:40:31:9a:9d:f7:92:25:de:f4:9d:7d:0a:7e:61:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:F0:00:D1:F8:60:44:85:3E:E1:4C:E5:E3:62:2D:0D:51:BF:65
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:b5:4f:a2:a0:6b:25:2b:f9:98:79:84:57:58:f6:5b:44:
6a:13:d6:d2:fb:59:5e:04:f0:3b:fe:13:d6:74:19:dd:c4:cc:
a7:5c:bf:3e:c2:3f:f2:56:92:81:0c:52:ba:70:cc:8b:12:a2:
53:76:bb:5f:ac:8b:b1:c0:6c:25:88:61:85:2e:9e:9b:f1:63:
5b:25:fb:09:10:e0:5d:a5:27:c6:92:c1:84:80:83:e5:c6:91:
fc:04:ec:f0:41:8c:a6:6a:f5:34:ca:12:4c:d5:9c:d7:35:64:
13:bf:66:58:57:07:eb:e0:34:20:ca:2d:66:7d:e2:d4:73:3f:
eb:43:9f:ac:3d:06:e3:57:66:de:08:e1:a5:76:c2:70:23:7c:
70:d3:fa:66:16:e9:ab:0c:af:e8:55:00:08:88:cb:09:53:3d:
fe:da:f7:1a:14:27:92:fd:2b:dc:0a:0b:dd:1e:e8:ec:c2:d2:
af:6c:32:40:8f:68:af:49:e1:7a:3a:cb:dc:3d:93:d7:94:5f:
37:6e:d6:6f:09:34:02:bc:42:24:7c:40:3a:58:1a:e1:af:88:
6b:fa:34:cd:53:cb:f4:2a:56:b6:b0:79:1b:cc:78:ba:52:85:
2e:60:ba:f2:dc:72:a4:c0:e7:22:e2:ed:fa:2f:52:54:3e:58:
93:54:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:47 2025 by rpki-client