Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: vfQeeGD0EsH1/SxYQ2udGCsUb7laDllw0fGCQGUvPLk=
Subject key identifier: D5:AD:0F:D6:CE:3D:9B:6A:66:82:C7:1E:A5:B5:9F:C7:1D:8E:78:1C
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 019613580C34F5FC255B66CED64A7022B7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 1258
Signing time: Tue 08 Apr 2025 03:00:59 +0000
Manifest this update: Tue 08 Apr 2025 03:00:59 +0000
Manifest next update: Wed 09 Apr 2025 03:00:59 +0000
Files and hashes: 1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
2: McPECbWiOZZptuHIWFrOcEgtdOI.roa (hash: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=)
3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: A5YFnmN6yIdC8RzBLALyHNK3Z7dOYeN6Dt5Ml7c1cBI=)
4: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (hash: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:0c:34:f5:fc:25:5b:66:ce:d6:4a:70:22:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Apr 8 03:00:59 2025 GMT
Not After : Apr 9 03:00:59 2025 GMT
Subject: CN=d5ad0fd6ce3d9b6a6682c71ea5b59fc71d8e781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:be:8a:f2:db:91:95:d9:be:b7:d0:20:84:
40:a4:97:ae:1a:b0:91:8b:18:0f:a4:29:53:60:86:
db:ad:9f:44:8b:04:ef:54:7c:4b:39:4b:df:0d:47:
f7:89:67:bc:5d:ca:f5:be:fc:37:c2:7d:bf:da:01:
92:b6:a3:ce:99:6d:3c:05:69:0f:68:2e:c6:d3:36:
37:89:d1:58:e6:cf:b9:b6:18:3d:c2:62:4b:7d:54:
69:04:ee:78:d7:9b:75:67:20:c6:2e:fa:4c:53:a0:
fe:7d:7c:87:3c:47:a4:52:37:ce:cb:1e:8e:af:ad:
9a:84:bb:f3:16:0f:04:be:e9:b9:04:a6:1d:5d:46:
04:76:92:af:bd:bf:1d:14:1a:ad:34:ef:0b:26:96:
94:d9:e3:3f:d2:99:6c:d9:0e:48:c9:00:a4:60:bd:
fe:12:46:dd:0c:64:6d:e7:34:ad:ea:1c:68:f6:dc:
89:8f:0b:55:be:05:9f:14:64:67:f2:b0:03:3c:00:
b1:c7:3f:9f:4e:59:8f:70:01:8e:cf:1e:90:8c:59:
4d:f4:1d:bf:68:44:dc:e2:58:d7:8f:b1:36:93:a6:
db:45:f6:5c:a3:91:b4:8e:44:df:9c:11:c1:9f:4e:
e0:b5:bb:c8:f9:cb:0e:e5:f3:19:8f:65:3c:91:7c:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:0F:D6:CE:3D:9B:6A:66:82:C7:1E:A5:B5:9F:C7:1D:8E:78:1C
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:05:86:96:7e:eb:fe:09:48:23:47:e6:a5:e5:ec:d6:41:92:
3e:6e:46:2e:3f:81:cf:e7:fa:db:7b:ed:9f:41:d0:88:e9:11:
52:d9:c9:ff:bd:32:ed:84:5c:fd:77:94:d5:49:d9:7b:02:fe:
7c:39:c0:ae:81:3b:f4:39:6f:e3:d0:5e:19:4e:26:16:01:03:
9b:a9:f0:bb:f9:9e:b9:31:ea:7e:67:f3:50:b3:9f:93:3a:70:
57:81:17:0f:cf:9d:2d:96:45:04:01:e0:ce:9b:09:f3:67:c6:
a3:00:9c:49:f3:eb:64:15:2d:71:0f:92:79:6b:de:5b:d5:50:
2d:f9:5e:b2:7f:78:b1:fb:6e:21:bb:30:9f:66:22:de:f1:5f:
ed:3f:a7:39:7e:fd:5f:ce:64:e4:0d:a7:e0:c9:5b:85:f0:e1:
d1:89:fd:1e:98:0f:7d:87:01:5a:d8:08:d4:25:73:52:5c:80:
74:05:5f:42:d4:b2:87:e8:d5:3d:7e:4d:e1:4a:3e:3b:74:c4:
ac:cd:4e:f1:ef:1c:45:19:9e:dc:1a:d5:32:f2:f7:9b:ae:6c:
24:09:be:74:29:ef:ce:5d:76:29:cf:93:2e:c8:cc:5f:ae:72:
ab:b8:c4:19:ce:e5:88:10:9c:bf:46:2e:1d:80:f0:34:17:5f:
3a:6a:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:23 2025 by rpki-client