Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: Bai6ovD8YhIrkULl3n2CRZK6stD4TM4ID576DswS+28=
Subject key identifier: EA:28:FE:3D:AB:30:C9:C6:5A:2D:92:9E:6A:51:E5:C5:97:AE:4E:B2
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 01964AEB701F8D27BB4C2FD8FDDA1D106996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 22:01:05 +0000
Manifest this update: Fri 18 Apr 2025 22:01:05 +0000
Manifest next update: Sat 19 Apr 2025 22:01:05 +0000
Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: 2KzcK0FDiyCEEdu+3z6+FcG51OVESEEUAi1ODZ0pH7c=)
3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:70:1f:8d:27:bb:4c:2f:d8:fd:da:1d:10:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Apr 18 22:01:05 2025 GMT
Not After : Apr 19 22:01:05 2025 GMT
Subject: CN=ea28fe3dab30c9c65a2d929e6a51e5c597ae4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:25:6a:d3:84:84:5f:46:c9:6a:31:2e:76:
da:67:bb:32:c1:4d:6d:f6:a6:2d:4f:3f:62:33:f3:
7a:9c:95:65:74:3b:d7:4e:b1:9f:cb:c3:53:91:97:
4b:b9:dc:2e:92:b4:f4:9a:b6:45:f3:a0:ec:75:46:
7e:19:1b:80:40:28:64:42:fd:f6:f0:ca:79:a6:9d:
05:d7:9c:12:00:23:83:bb:76:25:0d:74:58:72:bc:
6b:d9:0e:e2:cd:34:f6:92:5e:a8:79:82:ce:e0:ec:
f5:ed:01:34:89:35:c6:26:7c:90:17:1c:c3:19:0c:
0f:69:7c:d4:6e:9e:94:04:da:6e:ac:c8:3f:7c:53:
40:34:2b:74:45:d6:d2:2f:dc:2f:65:c5:9e:31:94:
5e:b0:af:6b:32:ac:ae:98:60:b5:c0:37:10:96:0e:
04:bd:9e:c4:85:00:3c:d3:8b:4b:67:4c:79:38:6d:
ed:f6:f4:6b:aa:12:0d:a8:07:5b:c7:2b:c8:12:01:
ee:f9:50:28:7f:5d:4a:98:ef:27:f6:20:d0:1a:f3:
6d:b1:34:99:c3:9d:99:9c:87:56:15:32:5c:6b:ef:
d6:72:3f:8c:22:d8:52:8e:4e:43:e9:1d:00:2e:08:
aa:ed:28:f1:ea:d4:3f:f2:62:d4:7d:1e:68:05:17:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:FE:3D:AB:30:C9:C6:5A:2D:92:9E:6A:51:E5:C5:97:AE:4E:B2
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:ad:20:da:11:5a:56:c5:00:38:dd:e7:57:d8:c4:4f:e9:
5d:19:14:5c:5e:52:9d:13:46:1b:53:10:46:6f:8a:68:cf:99:
ce:e0:c3:3c:40:c1:c6:e7:4b:70:b0:20:ee:20:bd:f9:81:6d:
4e:c3:2e:74:3a:66:d2:16:46:dc:a3:aa:7d:09:71:fd:80:17:
14:e0:d5:a6:39:6a:29:67:96:ee:e4:85:2c:d1:7e:8a:41:b6:
b1:56:1e:3d:1c:95:b7:d6:dd:9a:be:fb:24:b5:c7:36:5d:80:
71:34:70:16:1c:5c:a5:ca:6a:02:e5:8b:b1:76:e8:c7:38:e3:
d8:e6:90:af:47:f5:78:f1:87:12:5e:d9:71:10:f6:4a:97:68:
eb:7d:74:61:23:27:f3:69:a2:5a:41:71:36:aa:cc:dd:35:75:
90:71:d7:7e:18:bd:37:f6:ff:5d:28:fa:3b:19:00:ae:30:ce:
c0:a0:6d:96:23:38:1a:d6:b1:e0:df:c6:d0:d2:39:30:0f:60:
ac:72:40:2a:79:6f:92:73:06:05:bb:70:b1:d5:30:08:12:78:
e1:f2:cf:58:d8:a1:87:5c:1d:17:a7:03:9f:4a:3f:31:6a:ef:
5a:1a:f2:23:3d:27:bc:4c:88:3b:d2:bc:e1:d8:7b:ee:26:12:
67:9e:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:49 2025 by rpki-client