Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: 2Q3P1V9KC+IdXE2CxW3ien5El9P2tT+4pL6D1vJtzE4=
Subject key identifier: 97:E7:51:E7:03:03:C4:FE:9D:3A:E2:E0:44:D7:9C:6D:99:E0:C5:7D
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01964A0FBF14C31B1C7016618B51AF78E39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 18:01:07 +0000
Manifest this update: Fri 18 Apr 2025 18:01:07 +0000
Manifest next update: Sat 19 Apr 2025 18:01:07 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: c7iw2M67gVWakuff4qdWI8NWdMx2r92RFBgwRzUAkzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:bf:14:c3:1b:1c:70:16:61:8b:51:af:78:e3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Apr 18 18:01:07 2025 GMT
Not After : Apr 19 18:01:07 2025 GMT
Subject: CN=97e751e70303c4fe9d3ae2e044d79c6d99e0c57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:3e:28:2f:13:af:ce:2c:4c:b6:f1:79:3c:
8b:38:66:5c:cc:d2:b8:bf:57:b7:cd:cd:eb:31:09:
97:de:47:cc:65:ca:24:fe:15:b3:74:ee:d7:a8:6a:
ae:8c:70:5c:7b:96:10:17:70:4f:27:11:e5:16:46:
6c:05:59:f4:4a:24:81:dc:15:67:7a:2d:93:24:f9:
3c:1a:c0:c7:6f:19:f8:39:01:1b:a6:53:74:61:02:
27:d6:85:dd:06:0e:94:ac:a9:bf:fb:9f:b5:ca:3a:
d0:f6:19:8e:e5:d6:c9:ac:02:29:da:35:90:48:f2:
a5:2f:2e:ea:b7:f6:e6:dc:ac:6c:5b:e3:7b:af:0b:
b3:f8:77:f7:17:ef:99:45:84:48:3c:a0:9a:2b:99:
41:c3:97:af:ec:e2:d4:32:26:be:9d:39:13:d8:95:
5f:c8:a0:6d:62:c5:93:b5:3a:60:fe:9b:4f:66:36:
f9:0a:6b:49:13:77:db:7b:2d:ab:d1:4e:84:82:8a:
cd:bb:20:1f:28:04:29:65:20:ba:54:43:29:78:55:
ad:6a:b0:08:52:ab:c6:03:a1:db:79:5f:db:34:f0:
75:2f:7a:ca:a8:86:1d:44:af:8e:7e:46:78:97:c5:
68:07:d7:ca:9f:ec:97:63:a2:e2:b9:48:4d:06:a0:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:51:E7:03:03:C4:FE:9D:3A:E2:E0:44:D7:9C:6D:99:E0:C5:7D
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:e9:c7:17:e0:6e:af:4f:13:e1:12:1f:5f:18:24:b5:44:
5b:08:d5:3f:8e:64:99:94:12:af:37:7a:f9:9e:c3:f2:6d:cd:
ce:ab:cb:19:6a:01:64:58:77:6a:03:cc:78:d1:93:51:7e:a0:
b0:e7:47:a6:c1:75:5a:b5:88:31:99:0a:bb:63:18:1d:f3:65:
76:c3:d8:33:0c:a0:22:76:a2:a7:7c:f7:00:5c:df:ae:74:ba:
68:f4:80:5e:0d:c6:64:53:3d:d6:ff:2c:2d:b2:04:0c:5e:66:
02:1d:de:87:05:a3:36:a5:b0:de:52:ae:aa:42:80:b4:59:71:
81:e7:fd:b0:d8:56:67:07:03:27:e3:82:d8:d4:5c:15:a5:56:
01:da:1e:a7:e9:5f:4d:2a:55:d0:ab:28:95:f1:f8:1e:8c:8d:
60:17:8b:28:eb:28:3c:e7:98:78:84:32:aa:0f:ab:f9:65:a6:
61:da:0a:06:dc:8b:87:7e:0a:db:0d:90:34:7c:e8:e3:d9:77:
48:d9:0e:26:42:2c:ba:37:4c:a6:6e:5d:f2:43:45:08:be:9d:
1c:42:22:3c:23:57:45:4e:ba:c9:07:e9:47:db:4f:7f:80:cf:
cf:c0:8b:b7:cf:c7:13:80:50:57:c4:d1:bc:ae:db:96:00:36:
3e:67:6f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:16 2025 by rpki-client