Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: Ua3wmn+yWacXk9T7weRNG0cJtRh/yd6kJdWR1Yv2nX0=
Subject key identifier: 3D:96:78:88:EA:15:67:A1:93:7A:C7:9F:0E:A4:75:12:5D:39:B7:29
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019654928F46F8609645E8329FD74A75EB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0E69
Signing time: Sun 20 Apr 2025 19:00:13 +0000
Manifest this update: Sun 20 Apr 2025 19:00:13 +0000
Manifest next update: Mon 21 Apr 2025 19:00:13 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: hmDkdv0jGSoKi2zvX08ChYJEYt9a+mrXOOq79r8i1Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:8f:46:f8:60:96:45:e8:32:9f:d7:4a:75:eb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Apr 20 19:00:13 2025 GMT
Not After : Apr 21 19:00:13 2025 GMT
Subject: CN=3d967888ea1567a1937ac79f0ea475125d39b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:d8:3c:63:c9:a3:1b:ba:a9:bd:8d:8b:ef:
81:62:5f:7b:95:84:f3:01:6c:d4:bc:82:7a:5c:2e:
0a:8b:c5:e2:ab:55:d2:04:73:d3:14:af:cd:4a:fe:
9a:be:c6:96:08:19:c3:ca:41:59:d2:53:81:79:41:
11:c0:ba:89:35:41:70:7c:b3:e3:41:34:25:4a:73:
b4:02:a2:68:9f:ff:57:ec:08:5c:cd:65:18:ea:3d:
a6:52:ce:3d:39:8b:fb:91:2c:3c:a2:79:b7:f9:52:
07:a5:d3:63:68:f8:2d:7b:e4:63:42:eb:f9:92:e0:
d6:8d:bd:95:d9:45:61:2c:0e:df:69:e8:5b:b2:c2:
87:8e:b9:66:45:bf:62:be:89:c1:59:e4:8b:e8:29:
a7:7b:ce:49:f6:25:01:0d:36:58:78:69:58:b7:3f:
f7:6e:9d:5d:7c:d9:22:c7:40:de:eb:ff:88:9e:14:
fd:69:c6:fd:c5:21:21:98:5c:42:e3:f9:4c:4c:4a:
f2:9c:a1:cf:ac:e9:b0:ce:0e:66:ed:e7:c3:b4:5a:
13:4b:76:7a:2c:b6:b7:79:15:bc:a1:36:31:89:f4:
5a:97:d5:ad:cf:9e:a8:db:e6:e0:fa:05:03:b7:66:
a0:aa:70:53:4b:6f:d0:fb:39:7e:47:b3:3d:d2:ec:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:78:88:EA:15:67:A1:93:7A:C7:9F:0E:A4:75:12:5D:39:B7:29
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:4b:c7:e9:de:83:62:b3:71:b1:41:de:ed:07:3c:fa:2a:
30:e7:ce:d2:f7:b8:12:f3:06:04:04:d7:5c:01:99:9d:ab:7f:
94:17:ee:fa:b1:2e:35:de:24:e0:b7:5b:99:d7:4b:f1:1f:6e:
4d:b5:b3:3b:59:a2:7b:aa:87:0c:a9:69:42:ed:21:6a:80:2f:
4b:96:0d:7d:38:e5:90:20:e0:f8:c9:24:d8:8a:d9:c4:ec:07:
f6:a2:55:f8:4e:6d:ff:48:3d:25:99:c2:99:54:f7:73:5e:1f:
51:a5:4a:42:ce:6d:c9:46:0c:9f:e0:9d:73:2f:87:54:20:31:
3a:de:3d:fd:34:55:06:3e:ba:2b:cc:0b:4e:57:34:cc:0c:8d:
ea:7d:3f:7b:00:20:ae:86:97:f8:f2:dd:16:9d:d8:cf:ac:20:
30:5f:8f:1d:00:be:ea:15:01:c1:55:5b:69:00:21:d9:8e:36:
c0:82:ee:cf:fb:11:76:60:af:35:70:8b:f0:3b:6d:78:84:93:
d3:d9:56:9f:9b:fe:a3:3a:e1:c6:be:68:e5:bc:98:fb:05:a7:
09:fa:f5:dd:be:97:c7:26:41:e5:57:e2:95:27:91:24:e4:4f:
d9:27:b2:02:cd:1d:df:20:81:5a:0b:15:6e:07:3e:28:da:e1:
93:c4:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:49:31 2025 by rpki-client