Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: QnLAie5vLIhYsKdp4SgwY9XB1vsCeK5Wdm4lfuhSmmM=
Subject key identifier: 01:56:D0:5F:D5:C8:D5:D2:62:72:18:66:B4:2D:B1:5F:EC:3D:05:A7
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019606AF53B5043219A48C28978C4F2D4F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0588
Signing time: Sat 05 Apr 2025 16:01:15 +0000
Manifest this update: Sat 05 Apr 2025 16:01:15 +0000
Manifest next update: Sun 06 Apr 2025 16:01:15 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: 1noYudWoNgKkjxlrC+zxpqd7W+OwX+BfzrpOTTADbBE=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:af:53:b5:04:32:19:a4:8c:28:97:8c:4f:2d:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Apr 5 16:01:15 2025 GMT
Not After : Apr 6 16:01:15 2025 GMT
Subject: CN=0156d05fd5c8d5d262721866b42db15fec3d05a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:a9:12:a6:1d:66:65:7b:a4:8f:cb:5d:bd:
4e:4b:87:70:5c:2b:11:3e:eb:4a:e5:66:b0:99:12:
c7:b1:85:cf:80:3e:a6:ae:97:1b:f5:4b:ad:17:ee:
ed:e4:bc:b9:32:08:e0:5d:47:d6:71:2c:22:49:1c:
20:5b:83:73:4a:15:90:61:14:5e:b3:62:48:3b:3a:
c8:79:56:2c:21:06:42:b1:27:68:43:d7:bb:b2:41:
38:3d:b3:e5:8f:a4:0e:5f:28:b6:90:fd:fb:6d:45:
df:18:ba:d5:af:8f:32:13:3c:be:9e:57:31:84:47:
1f:8b:0f:3d:c6:64:97:8e:12:bc:29:16:5f:2a:f0:
a2:1d:dd:94:e5:ac:0e:68:c5:d9:17:9f:ac:6e:46:
c2:ab:9e:38:78:05:30:ed:cf:44:30:22:d6:e8:94:
d4:08:94:06:33:62:22:92:72:64:be:da:dc:3a:51:
ed:a9:69:94:3b:0d:0a:50:2d:39:17:d1:f1:59:fa:
75:02:aa:f1:02:29:f7:81:af:99:0f:75:ad:d8:9f:
79:e7:ff:ce:21:bb:aa:98:7d:b0:0c:7b:7b:67:63:
ed:5a:48:46:49:15:1c:3c:dc:6d:da:03:e9:fc:e8:
d8:85:1f:22:94:31:7f:8c:da:89:42:ae:23:02:43:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:D0:5F:D5:C8:D5:D2:62:72:18:66:B4:2D:B1:5F:EC:3D:05:A7
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:05:47:93:fc:f2:aa:7a:51:a6:62:64:e4:03:f9:49:7a:
48:f0:29:44:68:3c:07:b4:05:b4:73:a3:70:4c:ee:43:c9:71:
76:06:cb:dc:81:b3:4d:11:c7:63:d6:bb:45:d3:83:a8:eb:59:
bb:e1:f2:a7:5d:0e:cb:59:af:80:88:fc:48:ef:79:1c:40:2b:
7f:d9:f1:79:30:e1:2e:ee:40:f5:fa:f8:b8:0d:07:8c:48:d5:
de:b5:28:24:0c:d5:e0:9c:e5:d4:82:9e:cc:19:59:14:0d:8d:
1b:ac:75:bb:21:c9:fa:c0:9a:bc:2f:30:25:a0:48:cd:d9:c7:
96:45:f6:b3:0b:b7:f0:90:41:74:5b:de:79:8f:19:18:4b:f2:
0d:60:c6:be:3f:83:10:08:3c:f1:f9:8a:59:45:39:6a:61:5a:
ac:e3:86:fb:50:8f:c3:05:0c:3d:23:00:6e:87:95:ae:63:48:
0d:0d:09:47:80:a6:d7:85:ab:d5:7c:9f:4d:80:a1:b3:0f:18:
5f:d6:13:9a:c4:84:51:0a:7c:3f:a4:02:c2:b9:6d:f1:dd:e9:
cf:8c:e9:82:7f:1b:20:cd:f4:73:5e:b3:40:84:5f:7f:4d:a2:
47:68:0e:d1:b0:db:bd:c4:81:3d:d6:6e:c8:99:69:7e:fb:70:
b6:a7:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:46:49 2025 by rpki-client