Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: MS4GxmIGOI0p6sJtF876AdbsG3Ooyza3nmX4km99kyU=
Subject key identifier: 70:55:B2:7F:EA:8F:42:86:DD:A1:ED:A6:77:25:29:75:CD:CF:3F:68
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 01964A0FE8003C8998C5D67540108907F038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 18:01:18 +0000
Manifest this update: Fri 18 Apr 2025 18:01:18 +0000
Manifest next update: Sat 19 Apr 2025 18:01:18 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: FyEcEzfRdqMzFLzjK/lOtaPN3q+Pacpbuxcwew5GM68=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:e8:00:3c:89:98:c5:d6:75:40:10:89:07:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Apr 18 18:01:18 2025 GMT
Not After : Apr 19 18:01:18 2025 GMT
Subject: CN=7055b27fea8f4286dda1eda677252975cdcf3f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:fe:d6:bc:ae:2c:d4:99:b1:a1:a2:81:ce:
ca:57:c8:05:75:47:a6:ea:9e:a4:34:ad:33:8f:48:
51:54:2f:47:ed:15:c9:54:9c:07:19:3f:f2:33:28:
38:a5:4f:49:e0:5c:fb:1e:1b:39:c5:9e:fb:30:8e:
f3:5c:de:3a:46:fc:92:76:21:ee:15:2e:79:c8:82:
fa:b0:5b:77:e5:87:49:05:71:fb:90:1e:eb:e6:99:
dd:5b:cf:51:c4:c5:32:7f:2a:bb:58:e5:c4:3c:37:
ff:27:85:2b:9f:db:c2:26:c9:be:d9:a3:08:a4:61:
3e:b5:ae:12:4e:d4:34:fc:cc:e9:4f:0b:35:e2:7f:
e7:89:8d:77:2e:64:20:42:d9:da:fd:ca:28:8d:4b:
0c:7c:b9:66:23:9c:b3:90:4e:5e:e0:10:d1:e9:58:
ff:33:05:61:66:aa:e8:fd:b8:01:7a:28:a9:6c:12:
91:a8:d3:f8:9f:03:34:bc:e3:8f:9b:44:fb:ba:df:
f6:bc:ae:15:bf:12:95:4c:83:53:18:4d:50:8f:04:
82:bd:e7:9c:4a:9e:b6:29:07:55:1a:20:de:98:20:
23:56:f9:85:e8:df:37:a5:04:c6:fa:be:83:00:c7:
7b:67:5d:29:87:f5:de:7e:06:09:dd:f6:23:f6:b9:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:B2:7F:EA:8F:42:86:DD:A1:ED:A6:77:25:29:75:CD:CF:3F:68
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8b:41:4e:b5:a2:10:01:49:e7:e2:2a:97:9c:e6:98:c3:eb:
f7:4f:1d:6a:f4:3f:16:34:b3:51:c9:53:db:f3:5a:9c:5a:ce:
e4:9f:af:c0:38:ec:92:30:42:8c:5e:b4:63:f7:d6:4f:ae:09:
6d:db:05:83:94:24:2e:d0:1a:d0:10:e5:77:fa:f1:5c:f5:72:
99:87:d3:77:80:a9:da:d5:02:67:da:51:b1:8e:73:7b:5d:83:
36:2f:f9:d4:c7:3a:ab:64:f0:1d:96:14:31:b1:df:46:33:dd:
81:38:88:3e:f6:54:19:64:08:bd:cf:2a:72:a6:18:4e:23:03:
01:b2:e2:b7:cc:3e:e9:6b:90:96:e3:10:6d:f0:9c:2f:1b:ca:
c0:f3:56:f5:3a:ae:91:b8:37:07:f0:fa:6c:8a:72:92:e0:0d:
b7:21:4d:85:19:e7:e2:0a:b0:4f:95:2e:5c:35:7a:f7:61:60:
63:a5:9e:f8:b8:c3:05:13:70:65:df:d9:ff:85:15:05:65:e1:
65:2b:c3:f1:81:d7:65:08:4f:e0:a6:d3:78:b0:eb:63:93:df:
2a:e0:60:6d:44:56:51:bf:ab:bd:8a:38:e3:85:ac:34:c3:2e:
e1:09:04:ba:aa:34:be:3c:b9:f3:e6:ea:d8:c3:eb:17:34:ab:
ce:b6:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:04:35 2025 by rpki-client