Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: aKGCKw4aGT/D6xkQk18vvqRQEVdiuVgw6DqybX3u+JY=
Subject key identifier: D5:B6:C7:18:74:6D:FC:0C:69:73:13:36:6D:75:91:22:7E:52:91:93
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 0196120EA176D847DE854ED1EFEB942B1AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 21:01:10 +0000
Manifest this update: Mon 07 Apr 2025 21:01:10 +0000
Manifest next update: Tue 08 Apr 2025 21:01:10 +0000
Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=)
2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: EJzqVbEBM/SaG3TSOxral35FQMtPpByQ/7OPRlZHnP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:a1:76:d8:47:de:85:4e:d1:ef:eb:94:2b:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Apr 7 21:01:10 2025 GMT
Not After : Apr 8 21:01:10 2025 GMT
Subject: CN=d5b6c718746dfc0c697313366d7591227e529193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:ea:18:a1:a1:13:6e:6f:f9:29:8e:a1:66:
f7:25:a4:3b:d3:dc:d3:0e:4f:29:22:97:63:39:4f:
87:c6:7d:07:ba:0f:67:ab:b8:64:df:70:44:52:6f:
b1:a0:b9:09:d6:c5:b2:0d:15:75:9d:b1:84:ef:fe:
c3:88:0a:62:91:37:26:eb:ea:d0:a9:ab:50:d9:95:
de:97:8e:44:d7:ed:ec:96:d7:a0:db:57:c1:75:f1:
6f:5f:ff:5a:cb:d5:a7:0a:92:56:04:e7:75:be:c1:
1c:ea:e1:09:9a:c9:1c:38:72:17:12:7d:79:8c:01:
22:56:ac:3d:d7:29:7c:f6:2b:48:b7:ac:89:70:11:
29:08:86:10:14:34:9f:40:d7:03:f0:cf:76:5e:fe:
12:e3:62:eb:a8:a9:30:fe:f5:a2:7a:c7:7c:a6:eb:
60:ec:e0:3a:d9:ef:89:65:be:99:3a:7e:c8:e4:e8:
aa:cd:e9:71:d6:40:37:c1:d0:a6:cb:6c:d2:a8:22:
d5:4c:f0:91:6d:09:da:d8:15:bc:27:78:86:d7:d6:
cf:77:9e:da:19:2c:8f:6d:ed:e4:8a:84:da:b0:1b:
27:0e:a1:4f:aa:1b:75:a4:7c:e6:2c:e4:f9:78:5b:
2d:04:e8:ee:e1:12:3d:9a:bd:ae:fe:2e:15:f5:4b:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:C7:18:74:6D:FC:0C:69:73:13:36:6D:75:91:22:7E:52:91:93
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:68:0f:6b:93:94:15:d7:3d:22:3a:bc:be:34:1d:e6:4c:
1b:85:f3:5a:9e:a7:c7:90:2e:d0:dd:78:4c:12:6f:04:7a:ec:
f5:55:79:7e:c4:be:d3:96:0d:d7:ab:13:9c:1e:d2:07:d7:0d:
82:92:0c:97:ca:0f:55:8d:e2:0b:a5:d8:82:2d:56:1a:26:35:
3a:0b:5e:41:fe:1a:31:90:a8:46:d2:ec:5f:eb:ff:c9:5f:81:
47:4c:a7:06:58:38:12:bf:58:b8:e5:88:a8:1e:68:c6:38:14:
2e:30:b9:d0:da:37:7d:d3:8f:7f:4e:53:d7:c3:ee:41:fd:78:
05:ed:27:cd:25:cd:9f:c2:f5:be:67:91:4c:b3:16:18:9c:dd:
16:22:7a:28:6d:6f:d5:72:a7:52:4a:f5:93:2c:b6:e8:6d:c7:
a1:e5:ee:08:d7:00:49:13:be:a2:95:98:44:9f:10:d9:9a:50:
d5:f1:5e:6b:ae:2b:79:34:19:7b:60:34:85:33:1d:30:04:84:
1a:7d:c4:bd:d3:7e:9f:28:a3:6b:4e:8a:fb:29:33:4f:ce:88:
4f:de:38:ce:e7:4e:92:a8:0a:39:c2:72:02:df:64:f2:6b:a2:
e5:da:d8:ec:4b:30:9f:3c:21:56:ec:e5:e6:99:8b:a8:c5:5e:
e1:2b:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:52:54 2025 by rpki-client