Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: /LLxVLaHQ9oIDP7Rv+51VuzKFBi7uL7SUw0BcU/qr7w=
Subject key identifier: 5F:B1:19:A5:7A:03:2F:8D:FB:C2:5A:5E:D6:8F:C5:C9:D7:CC:1D:5E
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019590AB7766366C04FDF863E3EBD3484FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 11D8
Signing time: Thu 13 Mar 2025 18:01:51 +0000
Manifest this update: Thu 13 Mar 2025 18:01:51 +0000
Manifest next update: Fri 14 Mar 2025 18:01:51 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: xADc7MxNW7tBb1rCpgrR04JUr0ifiBH5luSG1rQMbXE=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:77:66:36:6c:04:fd:f8:63:e3:eb:d3:48:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Mar 13 18:01:51 2025 GMT
Not After : Mar 14 18:01:51 2025 GMT
Subject: CN=5fb119a57a032f8dfbc25a5ed68fc5c9d7cc1d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:23:b6:a0:d9:5a:9d:fb:e6:3f:8c:89:18:
4f:94:0e:e1:06:56:7a:38:15:c3:43:d9:9c:19:ff:
a8:e8:06:b0:a0:4b:95:fa:f2:32:56:bd:26:35:e0:
68:4a:6e:99:06:7c:62:58:e4:70:24:65:00:9d:cf:
e4:bb:c7:31:70:f5:0c:c9:bb:8b:29:fa:f2:53:01:
c2:63:cc:69:c5:92:e7:93:45:b4:78:2a:1e:97:b3:
44:5b:2f:1a:d0:54:b2:22:94:98:05:55:84:89:19:
8e:db:9e:8f:e3:45:7e:0a:97:e6:27:29:a8:28:3f:
ca:81:c0:89:4b:94:fc:40:a9:9e:81:dc:41:9a:fb:
d9:90:fb:94:e1:13:48:d6:73:89:a5:8c:01:af:f2:
63:52:b3:c5:2c:e6:c8:93:a3:3a:08:a1:9e:ac:2f:
ca:a8:e8:78:05:38:d5:5c:ce:cf:14:d5:e0:eb:d1:
5e:be:03:e7:d6:62:fa:81:56:a9:14:ee:71:7b:d2:
33:a5:02:62:88:c1:60:02:e7:08:1a:24:12:31:7c:
c3:dc:cb:4a:d6:c2:f1:98:36:24:8c:35:86:6f:4e:
63:7a:d1:37:70:02:6b:34:69:89:1f:c7:5b:e6:4e:
58:6e:41:73:78:52:08:0f:c1:3b:93:85:10:bb:33:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:19:A5:7A:03:2F:8D:FB:C2:5A:5E:D6:8F:C5:C9:D7:CC:1D:5E
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:13:63:82:2d:ed:b8:5e:87:1d:5a:60:bb:a0:21:c6:1a:38:
43:55:2b:15:f6:19:83:87:d7:89:e9:78:9b:70:e3:28:25:20:
70:67:03:a3:fa:e2:0c:d1:52:0d:5b:e7:11:18:9c:04:c0:24:
1c:19:dc:ef:e0:28:96:9c:97:87:48:1c:a4:a7:78:9a:66:94:
33:79:3e:75:e4:fc:2b:98:9e:cb:82:96:25:a4:b1:42:d6:48:
61:b8:f0:25:6a:88:8f:c6:76:04:9c:af:9b:92:90:98:ef:92:
a5:d6:b6:9a:7f:c7:67:21:86:71:c5:f6:ed:e1:00:62:aa:0f:
87:a4:f7:1d:33:9c:74:ab:14:51:42:16:45:5e:03:70:94:12:
96:ab:38:39:3d:18:0b:04:0b:06:b7:45:95:90:f3:4e:1a:c0:
cf:af:8a:60:35:df:d5:40:3d:be:76:94:ac:7e:e9:94:89:a0:
e1:b6:46:a0:10:f5:85:e8:69:02:d8:03:01:cd:91:e5:fb:2c:
e8:a5:af:70:01:51:b1:79:b2:a7:f7:27:bf:3d:61:c5:65:91:
f4:2e:b8:72:f6:53:ef:48:20:1c:a7:c9:94:9a:12:1d:1c:64:
5a:cb:80:a7:79:a0:af:cb:4a:a6:87:a4:47:2a:e7:a3:96:63:
e8:78:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:41 2025 by rpki-client