Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: pI2eadtCJFQ5xvHEr5L52/Gs6JZI4I5dmAFGHKpfe04=
Subject key identifier: A3:02:0A:2E:D9:F8:8D:79:1C:E9:D5:F8:DA:E7:69:F6:81:81:11:3E
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 01964FA39B1E8192352DC973FEDABF949B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 120A
Signing time: Sat 19 Apr 2025 20:00:44 +0000
Manifest this update: Sat 19 Apr 2025 20:00:44 +0000
Manifest next update: Sun 20 Apr 2025 20:00:44 +0000
Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: Lzc79uVd7dTZyyfRav6t3CQAIULksM05oCdjMXIa9xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:9b:1e:81:92:35:2d:c9:73:fe:da:bf:94:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Apr 19 20:00:44 2025 GMT
Not After : Apr 20 20:00:44 2025 GMT
Subject: CN=a3020a2ed9f88d791ce9d5f8dae769f68181113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:43:34:b2:8f:e9:9f:7a:f0:c9:3e:82:a1:
f9:6c:14:27:fa:50:06:71:39:45:bf:e1:95:8a:23:
1e:47:17:0c:ac:c8:66:4f:d0:67:1e:38:6d:3f:bf:
73:2a:c8:f8:97:de:af:0b:23:ab:6a:cb:a3:a9:6f:
f5:c0:ef:ba:91:a8:9f:18:6c:cc:19:74:48:62:41:
96:59:6d:0b:3b:12:66:7c:90:df:b7:d4:76:82:7a:
60:cf:56:5e:d7:2f:8b:1c:fe:a1:1e:86:47:88:bc:
e0:4e:66:ad:7b:37:43:b2:c1:26:47:42:b2:7a:d7:
e2:e6:8e:c8:e9:de:97:41:62:85:8e:d6:8d:fa:88:
36:5a:aa:03:53:9c:44:8a:b1:27:cb:d9:f4:ac:a1:
27:6d:0d:01:cd:1b:db:57:9c:cd:18:1a:f8:f6:c2:
f3:7d:c5:e2:36:fc:00:88:02:a0:9f:52:a4:8a:68:
f8:66:21:fb:df:32:c6:5f:68:20:fa:eb:16:e0:e2:
ed:65:c8:db:02:e7:37:1d:74:d0:f5:28:a1:ad:bb:
d7:be:d1:13:e4:36:4a:89:5f:2e:bc:24:0d:79:df:
83:c0:7a:61:66:a1:26:9f:ab:a1:0f:23:3a:d3:11:
f1:82:ca:08:26:4a:91:0a:62:4e:22:57:06:55:99:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:0A:2E:D9:F8:8D:79:1C:E9:D5:F8:DA:E7:69:F6:81:81:11:3E
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:ed:40:bd:f5:8e:8a:94:ec:61:f1:db:06:e6:2a:5b:94:
e7:4b:6e:90:39:8b:5e:16:5e:1e:f9:34:f0:2e:a8:83:e3:85:
99:40:a3:8f:3c:86:6c:e0:0b:df:d5:e2:d6:ae:a7:68:76:84:
38:af:0b:e3:3e:4e:bb:52:b0:71:98:98:98:5c:f6:80:21:8f:
61:58:36:5f:2b:d0:d6:59:67:21:f6:bc:73:57:7a:06:fd:a4:
ab:82:52:3a:3f:bb:dc:f6:6f:95:57:6a:0c:22:4f:fa:81:c9:
5a:da:aa:e7:91:c7:d7:d6:37:dc:fc:9c:b8:92:39:26:7d:f6:
2d:05:72:6a:4b:71:ca:7d:8b:1e:0a:2e:2c:b1:cc:f8:30:1a:
e1:f5:82:13:e1:78:a4:70:14:c9:83:ec:44:9b:88:a9:ea:da:
c7:b5:47:9b:fa:15:6f:69:bf:70:94:c3:83:2a:d6:d3:ca:9f:
dd:49:ad:5b:70:21:ff:f1:23:77:c8:93:c1:df:20:ef:7b:3f:
0b:ba:29:6e:03:a6:cb:da:fd:17:40:85:ce:fd:69:c0:6d:ff:
a9:54:d5:4a:31:c0:f7:18:25:4a:8f:5f:13:58:d5:94:1a:53:
cb:61:14:65:51:21:d2:07:27:65:fa:d3:4d:17:1c:9a:8d:de:
0d:e6:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:15 2025 by rpki-client