Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: 30Y+xd0ZXBuTg8aOf8rshZZd8f6IAfJo4np/EuZf/kA=
Subject key identifier: F6:F1:62:1D:46:00:89:AF:27:FD:C3:4D:7B:1F:8E:C2:D7:0E:0F:66
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 01962BCE6D5D1BC5637BD8B0AE1D326C1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 14FA
Signing time: Sat 12 Apr 2025 21:01:10 +0000
Manifest this update: Sat 12 Apr 2025 21:01:10 +0000
Manifest next update: Sun 13 Apr 2025 21:01:10 +0000
Files and hashes: 1: QnxdXEgnP3db3KU5C8UjQwz09IM.roa (hash: BFA5L6QmrNex0T0qBr/OULAvOyRK2KvYJBrWIhmPEfI=)
2: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: F0IH4QCLZWDNLmauAi9DdrtCTQb4ZfL113Mc5NzMWqs=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:ce:6d:5d:1b:c5:63:7b:d8:b0:ae:1d:32:6c:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Apr 12 21:01:10 2025 GMT
Not After : Apr 13 21:01:10 2025 GMT
Subject: CN=f6f1621d460089af27fdc34d7b1f8ec2d70e0f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:72:ee:28:0c:2f:51:b3:e6:b3:23:c8:40:
a1:3b:f2:f3:b0:ee:5d:1d:71:8a:ee:32:33:31:4a:
0b:51:54:f0:5b:c8:f1:f2:c4:d6:f3:39:60:e1:e5:
d4:85:10:77:95:53:b7:1c:99:5c:72:f1:65:b2:d1:
5c:f4:b5:9c:1d:a3:1d:86:e0:dd:de:9b:01:c6:00:
1d:16:3e:7e:2b:bd:92:f5:93:31:c6:19:0d:99:81:
32:10:23:79:ee:71:9a:a5:50:43:38:81:8b:8b:3c:
42:22:44:0a:73:7e:8c:f4:49:ec:0b:8a:c0:61:5e:
06:3f:98:3b:64:32:ed:b1:16:76:ec:a5:80:c2:42:
b6:92:75:f5:fa:5a:23:c9:bc:13:a1:16:b3:c5:3d:
07:2e:f6:ac:13:1b:25:f4:ca:41:5d:7f:8c:dc:3d:
32:ca:5b:6d:0b:2d:9a:8e:cd:69:2e:3c:33:ed:76:
9b:94:d0:8b:ce:75:5b:87:7c:39:55:d6:71:06:a3:
87:45:81:e7:61:cc:4f:c1:fd:7c:25:ad:1f:20:47:
d2:c4:0d:71:9f:40:c9:a4:9e:44:99:3b:16:1e:53:
87:d7:1a:89:b4:80:7c:47:a9:c7:01:eb:1f:0a:d7:
06:cb:69:ea:a9:e3:cf:30:ef:36:d8:da:c3:bb:3f:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:62:1D:46:00:89:AF:27:FD:C3:4D:7B:1F:8E:C2:D7:0E:0F:66
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:1d:1b:cc:cf:6b:52:73:fa:d2:b1:54:91:5a:c5:a0:46:
86:d7:22:d0:9c:64:b1:37:28:f0:e5:bf:9e:3c:5a:66:a4:91:
d9:84:fd:da:eb:a7:f5:07:73:f5:ad:b9:b0:6a:df:f4:c5:a1:
15:0a:b7:8e:af:c6:23:c3:23:dd:db:a4:f3:af:34:d5:27:f3:
a2:df:4a:d6:36:3c:4f:3d:a5:f9:16:64:72:7c:4b:a1:8b:a4:
7a:0c:4a:5d:0e:a6:11:08:b6:59:96:06:b4:d0:d9:d0:e1:65:
ef:7f:be:e2:9b:a6:c9:d5:71:32:5b:b2:4e:d1:56:e2:bf:bf:
b3:93:a4:45:57:c4:a1:02:9a:8c:43:d9:61:33:98:6c:70:06:
e7:ff:33:2b:bf:96:f7:1b:55:c2:ab:ba:08:3b:8a:b6:83:16:
03:c3:e8:59:48:b5:f0:db:37:f4:ca:b6:30:6e:45:ae:4a:55:
0a:61:7d:a0:ba:72:f4:59:c6:5c:cf:ba:ac:35:58:8c:ec:77:
ba:ce:8d:84:e2:80:3d:df:ca:2c:2f:84:27:c5:3a:28:4f:16:
4e:b8:6c:bd:03:9a:14:f1:c4:40:f8:66:44:89:c2:c6:f3:3d:
75:e6:8c:0f:78:dc:56:fb:74:b1:23:54:69:19:bd:59:7f:4a:
85:f9:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:40 2025 by rpki-client