Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: 8jUJMU2IrXRN7Kw65YDeRWtbQZ0yYJR34uNxP6EQcqE=
Subject key identifier: 3B:82:58:B4:32:8D:2E:ED:8D:5B:C5:10:89:2A:4B:FF:18:39:2F:6B
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 0196526D99CBC2499233CE1FA19533E985E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0B78
Signing time: Sun 20 Apr 2025 09:00:36 +0000
Manifest this update: Sun 20 Apr 2025 09:00:36 +0000
Manifest next update: Mon 21 Apr 2025 09:00:36 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: dNhjGRvalkZMrTibG6reizyGA+tT+X2W5vlrBTU8R+I=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:99:cb:c2:49:92:33:ce:1f:a1:95:33:e9:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Apr 20 09:00:36 2025 GMT
Not After : Apr 21 09:00:36 2025 GMT
Subject: CN=3b8258b4328d2eed8d5bc510892a4bff18392f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:21:0f:56:9f:97:2d:06:22:a6:29:97:1c:
3c:85:a2:11:37:e0:e1:c5:f7:30:a6:8c:f2:6b:d7:
94:de:c9:f5:e5:53:b1:65:51:04:1c:4c:4d:39:38:
3b:7a:d7:14:33:17:da:a1:10:41:e8:0e:42:df:64:
d4:72:1e:6b:74:1c:06:7a:55:f6:06:cb:26:42:f9:
e1:3e:c3:fb:5e:01:ed:30:5f:9f:05:43:4a:52:fe:
8c:9f:87:28:e3:57:79:d6:74:12:a4:0b:5e:e6:b9:
a2:e3:52:a3:ea:2d:14:5b:8b:3d:9d:49:0d:5d:00:
ee:ca:24:a8:7b:36:43:63:f3:51:a2:bd:23:b8:ab:
30:bf:4d:94:ff:02:c8:d9:33:c6:b4:28:26:25:05:
62:03:6c:a9:22:6d:31:4e:cb:ce:44:54:03:3b:1e:
a7:08:35:4d:40:1b:84:e5:15:dd:5f:37:25:e3:60:
0a:4a:9b:c1:21:f6:de:69:14:76:a0:9f:93:58:83:
2d:3b:01:d9:4a:63:8b:02:d3:85:c4:fa:aa:2f:f0:
8b:5f:97:c1:e5:d0:af:d6:96:61:8b:24:19:e6:03:
f0:78:f1:ff:9a:90:44:10:72:5d:f8:62:bc:d1:3b:
8b:0f:e6:07:b8:05:fc:22:06:99:a0:cb:3d:ac:1e:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:58:B4:32:8D:2E:ED:8D:5B:C5:10:89:2A:4B:FF:18:39:2F:6B
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:af:75:9d:4b:d0:8c:11:e6:47:a2:50:33:2c:bd:c5:91:c9:
18:3d:16:fb:ef:fc:19:bb:bd:b0:70:05:65:ae:ad:cd:25:60:
9b:a6:58:b0:2a:8d:5a:8b:a3:36:e3:c6:8c:ac:31:19:8d:44:
e8:1f:dd:e5:9f:55:ad:c2:47:5c:0e:27:54:ce:a9:f2:60:e2:
76:db:bf:06:f2:e1:23:06:12:49:7e:90:86:93:9d:20:2e:3d:
23:71:29:3c:6a:ea:3b:21:1a:ab:1b:5b:c0:86:89:d2:53:df:
5a:26:db:89:73:da:9d:f0:8f:f0:2d:db:5f:f2:2e:ed:0b:20:
d0:59:46:0f:c0:a4:fe:2f:87:fd:df:a6:66:91:e2:0a:dc:67:
8d:c5:0f:21:13:bc:88:41:d3:17:3b:0b:d2:7d:6c:f2:ac:0b:
61:1b:f7:20:c8:04:60:ae:b7:6a:05:2a:29:e4:ca:6e:81:c3:
35:3f:12:8e:31:00:66:3f:25:d5:be:b2:ef:38:89:53:40:ed:
58:b7:ff:72:ee:33:3e:66:fb:d9:32:8d:e5:c1:3b:7c:ed:f3:
fc:ac:c1:bc:8a:69:66:ee:26:f8:3a:cb:a6:d4:f5:97:06:d5:
d7:34:4e:74:ef:85:2a:e5:80:11:87:c3:a4:59:b8:28:53:ec:
b3:d0:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:47 2025 by rpki-client