Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File: iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier: ZhB/fSctFtjfahaq9CuO1XUXwKFZaouzD5Q1sv+vlpQ=
Subject key identifier: 0D:12:BE:E0:DE:98:3E:3C:F0:4C:48:D8:8A:E3:26:7A:44:E5:0E:25
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 01964EFECA6A35E8F830C697CC831DDB0713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 17:00:42 +0000
Manifest this update: Sat 19 Apr 2025 17:00:42 +0000
Manifest next update: Sun 20 Apr 2025 17:00:42 +0000
Files and hashes: 1: 1-dqt2rN6d4zMTr30hL21uHD8mgs.roa (hash: 9J3OxeItEP/tcUsxKEYBHkcY9sk3+Jl9zYiOLoIv6HY=)
2: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (hash: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=)
3: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: eoR3QibxIiCiPO6hxxciDkheqxPM3DuOfvy97/zjaLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:ca:6a:35:e8:f8:30:c6:97:cc:83:1d:db:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Apr 19 17:00:42 2025 GMT
Not After : Apr 20 17:00:42 2025 GMT
Subject: CN=0d12bee0de983e3cf04c48d88ae3267a44e50e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:fc:34:42:1f:34:74:1a:47:42:5b:dd:ce:
71:0e:cb:7e:39:0e:dd:d1:0a:52:f9:28:d1:90:63:
28:bc:65:11:30:10:7e:bd:78:25:1a:48:63:11:4e:
70:bc:8d:5f:ed:63:30:ed:6d:03:f5:53:58:e9:1c:
22:d5:2a:69:90:24:42:92:6d:f1:b9:6c:99:cf:f9:
56:2e:68:38:16:16:98:19:83:b3:8d:5f:2c:ab:7a:
7d:db:f3:25:41:5c:02:c3:68:84:ec:a4:b0:66:e9:
74:d2:7c:03:a1:1c:3a:fa:e9:2d:06:12:1b:47:ae:
d5:ba:4a:15:c9:5d:1b:72:f0:96:95:6f:18:91:b3:
ce:58:bf:19:34:13:02:ca:a6:a4:ec:17:fe:0f:33:
8b:a6:38:d5:0c:01:c5:49:ff:f1:cc:26:c8:ef:55:
e1:5d:be:2a:f0:bf:cf:7e:ca:0e:c6:ee:89:43:04:
50:84:f4:40:5c:59:9d:78:5c:16:0b:10:ca:41:43:
7b:7a:b4:43:16:38:12:b0:27:2b:93:74:48:1b:49:
84:51:09:59:16:12:78:6f:d6:9c:e3:a1:b5:4a:d6:
2d:5d:67:5c:3c:1e:17:9f:44:b9:bd:cf:5c:ee:ec:
28:23:e1:e1:20:6f:73:5c:36:a5:8e:5e:5f:9d:47:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:BE:E0:DE:98:3E:3C:F0:4C:48:D8:8A:E3:26:7A:44:E5:0E:25
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0f:f0:87:ce:4f:88:e8:58:2d:d1:5a:7c:a2:22:a7:6b:43:
16:c2:99:85:24:08:b0:a4:5e:dc:20:ea:3a:db:11:15:ff:e4:
2c:76:7e:3e:25:05:d2:c4:c6:e2:7d:16:77:40:d6:f9:02:26:
0e:9c:ea:05:92:3d:88:77:a9:a6:9d:cb:cb:49:e9:6d:37:a4:
c8:42:40:f4:bf:17:4e:05:3f:f4:d2:b6:f7:0a:70:95:1b:06:
44:dd:56:81:49:3d:20:10:12:ff:a4:e5:12:e6:76:fa:a0:2d:
d7:8b:a8:8c:26:dc:9a:71:4d:5a:04:64:85:b9:2a:3b:1b:55:
d9:b4:ae:34:c8:db:a5:34:cd:47:5c:eb:eb:06:db:47:d9:de:
d6:d2:3d:e6:e9:5d:63:2b:c3:60:47:f3:a6:27:68:86:9f:1a:
3a:88:4e:6a:8e:34:da:9b:8b:df:0b:c1:d7:6d:aa:3a:37:67:
41:7f:c5:98:9e:55:42:44:44:02:88:6c:bc:e2:67:a3:b8:7b:
75:84:a5:c4:6d:c3:c2:11:74:e3:bd:46:21:03:6d:c1:9b:68:
a6:6c:d3:a8:2c:2c:6c:d8:64:cf:94:b9:ab:49:a6:14:52:75:
09:a4:41:5a:33:4e:93:d1:ce:2b:b6:90:b3:7c:f8:96:e7:76:
1b:90:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:27 2025 by rpki-client