Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: fJqKy1KpL6TIr2l2t0dqZTddUqdonF0qA/yl11gk1HI=
Subject key identifier: 22:D2:B4:7A:1C:E4:64:C4:0F:C1:EA:AE:62:B1:9D:90:5E:C1:2F:6B
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 01964FA35F3BCFA2213AAFC6E927797B418B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 20:00:28 +0000
Manifest this update: Sat 19 Apr 2025 20:00:28 +0000
Manifest next update: Sun 20 Apr 2025 20:00:28 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: BWxZ1cONJ3vBbBMF36yK0XzzKBYMcz7UziyKI2R2W70=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:5f:3b:cf:a2:21:3a:af:c6:e9:27:79:7b:41:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Apr 19 20:00:28 2025 GMT
Not After : Apr 20 20:00:28 2025 GMT
Subject: CN=22d2b47a1ce464c40fc1eaae62b19d905ec12f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:92:d1:fe:0c:87:82:8e:78:dc:9e:13:45:
53:24:be:24:e0:13:52:37:c4:52:9c:e2:04:b5:d0:
a2:64:bc:59:f9:2b:1f:e5:d8:78:04:e6:35:96:23:
0a:f6:d9:11:98:c4:31:22:23:74:9f:db:f3:bd:e2:
60:5f:74:4f:82:d8:4e:b9:1e:f2:a4:fd:3b:3b:1e:
38:e7:88:80:ad:e7:9c:f7:b6:75:01:ff:98:21:b0:
3c:fa:e9:9e:2d:ca:ee:8e:fe:24:c5:23:cf:ed:c7:
37:b8:9d:4f:fe:4b:6c:ff:0b:cd:64:e5:15:56:ec:
36:d9:83:c5:32:aa:7a:9b:02:2f:42:fa:49:5a:d2:
97:e5:b4:f3:a7:c6:44:14:f5:1d:ff:eb:9d:7e:66:
63:2b:21:66:22:45:ca:67:8c:75:68:b7:d9:b1:6d:
4b:72:ca:71:bc:cd:17:7b:84:ac:d2:c6:51:47:73:
6a:2f:dc:1b:19:1f:96:b1:26:22:01:7d:88:25:dc:
b5:41:c5:05:11:91:b5:c4:47:fb:e5:b9:0c:20:1f:
25:04:89:1a:f5:66:b8:13:5f:e5:dd:44:63:a8:ef:
df:04:76:1e:a3:67:f4:91:07:c9:d2:55:8e:2a:2a:
d3:a2:d1:a5:d9:3b:68:f7:f6:42:ae:7a:5a:5f:cd:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:B4:7A:1C:E4:64:C4:0F:C1:EA:AE:62:B1:9D:90:5E:C1:2F:6B
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:85:0c:c5:42:dc:10:11:53:00:aa:23:bf:aa:b3:cc:02:
86:e6:0b:4d:c5:55:aa:7b:a8:05:d5:31:ae:b8:ae:07:95:3a:
0d:d6:86:f9:ee:73:42:5b:1e:be:71:2b:3f:e5:be:b7:f2:20:
3a:ff:c7:a2:ca:9a:b7:f9:f6:2d:1d:2e:ca:cc:bd:39:4c:6f:
7a:19:0b:55:f5:2c:2c:1a:ec:1f:76:13:84:40:af:a9:64:29:
55:9c:40:c8:58:d0:b5:de:9b:01:02:f4:e4:cc:97:65:b4:f4:
a2:9a:a3:54:27:7c:76:1a:aa:f7:4e:01:54:6c:17:40:83:bf:
c3:21:e2:7e:55:82:c8:82:c6:3d:ed:ba:bb:ef:94:1c:26:e9:
0a:33:3d:cd:40:18:39:de:c4:81:9a:b2:24:48:54:a7:39:57:
ac:ff:b6:e8:4f:0c:0f:1d:31:44:37:c2:10:1e:f2:a3:2e:8e:
8e:3f:45:91:55:56:b3:89:7d:c6:8c:7e:4f:24:49:69:a1:b8:
a9:83:2b:79:bf:f4:f5:db:1a:b1:63:e1:d3:ee:5e:b6:bc:06:
54:3a:b5:ec:d7:72:8a:4b:8d:8b:d8:17:6b:69:99:04:4a:18:
2c:37:31:bf:5a:a2:3c:96:e8:49:60:0f:f5:61:26:20:db:8b:
ce:e5:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:34 2025 by rpki-client