Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: yW5pGh0srR6nCOhMJj1/nwDQpDRk6GP3JRAerzV0WnY=
Subject key identifier: 62:12:52:FB:AD:2E:7F:AA:8B:2F:40:00:60:69:7F:35:B4:E5:3D:73
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019649A15BEFE2FFDBB6E0D249B989542CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0BC9
Signing time: Fri 18 Apr 2025 16:00:33 +0000
Manifest this update: Fri 18 Apr 2025 16:00:33 +0000
Manifest next update: Sat 19 Apr 2025 16:00:33 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: jk4+SxpNW7lcWjA14xdVceZudNlo0u5FDUyS5RR2r3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:5b:ef:e2:ff:db:b6:e0:d2:49:b9:89:54:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Apr 18 16:00:33 2025 GMT
Not After : Apr 19 16:00:33 2025 GMT
Subject: CN=621252fbad2e7faa8b2f400060697f35b4e53d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:4e:37:70:70:6e:79:b6:cc:0f:1e:e2:92:
a0:cc:46:f3:5b:19:db:c3:7f:b3:d8:26:37:f3:57:
98:8d:3c:d4:58:95:1e:18:54:2e:5f:5c:d6:20:bf:
51:7b:e2:e7:a8:6d:60:d9:78:28:e4:8e:c1:e5:10:
b9:35:71:cd:f6:9e:43:ec:11:90:a1:44:11:78:c9:
b7:fb:3c:db:b5:ac:e9:45:c0:d9:81:17:a3:50:14:
a5:6b:4b:c3:e1:99:02:b4:b7:c6:e4:81:64:49:68:
7e:44:ec:2d:25:3a:c2:66:08:59:ea:89:6e:4a:8f:
1e:31:a4:8f:60:54:64:b7:8d:29:65:de:6a:1b:4e:
68:21:bb:d9:c0:64:65:8d:1d:c4:2a:18:f4:7e:26:
a5:15:00:2e:9a:6e:85:6a:40:4e:43:32:ba:7f:7d:
8b:a6:5a:a9:0f:a9:98:22:dd:a2:33:de:95:c4:ec:
cc:4a:a4:a8:81:e3:d4:0c:ad:94:be:f7:e8:55:4f:
a6:51:18:84:55:cf:9e:02:4e:7b:11:7d:5c:7d:ae:
80:d3:8c:f6:d6:7d:fa:a0:83:37:fa:f4:3f:cf:3f:
26:8a:1e:41:cf:e1:61:f2:79:58:ea:6a:62:3c:da:
51:0a:c0:65:3d:f0:2d:30:d8:a6:cb:0a:a6:06:b7:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:52:FB:AD:2E:7F:AA:8B:2F:40:00:60:69:7F:35:B4:E5:3D:73
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:22:14:61:62:21:f2:89:dc:90:98:42:58:33:d0:14:71:90:
a6:d4:f9:d6:67:80:86:b2:a3:49:ca:b8:85:cb:46:bd:19:c2:
60:e5:0e:e6:39:36:94:19:7d:3e:30:36:cf:88:29:31:d5:1c:
6e:91:30:27:a0:37:5c:b9:30:8e:0a:7a:ea:f4:3f:40:56:24:
e7:81:c4:50:27:09:c9:54:1d:14:d8:67:80:bf:e2:d1:c4:78:
10:54:1e:63:94:0b:15:69:66:af:81:f7:9e:a7:62:70:26:93:
02:84:9d:81:75:92:e4:57:70:9c:b6:06:2b:e5:81:64:5b:e9:
2b:81:03:91:7d:ab:06:f8:55:7c:c3:09:81:a0:6f:71:01:fc:
3f:8c:ef:a1:b3:f9:24:ea:5c:ca:75:d9:fc:3c:b4:86:b1:0d:
25:ba:f1:93:d5:6d:19:ad:2d:64:05:09:73:d2:76:4e:f6:e2:
c6:1e:7c:ff:e4:1f:09:38:1b:21:d9:39:68:03:a6:ec:dd:76:
b1:16:54:75:80:b2:76:dc:87:15:11:fa:db:63:b8:d2:28:c2:
2e:e8:95:b7:af:e7:e0:10:80:18:14:79:fa:90:11:a1:70:a3:
f7:18:70:88:7f:ba:df:41:92:68:95:c5:43:bc:70:24:52:e0:
03:31:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:05:30 2025 by rpki-client