Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: E/Vd/w0mPifTTH2q9I0vPT0l9Nm4tQD3JlApGC96ihc=
Subject key identifier: BA:EE:32:C8:51:A7:42:BB:D5:0D:D2:6F:BB:83:2D:32:07:CE:E8:AA
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 01958C603872AEC3DDDF62B4610B0C069334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0DC6
Signing time: Wed 12 Mar 2025 22:01:10 +0000
Manifest this update: Wed 12 Mar 2025 22:01:10 +0000
Manifest next update: Thu 13 Mar 2025 22:01:10 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: 5dC07OFTX6Txb2AYzCamjvIAciMR16rR7z0rK6kw6os=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:38:72:ae:c3:dd:df:62:b4:61:0b:0c:06:93:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Mar 12 22:01:10 2025 GMT
Not After : Mar 13 22:01:10 2025 GMT
Subject: CN=baee32c851a742bbd50dd26fbb832d3207cee8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:07:98:6d:58:45:10:35:48:a1:5d:93:3e:
4e:b2:05:0a:fb:68:35:53:fd:6b:48:a0:fa:22:f3:
dc:7d:ef:b5:64:af:d3:5a:80:34:65:81:43:e1:03:
d1:73:1e:b4:bc:51:a5:9f:30:ae:b3:d5:ec:69:75:
16:fe:0f:56:0d:9d:55:c1:75:8e:d6:42:8b:fe:8d:
cb:fd:29:0f:4e:36:be:14:fc:10:bb:88:3c:93:4f:
be:25:e5:97:fa:f3:65:c6:5a:60:83:cd:5e:b4:38:
14:f9:e2:83:2e:34:2c:d0:ce:c6:1c:c3:95:f1:83:
36:96:ec:28:66:af:c0:40:a8:09:0f:31:d9:eb:42:
29:d9:e9:da:3b:23:4e:c9:13:e5:2d:ef:29:d0:0a:
be:4a:64:62:e7:f4:07:65:dd:0a:54:db:fb:64:15:
7c:eb:81:6c:d3:4e:88:02:f4:41:34:b3:7f:4a:0d:
bf:bf:b3:66:ca:cd:8a:5f:19:30:11:68:11:ec:e0:
ac:91:9e:bd:1c:8c:84:d3:3d:02:c0:f5:c3:ba:68:
39:aa:14:74:eb:a1:10:92:48:80:44:7c:da:9b:2e:
a9:f1:26:d5:b1:67:7f:32:7a:43:90:a9:4c:5b:be:
74:e7:42:dd:37:af:3a:eb:4b:ac:ee:3f:6c:30:0a:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:32:C8:51:A7:42:BB:D5:0D:D2:6F:BB:83:2D:32:07:CE:E8:AA
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0b:9e:43:1b:df:e9:a9:5c:33:2c:16:13:38:63:55:b1:bd:
40:d3:1e:16:04:96:a8:52:be:77:e5:f9:4e:84:9b:34:b5:eb:
2e:a3:e4:55:0b:1d:42:e3:f6:b0:3d:28:3b:de:05:90:11:fa:
62:2f:d6:0a:9c:89:2f:a5:9f:a2:a0:e6:90:d0:dd:9f:b2:22:
01:43:d7:d0:a7:51:c1:ed:3d:9f:d8:89:2e:ec:d4:2e:0e:34:
ca:13:9c:d5:0d:72:8f:e1:39:63:a6:ba:90:65:3e:90:f3:71:
ae:60:17:6a:94:40:24:e9:9d:46:e9:20:fb:2c:52:6d:6c:19:
ab:ab:36:85:26:ab:87:31:ab:d6:99:bf:a6:c9:59:58:4d:6f:
08:1e:ac:af:97:70:4d:d7:6d:3d:0c:d3:dc:97:47:98:ae:3d:
8c:fb:b2:c4:11:1a:a0:69:1a:6e:ef:19:68:29:ee:70:80:9b:
13:83:84:00:ea:30:50:de:c8:4c:b4:db:11:0b:b7:09:69:10:
89:a2:b2:e6:9f:01:95:37:47:2d:f3:6f:65:dd:1a:a9:0a:ef:
4e:2e:ff:4b:21:fd:4b:a3:12:24:b9:20:3f:1d:8b:1c:6e:c9:
db:a1:8d:ba:08:a2:66:7f:f6:9b:d7:1e:8e:e4:4d:ec:0a:4f:
3b:9e:a7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYDhyrsPd32K0YQsMBpM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm
ZjAzOWQwHhcNMjUwMzEyMjIwMTEwWhcNMjUwMzEzMjIwMTEwWjAzMTEwLwYDVQQD
EyhiYWVlMzJjODUxYTc0MmJiZDUwZGQyNmZiYjgzMmQzMjA3Y2VlOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRoHmG1YRRA1SKFdkz5OsgUK+2g1
U/1rSKD6IvPcfe+1ZK/TWoA0ZYFD4QPRcx60vFGlnzCus9XsaXUW/g9WDZ1VwXWO
1kKL/o3L/SkPTja+FPwQu4g8k0++JeWX+vNlxlpgg81etDgU+eKDLjQs0M7GHMOV
8YM2luwoZq/AQKgJDzHZ60Ip2enaOyNOyRPlLe8p0Aq+SmRi5/QHZd0KVNv7ZBV8
64Fs006IAvRBNLN/Sg2/v7Nmys2KXxkwEWgR7OCskZ69HIyE0z0CwPXDumg5qhR0
66EQkkiARHzamy6p8SbVsWd/MnpDkKlMW75050LdN68660us7j9sMApIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLruMshRp0K71Q3Sb7uDLTIHzuiqMB8GA1UdIwQY
MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt
ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm
LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgueQxvf
6alcMywWEzhjVbG9QNMeFgSWqFK+d+X5ToSbNLXrLqPkVQsdQuP2sD0oO94FkBH6
Yi/WCpyJL6WfoqDmkNDdn7IiAUPX0KdRwe09n9iJLuzULg40yhOc1Q1yj+E5Y6a6
kGU+kPNxrmAXapRAJOmdRukg+yxSbWwZq6s2hSarhzGr1pm/pslZWE1vCB6sr5dw
TddtPQzT3JdHmK49jPuyxBEaoGkabu8ZaCnucICbE4OEAOowUN7ITLTbEQu3CWkQ
iaKy5p8BlTdHLfNvZd0aqQrvTi7/SyH9S6MSJLkgPx2LHG7J26GNugiiZn/2m9ce
juRN7ApPO56nFA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:20 2025 by rpki-client