Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: xU+H3abA5eQIQ1Ienaovmu5Fh1RMCMEyOU51B3r3I80=
Subject key identifier: 52:B9:FB:8A:4C:87:60:28:25:23:EE:EA:47:97:66:6E:02:E0:B9:F4
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0197488CD90F0B5F1173ED1ECFA6787091C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0EAC
Signing time: Sat 07 Jun 2025 04:01:19 +0000
Manifest this update: Sat 07 Jun 2025 04:01:19 +0000
Manifest next update: Sun 08 Jun 2025 04:01:19 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: DwS5T72w0Mg8zWwbZZM81Ki6lMnFnmAOzbomRDcB1FE=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d9:0f:0b:5f:11:73:ed:1e:cf:a6:78:70:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Jun 7 04:01:19 2025 GMT
Not After : Jun 8 04:01:19 2025 GMT
Subject: CN=52b9fb8a4c8760282523eeea4797666e02e0b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:14:73:f9:91:76:43:22:76:ad:c9:92:0f:
c0:8a:d5:2c:18:c3:71:ce:e2:9b:0f:87:f4:a0:72:
4f:63:4b:19:d6:c6:2a:8b:06:93:99:7e:a0:7b:2f:
52:24:97:b8:a8:af:48:6f:ba:59:1a:34:55:4c:22:
f1:1d:5c:98:c8:2a:40:5b:97:f1:22:26:93:0b:15:
1d:52:04:a0:12:c5:46:4f:8e:0c:fb:ec:f7:d1:6a:
c1:37:2b:83:6e:df:76:0f:00:53:25:f7:ba:5b:98:
f1:02:03:1e:41:4b:d7:3a:1f:ac:04:3f:9a:15:67:
35:25:23:de:82:51:74:05:35:5a:a6:f2:29:25:10:
37:b7:86:be:89:b0:67:a9:45:b9:20:13:e5:8f:3f:
ef:93:b8:21:bf:bc:dd:74:37:fd:38:d3:17:3c:1f:
d7:77:8e:2a:9b:a8:95:3f:12:61:70:4b:ff:88:21:
03:3d:0b:00:05:9e:94:5c:b1:f6:a7:38:0e:c4:49:
ee:54:2d:af:21:2e:d0:1a:bc:31:aa:4e:77:da:84:
9f:25:e6:73:ad:29:4c:ec:30:69:e3:15:e9:e1:eb:
28:a9:5e:48:e6:fd:63:54:99:93:f6:9a:c5:db:f5:
5a:f6:79:bf:91:34:fe:5a:7b:8e:a1:4e:b5:96:78:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:FB:8A:4C:87:60:28:25:23:EE:EA:47:97:66:6E:02:E0:B9:F4
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:ac:dd:11:b1:47:49:8d:50:f4:2a:40:bb:67:7e:d5:32:
e7:d0:b3:d3:1a:f2:28:80:e3:7b:a2:a0:e5:85:39:f1:7c:2a:
44:18:b8:63:c4:d5:4f:08:02:a0:cc:7d:a7:e2:bc:ff:38:a9:
28:63:0a:75:34:44:0f:c9:dd:a9:7a:1d:a2:6e:6f:06:d2:ec:
f5:95:88:d9:4d:d6:5d:69:d6:a8:2f:ea:4c:7b:f7:d0:7d:93:
33:02:cc:50:62:6b:9c:ca:31:f0:e8:35:f7:25:a4:30:04:63:
04:c9:6a:2b:84:02:a2:5e:da:c4:3d:d8:b5:ae:d8:34:73:65:
2b:27:a8:d3:9c:53:a1:32:54:a8:ef:20:00:4c:e5:11:8f:37:
a4:c8:17:b3:31:6b:28:d1:44:a3:a9:ca:c1:2f:2b:64:fe:46:
b3:5d:9a:e9:09:05:ef:30:52:5b:b9:e4:2f:c5:56:0d:c7:a6:
27:68:7b:b4:56:0c:48:59:e0:57:98:4f:a1:19:58:21:2f:64:
21:8e:d8:59:de:88:eb:a1:14:b7:47:53:53:df:0c:f3:33:79:
c5:c0:24:e2:17:e0:f4:de:12:89:df:18:cc:6e:61:59:27:ed:
a8:61:e1:c0:97:97:a3:87:79:40:4f:d1:a5:62:b8:07:b1:cb:
0b:ca:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:50:00 2025 by rpki-client