Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: jQEVoH9LOKz87h+6fkkc9CDcnTAZOSFBL2ucqcdIxtg=
Subject key identifier: 1C:44:D2:F1:72:DD:5B:77:FD:42:49:14:93:35:37:F9:EB:7E:52:18
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 019642FA5B47DFB926A3B2688D9CFCC4F1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0B93
Signing time: Thu 17 Apr 2025 09:00:25 +0000
Manifest this update: Thu 17 Apr 2025 09:00:25 +0000
Manifest next update: Fri 18 Apr 2025 09:00:25 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: UVUXK1rFll6xWQTyrMbDJsd7yNi6byJZwfZ3ATde8UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:5b:47:df:b9:26:a3:b2:68:8d:9c:fc:c4:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Apr 17 09:00:25 2025 GMT
Not After : Apr 18 09:00:25 2025 GMT
Subject: CN=1c44d2f172dd5b77fd424914933537f9eb7e5218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:1c:6a:9f:38:94:93:b7:60:81:04:d8:6b:
7d:6e:ef:44:c9:6f:c1:be:1a:78:fa:fe:ee:ca:7d:
11:f1:6e:2a:f3:ca:0d:73:59:17:96:84:ae:bb:de:
d8:67:ce:03:eb:4b:5b:20:f2:f1:ef:b7:6d:65:b8:
d6:06:1c:17:44:ff:f6:0a:ef:a1:ea:4b:77:47:56:
13:d8:af:c6:6f:b7:a3:2f:e4:2d:e4:a9:5a:24:5c:
08:7d:2a:81:3d:2d:3a:1e:13:3e:d8:69:8c:a3:ad:
52:8d:80:89:8b:a8:83:db:68:b7:26:34:f1:ef:36:
32:ca:8f:1a:fc:8d:37:a7:40:07:75:c6:2f:42:a9:
94:e5:8c:cb:81:b1:63:c4:c2:a4:84:e0:93:0c:47:
d0:8c:ef:f6:4a:32:db:84:f7:7a:8e:e7:a9:55:28:
3a:9d:aa:02:4f:21:c8:ba:45:08:3d:45:38:14:ed:
c1:d3:cc:97:ac:4f:48:ae:0a:e2:30:ab:2c:19:9f:
61:cc:52:21:da:96:b5:0d:e4:64:f6:74:71:fe:4f:
ee:f5:76:11:d3:64:5d:73:de:cf:89:d3:09:c4:d1:
94:9f:23:f4:f7:8d:97:85:74:68:19:46:cb:9c:b8:
43:0e:54:1a:9f:97:32:d0:39:95:10:a6:c1:8f:64:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:D2:F1:72:DD:5B:77:FD:42:49:14:93:35:37:F9:EB:7E:52:18
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:a0:ff:ef:cf:d6:80:1d:9c:4e:0e:dc:b4:6d:df:d0:77:
41:79:80:47:5f:ea:ae:c9:ec:4c:b4:31:df:28:28:4c:5a:16:
9b:b9:68:12:1a:6f:16:39:55:d1:49:a4:ac:6b:52:9e:a7:85:
c9:d4:05:4f:4c:63:56:4f:55:cd:05:fc:b1:4f:74:47:f8:f8:
20:14:e0:4f:3c:90:19:d5:dd:37:d2:4f:4b:87:8b:71:3e:2b:
f3:90:f8:ee:56:cf:d6:f9:b2:1d:9f:0c:b8:dc:70:d1:b2:a7:
85:51:33:68:e5:17:0d:e2:aa:54:2e:05:ab:8b:79:76:0f:1c:
98:fd:c6:b7:9f:7f:08:8a:f5:bf:a6:42:85:50:52:b0:f8:4b:
e1:09:cb:2b:8c:e8:72:1e:f1:9d:f1:25:92:cf:6c:08:b2:c9:
4b:b4:2b:fb:10:b2:d0:93:77:f4:99:81:93:55:bf:e9:1f:04:
db:02:1d:2a:60:c1:b7:49:db:3f:d7:7c:bb:d8:38:95:c3:e0:
70:a9:86:d9:b2:ac:92:32:e5:7d:90:22:84:12:29:86:79:7f:
b4:77:50:be:84:c2:de:a6:3d:3c:a7:ad:17:59:b7:46:49:88:
ab:1d:4d:33:87:1c:96:af:88:65:11:7c:9f:6a:83:88:ed:a0:
4f:85:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:26:50 2025 by rpki-client