Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: XWhdubI3/VXEUgOMQOH4l7H2do9raijiJ3HSEcM5s7o=
Subject key identifier: 6D:36:BD:E0:F9:75:7C:FC:08:BF:E1:13:61:D7:FE:8D:76:0A:75:01
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 0196C79651DE40FDFF22D57E8CA1FFE14735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 01D4
Signing time: Tue 13 May 2025 03:00:39 +0000
Manifest this update: Tue 13 May 2025 03:00:39 +0000
Manifest next update: Wed 14 May 2025 03:00:39 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: d+tIiINVazr2Kt0IK460QUHlEpDEfW0txfS36dkqGBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:51:de:40:fd:ff:22:d5:7e:8c:a1:ff:e1:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: May 13 03:00:39 2025 GMT
Not After : May 14 03:00:39 2025 GMT
Subject: CN=6d36bde0f9757cfc08bfe11361d7fe8d760a7501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:03:05:5a:59:08:5c:d6:46:21:ed:54:0c:
3d:b0:26:c0:4a:40:fb:90:b8:3c:3e:d3:db:a9:89:
ca:bd:18:19:56:4b:de:c6:4d:ce:2f:79:82:d7:9c:
71:fd:ba:08:50:e4:4c:29:aa:31:db:b3:19:be:bf:
77:74:2c:d1:3a:f1:97:d1:cf:d7:fa:d3:5c:35:e1:
4b:94:cb:4b:5a:80:12:05:cb:9e:88:80:06:87:50:
f4:c5:80:88:60:af:08:73:82:de:76:66:f9:6b:d7:
66:d0:43:aa:67:fe:95:e5:0a:03:27:6a:ff:d6:0e:
65:8e:df:a4:a3:13:ef:cc:f6:a5:0d:17:4d:15:21:
ce:c8:7d:45:39:dc:55:58:a8:d6:19:99:f8:78:d4:
f3:f1:49:1b:a1:28:b5:36:cc:01:90:e6:58:fd:20:
d8:23:64:b0:37:67:1f:9b:ea:bd:f4:43:38:9b:5a:
bf:cc:36:48:c0:ba:25:98:9f:d8:de:94:db:d0:6d:
a0:d9:cc:a9:6a:ec:9c:e2:38:cd:6b:82:33:19:83:
d6:41:5e:f8:53:07:b2:10:20:22:b7:9f:3d:77:94:
62:f7:ee:22:02:13:5f:bb:57:0e:36:65:50:19:0e:
47:e2:84:3c:d3:44:76:fa:95:a7:04:2a:e9:71:8d:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:BD:E0:F9:75:7C:FC:08:BF:E1:13:61:D7:FE:8D:76:0A:75:01
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:b0:37:79:fe:05:cc:ff:17:62:0d:22:d5:b0:08:7f:75:
f2:da:db:80:b7:c2:41:73:c8:51:e7:b9:a6:37:1c:60:d4:6d:
28:f4:c5:86:2e:6c:e5:22:b8:cd:ff:7c:26:d1:16:93:b2:a5:
cf:13:48:8d:c8:8c:c1:bb:49:90:f6:67:da:21:24:a0:cb:fb:
1b:ca:32:3a:86:d1:8d:14:60:62:31:8e:20:93:b5:13:f8:02:
a1:d2:54:c3:f9:e9:50:b4:7d:bc:50:4d:b1:d4:5d:1f:8e:6a:
91:a4:0e:70:d9:69:1b:2c:25:17:03:81:60:8e:a9:f9:5c:f1:
f0:18:7e:69:e0:6e:e4:51:b8:0c:4b:e2:92:b4:f3:2e:8b:c2:
a7:16:42:8c:54:47:f6:a5:16:ff:86:3c:84:e1:94:ed:85:11:
d8:18:6f:d0:45:08:34:21:6a:36:59:fc:e5:78:f8:3f:ff:9e:
7e:84:69:74:e8:8c:e7:20:3f:2f:e6:cb:73:7e:81:90:8e:13:
24:69:eb:1c:05:ab:05:cb:5d:f3:84:7b:a5:19:19:42:46:6f:
8e:0b:6e:3d:89:05:d7:f5:cd:44:07:33:1f:59:32:ce:8d:4a:
39:ed:c4:7d:5c:1e:44:9c:f3:4a:a2:09:e8:c3:d9:0b:06:99:
25:7e:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:32:28 2025 by rpki-client