Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
File: iW81xeAyGs0CFn3viAfwu29xwo0.mft (raw, json)
Hash identifier: jlYPu+Cf7A2wBVqYdZ8O6ArdM/Ta4LmCfVGTd2yRv6g=
Subject key identifier: 89:C2:79:E1:13:48:E5:A5:04:0A:31:E0:C3:F9:DD:F7:5E:9F:48:8D
Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Certificate serial: 0196BD49B10C3FEBEBED78F70E273A439E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
Manifest number: 10F6
Signing time: Sun 11 May 2025 03:00:45 +0000
Manifest this update: Sun 11 May 2025 03:00:45 +0000
Manifest next update: Mon 12 May 2025 03:00:45 +0000
Files and hashes: 1: KzxZqybvsz4qWRvLNMoGl_b-dg0.roa (hash: waO3ZFTQ9Kiow9t+yCx6WlAToF1IQKM9UgVqX7Ju9ms=)
2: iW81xeAyGs0CFn3viAfwu29xwo0.crl (hash: zswdCFLN9g2+zEmq4i38zpgXAJg7YiMxSMuTK/EEHUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:b1:0c:3f:eb:eb:ed:78:f7:0e:27:3a:43:9e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Validity
Not Before: May 11 03:00:45 2025 GMT
Not After : May 12 03:00:45 2025 GMT
Subject: CN=89c279e11348e5a5040a31e0c3f9ddf75e9f488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:42:15:e4:92:aa:d5:f4:8c:39:0e:61:5f:
ea:92:3d:13:82:36:0d:f2:48:67:d8:52:da:e1:63:
b6:d7:01:86:10:bb:18:9c:09:87:1a:80:dc:b8:15:
6e:a3:a3:d2:bb:88:1e:34:25:f6:cc:a2:3c:c8:a7:
9a:23:6f:b5:c1:be:2f:f2:47:3f:88:05:5b:e3:a0:
af:fb:07:19:61:c2:9f:b8:78:6b:bd:95:21:ec:3d:
a5:02:d6:5d:d4:f5:52:3a:07:db:8e:97:29:d4:4d:
e1:11:d1:5a:84:ee:e1:0b:d3:2a:d7:7e:03:46:c0:
f0:9a:20:91:42:8c:ef:b4:49:cd:3a:3c:54:c8:69:
c6:d8:6d:e8:f8:aa:f4:23:75:12:ad:86:6b:3f:67:
31:57:fc:40:cd:7a:f8:40:eb:c0:81:bb:fb:cf:3d:
fa:b7:d5:5e:8f:26:fd:ab:6e:62:00:aa:cf:97:4e:
8b:a4:f1:b7:a9:06:50:95:be:a0:9d:bb:67:28:05:
ff:d7:b0:82:24:ca:6b:bf:76:f7:9b:b5:a8:f1:9a:
1a:52:9b:14:ce:8f:f9:c6:47:76:2e:7e:07:b4:f2:
9f:79:2d:b4:7f:70:c4:28:75:53:ee:14:4d:49:cb:
f2:43:a9:d4:31:51:fd:3f:0b:50:96:b3:8c:95:02:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C2:79:E1:13:48:E5:A5:04:0A:31:E0:C3:F9:DD:F7:5E:9F:48:8D
X509v3 Authority Key Identifier:
keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:95:cb:c8:76:66:ab:c4:55:02:85:ee:f0:db:18:99:f6:3d:
7e:99:af:ec:f5:76:a1:5e:0e:8f:85:68:1b:46:e5:b1:d8:48:
81:f7:79:08:6d:09:41:cf:44:14:4b:0b:a8:3c:31:74:be:e1:
39:cf:ad:72:47:e2:ba:6c:8c:09:0b:52:89:dd:ad:21:43:aa:
39:b5:9e:05:8b:19:0f:65:c7:07:c3:60:f6:4b:fb:7f:39:83:
25:12:9f:0c:0f:43:6c:a5:c1:ac:a7:65:61:61:88:6f:c8:27:
1e:70:7f:a8:fe:35:d0:86:e0:b6:7c:2c:78:07:56:a1:24:a0:
a8:95:3f:60:28:c3:fb:88:78:d4:b0:b3:f3:91:76:a3:f3:ae:
74:3f:af:7c:c2:eb:29:d8:a5:8c:35:ee:db:33:18:f0:45:79:
ee:eb:2f:9f:7d:5d:2f:63:09:db:7a:89:08:27:cc:70:11:ee:
b9:3a:54:54:d4:dc:ab:c4:95:ce:b0:52:5f:d0:37:c1:b7:b2:
c2:5b:c4:d0:bb:5c:31:04:b2:63:0c:32:9d:7c:fd:f6:15:dd:
16:05:be:d8:51:21:4a:ad:11:61:47:c3:d4:3d:d7:b4:35:e5:
d0:14:26:e2:04:b2:ea:2c:07:1c:84:d6:43:93:c9:ec:37:56:
a9:3b:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:15:56 2025 by rpki-client