Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: gjIO4x4mgowrHoLqmxa+FRjKi/169KiD3LEvBxSUPvA=
Subject key identifier: 30:18:76:F2:6A:7C:91:F0:D9:B8:0F:3D:AF:E2:F3:AF:87:8F:B5:02
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 0196BF00C954A6C3E1A35CD8DFC26CCFC944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 11:00:21 +0000
Manifest this update: Sun 11 May 2025 11:00:21 +0000
Manifest next update: Mon 12 May 2025 11:00:21 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: H0DWHnIxEQG92lbjPQTxLKE13XBpWq0eGf+yfcVGVd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:c9:54:a6:c3:e1:a3:5c:d8:df:c2:6c:cf:c9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: May 11 11:00:21 2025 GMT
Not After : May 12 11:00:21 2025 GMT
Subject: CN=301876f26a7c91f0d9b80f3dafe2f3af878fb502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:27:44:ba:0e:f4:03:25:99:2f:87:e1:cd:
94:af:07:a8:ac:b7:2e:8f:73:38:d3:86:60:75:f0:
52:af:67:b6:e4:cc:71:fd:34:bf:bb:83:58:a3:1e:
dd:32:5b:8b:12:d3:e4:43:11:d3:18:e7:81:a0:e6:
ba:b8:0c:90:01:21:31:c3:42:70:42:e6:dd:78:71:
ec:39:c0:88:7b:16:6f:0b:d5:09:ed:58:9c:3e:3c:
57:ed:83:64:9c:92:43:96:8f:66:d3:98:3f:70:79:
34:6c:66:b2:47:f3:74:a5:8e:a3:e4:42:a7:c1:ad:
d1:1d:62:41:50:6b:6d:d2:12:e7:65:84:43:e5:57:
14:35:93:46:d5:40:67:67:74:53:5c:4c:bf:7c:9b:
93:00:79:21:09:b7:0f:83:7b:b8:45:78:e4:17:70:
74:72:93:28:c4:1d:a7:17:37:a1:2b:a1:38:da:58:
34:ae:39:1a:f4:e0:b9:03:d5:d0:37:d7:e1:15:65:
69:e0:0d:f7:1a:a2:90:c4:92:a1:7b:2c:56:e5:08:
20:a5:cd:59:4e:a5:8d:c3:06:f2:a4:4a:60:e0:e6:
eb:f1:ad:c7:4d:12:fc:05:ce:c8:53:a8:e5:a6:26:
a9:0e:07:23:00:32:47:c3:19:5b:d4:61:59:b9:60:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:18:76:F2:6A:7C:91:F0:D9:B8:0F:3D:AF:E2:F3:AF:87:8F:B5:02
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:d9:f1:80:96:1a:dc:ce:4c:e1:b0:28:38:53:4e:ae:7a:
dd:6c:62:5d:ba:b0:96:ce:53:76:11:73:43:39:67:77:c1:04:
0c:0e:84:d9:02:36:33:8e:33:c5:68:d9:35:c6:2a:80:f5:2e:
7f:ce:ae:df:6a:db:d1:75:8c:9d:44:5d:4c:24:31:a5:0a:58:
41:e8:7b:ab:8b:31:91:cd:d1:1a:53:0f:46:bb:dd:c9:6a:98:
de:3b:28:16:6b:8a:82:67:e0:47:64:cd:80:65:76:2a:fe:9e:
05:ae:90:74:28:c6:cd:6f:4b:7d:f9:2f:5a:a6:71:e1:0c:11:
91:ea:51:14:a9:69:5b:1f:d3:05:d3:fa:da:be:1a:78:03:61:
d3:28:e5:17:be:e8:0e:26:10:fb:16:97:05:4a:79:8c:c8:33:
50:7a:97:65:64:4b:56:5e:e7:5b:63:e2:0d:2a:eb:5a:13:d6:
31:2c:2d:ff:8f:c8:25:32:cc:de:14:83:77:c8:d5:80:c6:c3:
5a:99:8a:d9:1d:43:3a:ee:d0:d6:f1:17:87:55:ad:b4:ab:34:
4c:6a:3d:a0:a3:9e:70:0a:b3:2d:ac:e8:ec:2b:d0:d1:33:1d:
36:af:52:1e:89:0d:f2:70:60:ce:6c:47:c3:19:70:f7:30:13:
0f:e4:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:01:09 2025 by rpki-client