Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: 4kWTznLucxQZkmzOikXvjNryY+D0uguN67Hm3pKaGG8=
Subject key identifier: 98:EA:36:78:76:AE:C3:6B:CB:AA:91:A6:58:28:14:A1:82:34:5F:D7
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 0196DB1CEA02CB1E1B3C7F9EF62C3FA040CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 02A3
Signing time: Fri 16 May 2025 22:00:27 +0000
Manifest this update: Fri 16 May 2025 22:00:27 +0000
Manifest next update: Sat 17 May 2025 22:00:27 +0000
Files and hashes: 1: 48SAL-XLUksWWK1voy4rKInz7oY.roa (hash: gFJO835mNcJuKRXk34iwBhwCN0pZ40KaHdrECvT9LmA=)
2: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: Id3b9BFNYMXs9Ga2zNYMM2lD/p8elB9sw0MkYSrOD4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:1c:ea:02:cb:1e:1b:3c:7f:9e:f6:2c:3f:a0:40:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: May 16 22:00:27 2025 GMT
Not After : May 17 22:00:27 2025 GMT
Subject: CN=98ea367876aec36bcbaa91a6582814a182345fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:eb:02:bd:8f:71:cf:a5:1e:fc:40:a3:1b:
7c:2d:b0:c1:ab:a8:8a:9f:03:26:2a:b4:24:f1:57:
bd:14:65:27:11:0d:34:f3:8e:a1:7a:bc:78:5f:9d:
e0:84:c9:99:84:4f:23:6c:20:81:64:9c:80:81:4a:
63:07:8a:68:ed:9f:40:3a:99:58:e7:65:02:86:30:
c6:d9:f6:d9:f0:58:45:64:43:26:28:34:d3:32:32:
60:9d:ad:58:0d:ae:5b:ce:a6:e5:55:71:d0:93:91:
d2:63:be:19:fb:4e:aa:22:65:f0:13:d3:d2:a3:8a:
e7:40:8d:30:22:46:cf:28:1a:e8:76:09:b8:25:c3:
1c:4b:84:cd:5b:f1:ac:56:99:2a:8d:ae:ca:75:47:
e4:0e:63:bd:73:ab:c9:ed:9f:4b:43:50:ff:7c:71:
32:fa:85:c2:5b:3e:a4:8b:b3:e4:b8:a2:ba:b7:2e:
e0:29:1d:ab:2a:8d:30:00:b7:e8:3f:9d:45:1c:4d:
fb:f0:36:34:7f:af:71:1a:a4:bd:cd:4f:ca:c3:5f:
b2:45:f5:03:22:56:2f:45:6a:0e:6e:45:ae:54:93:
5f:6e:e3:f7:c2:7a:3b:20:6a:0a:a8:6e:bd:98:bb:
14:0d:32:17:ad:4c:18:63:e4:4e:85:9a:9d:eb:ea:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:36:78:76:AE:C3:6B:CB:AA:91:A6:58:28:14:A1:82:34:5F:D7
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:bc:6e:72:6c:7e:cd:f2:8b:4a:25:3a:6a:36:90:00:c6:
e9:d3:9d:06:eb:1a:d0:4b:4b:c9:cf:1a:7f:ce:2e:65:da:e3:
0d:b2:09:d1:c7:f1:3f:42:a6:a1:be:fc:17:25:c1:17:de:46:
91:1d:1d:13:0f:27:c6:78:42:17:3a:2e:55:99:0a:24:4f:3e:
cd:b2:f2:94:0c:3a:97:23:fc:5c:73:f9:4e:91:99:f1:fa:71:
25:df:fc:f2:60:55:0a:c2:83:1f:30:60:75:b6:b4:e7:2e:9d:
51:ef:76:e5:44:71:20:43:d1:29:c0:c5:b1:2a:41:0d:b1:39:
df:9f:c3:b3:6a:e6:54:a2:e5:e3:81:13:a3:f8:ef:b5:a5:9e:
a4:9e:f3:a9:52:da:8b:11:fa:b7:20:8b:aa:0f:43:4c:14:88:
5c:b0:5a:a4:8c:ef:99:8b:97:69:da:2a:76:4b:e0:8f:29:bb:
3b:13:c3:32:2d:b9:a5:f6:c8:02:b1:fa:68:1f:60:82:5d:4c:
a1:4d:2f:20:dd:b6:75:d3:06:a1:8a:2e:8b:e8:c2:27:24:0b:
b3:b3:19:94:3d:9d:9d:49:f9:e4:71:e4:3d:e4:ec:31:50:44:
d5:9e:6f:80:e0:5f:e1:76:cc:15:53:97:4d:de:f8:03:6d:c5:
74:44:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:28:01 2025 by rpki-client