Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier: CNlokfFnRf9vbzh8agd1+dKICrsSogrbrm2mkEteA7g=
Subject key identifier: 59:5F:46:5E:11:72:87:F4:B0:A1:6A:98:E7:71:F1:64:D4:08:A1:4E
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 0196BB920B2BC7DC069AC0A671B8EB325DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number: 052C
Signing time: Sat 10 May 2025 19:00:32 +0000
Manifest this update: Sat 10 May 2025 19:00:32 +0000
Manifest next update: Sun 11 May 2025 19:00:32 +0000
Files and hashes: 1: Y4sICU63ha9zJlhS7qW2J4u6uws.roa (hash: 8r93NKrnyk82rf3aCFqULEgo5C+BAoN2QmF3G7aUJlU=)
2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: Tv2ff9kl0bmYl5aQIq3+iiiCG/vdLgENaE3C58RC2ug=)
3: wIm0A8W2Phgt1OO5oeTqTztju0g.roa (hash: NlYQ1T7mFBGddxYYpTaeqb8uAIXp1pec66MhW6UVFnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:0b:2b:c7:dc:06:9a:c0:a6:71:b8:eb:32:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: May 10 19:00:32 2025 GMT
Not After : May 11 19:00:32 2025 GMT
Subject: CN=595f465e117287f4b0a16a98e771f164d408a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:17:8a:cf:d1:37:dd:c1:f0:54:53:01:8a:
b9:e3:d2:cd:d1:a5:88:0f:98:3c:14:39:16:49:4e:
fa:62:0a:db:92:58:00:5f:00:4a:f3:5c:9f:9d:23:
5e:79:45:4f:ab:4e:51:ad:1a:08:76:da:46:06:9f:
99:65:ba:11:ff:54:0d:be:65:87:bf:16:40:4b:17:
c5:e7:c7:ca:86:0c:1c:c2:cc:fc:c8:a4:65:e0:35:
58:74:7f:64:27:28:fc:1b:79:7d:57:5f:89:4a:0d:
85:b3:d6:d4:69:f9:a0:98:05:36:e6:0e:ca:8d:0d:
94:ed:d7:23:db:c4:9e:f1:8c:5c:30:ba:2a:63:4d:
85:e5:27:3c:11:dc:61:a5:9a:6b:c7:a4:90:3b:e0:
ea:e4:d2:43:ff:52:9c:e2:6e:c6:ee:cd:02:03:96:
85:98:7d:2b:e8:a3:bb:66:a9:8e:8e:1c:e2:29:1d:
4a:56:8b:a3:31:4e:e5:b3:bf:0e:dd:df:f8:8f:d7:
4b:91:c0:2c:4f:3b:64:de:6f:3d:e6:16:9d:f7:71:
cf:97:e7:f9:c2:e9:69:cc:37:8b:dd:5d:d0:a7:f9:
22:8f:4d:d5:f6:7c:46:f5:83:d0:b9:2b:49:8e:94:
e9:63:d4:2f:ea:f7:f4:ee:6b:21:16:99:4a:ab:4d:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:46:5E:11:72:87:F4:B0:A1:6A:98:E7:71:F1:64:D4:08:A1:4E
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:f6:7c:97:13:6d:1e:a8:03:7c:65:46:35:11:d2:54:b3:
9c:b9:dc:93:cd:62:12:ac:d1:ea:81:a9:95:01:6c:a2:4a:8d:
3e:a8:a8:ee:f7:86:0a:06:b7:92:36:60:08:87:16:62:80:4a:
d1:42:0d:91:22:0d:53:77:3f:01:f7:9a:61:40:c6:e4:fc:f4:
8f:cd:0f:f0:3c:c8:23:ab:3c:47:15:cc:30:8c:01:53:fb:5a:
e2:66:6d:85:56:2a:9a:93:7a:c7:f3:f5:e0:57:86:8f:06:dd:
6a:2c:96:5b:0d:4d:72:93:b4:05:10:22:92:d6:3a:fe:6c:fe:
ca:5c:13:7c:bb:3e:98:dd:1b:58:99:25:e0:b2:8b:2f:ca:91:
5f:23:2a:7d:bb:bc:65:cc:56:26:62:19:7b:68:2c:92:bb:00:
32:79:c1:27:f3:d2:5e:20:82:b9:e3:4b:d6:ec:df:98:32:bb:
18:59:52:08:13:f0:be:e7:2c:53:95:a6:4f:ef:72:ad:b7:bc:
57:b1:6b:95:85:fa:15:3b:85:ff:b2:d6:c4:e4:77:51:8a:2a:
61:64:de:14:77:f2:fc:a8:b0:d7:cf:f9:f1:82:1f:4a:86:cd:
c4:c2:2a:f5:dc:af:99:67:3c:d6:47:16:c4:ba:55:a5:3b:7d:
90:0c:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:07:11 2025 by rpki-client