Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: yF9Zp25EJ3PKMlxWIRm5JLYJ+KZ9JdEJVdUgbnfv4N4=
Subject key identifier: 5F:91:D4:EB:B9:DF:89:A4:19:13:2B:A4:30:AE:47:DE:70:0A:B2:78
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 0196AF572B60BA7A516CE2D4AD65569AF2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 0490
Signing time: Thu 08 May 2025 10:00:47 +0000
Manifest this update: Thu 08 May 2025 10:00:47 +0000
Manifest next update: Fri 09 May 2025 10:00:47 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: T+RaYu7sraprs5lPPH7Z2n7Td45ZO7Yo3vdtwhP0FCs=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:2b:60:ba:7a:51:6c:e2:d4:ad:65:56:9a:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: May 8 10:00:47 2025 GMT
Not After : May 9 10:00:47 2025 GMT
Subject: CN=5f91d4ebb9df89a419132ba430ae47de700ab278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:52:d3:e6:43:32:1c:eb:5f:3e:63:0f:d3:
79:6b:1d:a4:fb:de:0d:04:28:e9:22:37:9d:b8:e1:
c0:06:bb:26:bc:d1:16:ec:b0:e5:f6:3d:a3:f1:15:
64:c4:ba:e5:da:97:8c:cb:1c:85:7e:b4:57:42:82:
52:b7:21:19:f0:dc:c7:d7:ac:a0:ae:7d:84:01:f9:
08:92:bd:48:91:3c:48:81:0d:40:4e:7e:ce:b9:de:
9a:64:e5:ed:fa:b0:d2:e8:e9:82:ed:fc:3f:60:11:
f1:bc:e4:e6:0e:11:4a:4e:80:fc:73:ed:d0:47:0d:
89:7f:cb:63:32:a2:e7:53:80:fd:10:33:41:dd:39:
4f:49:5c:9f:41:b8:22:7b:06:dd:09:5f:7c:8a:f8:
84:dd:54:d9:5c:71:f4:66:2b:97:6e:f7:b0:22:3d:
aa:7a:86:59:4a:e0:d0:dc:d4:91:85:41:0f:5c:c0:
d4:cd:19:56:be:74:81:60:35:8b:f9:7b:7f:3e:ad:
c8:be:ab:e6:36:3d:36:59:34:c5:5c:1b:dc:f9:65:
1a:97:44:49:f9:7a:8d:8f:dd:9a:d2:9d:14:43:ac:
0b:66:e9:8f:4e:0e:71:ea:a7:fa:4e:2a:a2:0e:fd:
b4:60:93:17:92:7f:c3:7a:8a:f2:cd:b8:4c:64:c5:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:D4:EB:B9:DF:89:A4:19:13:2B:A4:30:AE:47:DE:70:0A:B2:78
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:df:bf:a9:2b:f2:bd:b5:9b:b0:0b:24:0d:2d:93:0e:6e:
b6:26:ce:fa:1e:b2:e4:5d:12:79:d1:96:4f:59:10:24:0e:79:
41:eb:09:a0:57:6d:61:06:6e:e6:40:01:24:c4:6d:a0:86:2c:
17:d2:02:76:ae:f1:66:cc:be:97:19:ba:b7:36:e7:b2:1e:8e:
27:a5:9c:85:61:93:2d:3f:12:8b:74:fd:35:3c:29:d3:52:80:
fd:9b:70:74:89:22:3a:82:c3:ec:d6:11:6d:92:b4:47:36:f3:
39:83:f1:78:8f:ce:fb:f3:38:cc:96:20:c3:65:dd:fa:d2:a8:
4b:fe:71:51:aa:56:3c:f8:82:78:ce:69:e0:d7:42:d3:86:61:
2e:56:90:d0:04:75:55:1b:33:ea:fe:d8:3e:c6:ad:8a:cd:50:
39:b7:53:ff:24:84:3a:d6:a9:dc:90:95:63:02:c5:55:8e:59:
81:55:06:0d:c4:aa:68:f2:a5:e9:12:46:f6:cb:2d:31:5b:0f:
9b:88:70:7e:d1:a4:6d:1e:55:4e:6e:2c:9e:7e:ec:35:05:c0:
56:72:ce:2b:02:85:d0:31:2a:83:d1:9d:06:32:3f:b5:18:5e:
7d:c4:18:8f:30:5d:14:81:17:94:35:e2:d5:ae:e3:5b:39:c7:
fc:61:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:10:58 2025 by rpki-client