Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: DZcqKUmR11qn7pr+ZPR3E1ZvkuV4DiFhHXSbOV5gmjY=
Subject key identifier: 03:BF:A1:3F:8F:3F:E6:AC:E3:F6:30:EB:8F:0E:A9:41:5C:69:FC:4B
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 0196A2E541B45A391C4B0F9C8A383DD52913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0C10
Signing time: Tue 06 May 2025 00:00:55 +0000
Manifest this update: Tue 06 May 2025 00:00:55 +0000
Manifest next update: Wed 07 May 2025 00:00:55 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: eY5g3e7yG/MCsU4SVlEpK41135q55bn8deJhY+hBlfI=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:41:b4:5a:39:1c:4b:0f:9c:8a:38:3d:d5:29:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: May 6 00:00:55 2025 GMT
Not After : May 7 00:00:55 2025 GMT
Subject: CN=03bfa13f8f3fe6ace3f630eb8f0ea9415c69fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:78:64:6b:a2:30:39:ea:b3:9e:46:3c:fa:
04:0f:60:a9:b0:eb:61:bb:f1:11:bc:03:b9:86:78:
ad:ed:53:97:b7:88:7e:35:dd:aa:c7:2a:b7:3a:58:
5c:a5:c4:2e:f4:ef:70:3b:46:88:e6:92:26:4e:d3:
8a:78:3d:a2:b8:74:ad:bf:12:00:bb:87:a2:f9:16:
22:c3:50:56:ab:c9:fc:7d:31:d2:cb:0b:91:17:91:
a3:27:ca:fe:11:b3:97:bb:f4:c7:ac:2e:7a:61:3c:
1a:7f:fa:53:59:59:1e:89:c7:94:07:72:23:8c:5f:
a5:c9:ce:17:f3:06:22:1b:45:0b:2a:b7:34:78:ec:
06:11:06:7f:0a:72:1a:f6:74:c3:bd:c1:66:ee:85:
f6:df:b4:db:46:f8:58:b1:c8:3e:85:a3:e0:db:10:
b0:af:8a:37:a6:76:01:d4:21:a1:fd:f5:93:bc:9e:
ca:b3:70:65:aa:da:40:f1:39:88:c7:38:ef:8f:e0:
9f:10:9c:0c:0e:c5:1a:2d:bc:af:9a:08:3b:75:fe:
07:46:28:47:9d:6f:05:9c:6d:1f:06:39:af:7c:39:
5e:70:3c:c9:10:8a:79:4b:40:79:27:26:89:e8:ce:
b3:65:e5:e4:32:c0:28:57:68:73:a1:be:e6:31:8e:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:A1:3F:8F:3F:E6:AC:E3:F6:30:EB:8F:0E:A9:41:5C:69:FC:4B
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:33:20:cd:99:b4:89:fc:d8:78:a3:9a:0e:b4:6f:9f:c5:
b7:34:57:7f:8a:aa:f1:ba:63:9f:c7:f7:fc:75:9f:1f:c7:9e:
dd:4b:9f:62:0f:b0:00:4d:cc:54:99:e2:ab:28:24:81:dc:e4:
43:c6:13:a5:55:f9:9a:8d:4f:e3:39:1a:3e:8d:12:6f:81:61:
55:7f:9d:8a:21:5e:c8:cc:c3:dc:fe:fa:63:63:1b:b9:ae:c8:
0c:95:6b:ca:f8:f5:cf:94:05:79:f0:25:51:8d:2e:91:08:0f:
d6:9d:11:6e:ac:bf:33:14:5e:ab:3b:b2:d2:34:d5:14:a6:cc:
ec:cb:d1:81:d6:eb:7a:cc:8e:4e:95:e5:ab:6c:af:e6:01:ed:
7c:65:16:17:fa:f7:63:89:65:52:2e:cc:80:a6:74:ef:dd:fe:
f4:53:bb:52:b2:6a:bc:be:e6:50:bc:52:d5:6d:dd:9a:7d:08:
fc:7e:56:fc:28:ca:e8:5b:c0:b2:17:8f:63:2b:31:53:2b:e6:
a2:81:cc:69:45:51:d3:7d:bc:46:c6:1e:b1:81:7d:bf:fd:4e:
b8:be:c7:21:fd:4d:f6:0a:3a:c9:11:d3:36:4a:46:5b:2f:08:
89:1e:74:c0:14:a5:af:67:f3:1c:45:32:36:81:44:5d:8b:26:
b2:a2:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:03:56 2025 by rpki-client