Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: QpSaXz/Yu2lbfiwRQDxgQeLd5Wr0lU98mvqyW1+bGwc=
Subject key identifier: C9:DD:5B:49:00:4B:5D:BC:96:41:21:5B:DD:84:9F:47:A1:8C:A1:F5
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0196B40F64268552409075108412F264C0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 08:00:29 +0000
Manifest this update: Fri 09 May 2025 08:00:29 +0000
Manifest next update: Sat 10 May 2025 08:00:29 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: OTnGYl9YDaOfuP0cB1rA2JCHCstXoX5syGb9R1hSTZ4=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:64:26:85:52:40:90:75:10:84:12:f2:64:c0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: May 9 08:00:29 2025 GMT
Not After : May 10 08:00:29 2025 GMT
Subject: CN=c9dd5b49004b5dbc9641215bdd849f47a18ca1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:aa:7d:15:dc:19:7c:0e:bd:0b:cd:2b:03:
98:b8:36:6c:75:ef:1a:aa:58:3a:36:cc:9e:f7:5e:
98:1e:26:59:b5:53:70:39:c5:29:67:5c:ba:46:c2:
4c:8c:bf:c3:b1:5b:9d:5e:5b:ec:ef:e8:e8:79:2b:
bc:62:60:ad:80:65:6d:ca:20:ee:c6:7b:d3:aa:c1:
cf:96:6b:34:fd:b4:07:6e:a4:16:26:32:62:87:cf:
28:ba:40:ca:c3:5f:8f:12:3a:b5:f8:33:84:90:d3:
ec:cd:60:1d:0f:1f:3d:0d:37:60:d7:ef:88:a7:5d:
55:8a:88:03:82:b1:1c:c5:37:57:d4:55:14:97:0a:
9e:f2:88:3b:89:50:76:e9:ea:b3:24:0f:84:0c:32:
7c:67:ca:c0:f6:e9:90:e4:73:e3:15:e0:b5:89:43:
a0:4e:d9:f9:e3:90:e7:f9:e8:5f:da:48:4b:25:36:
c2:df:71:92:f3:f4:b6:64:fe:16:f8:7e:f8:dd:03:
b6:91:ed:6e:c8:29:44:91:38:a0:73:b5:27:9a:6c:
ec:76:26:9d:8a:28:86:88:0b:ac:ec:43:ae:ba:b3:
36:08:06:a8:fa:e4:85:48:4e:15:a2:fc:51:12:53:
82:6e:d1:9a:d7:bf:99:a2:b1:e1:1e:d4:dd:ad:87:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:5B:49:00:4B:5D:BC:96:41:21:5B:DD:84:9F:47:A1:8C:A1:F5
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7b:19:54:60:bd:4a:2c:f9:87:55:e0:66:8d:57:a7:26:ad:
37:43:02:13:f7:bc:a7:19:0f:56:0d:0b:e0:45:c9:10:9c:ed:
9c:e2:ed:93:e8:8e:16:41:c4:07:28:d5:16:36:48:03:25:af:
6c:1e:b1:7d:34:5d:41:28:01:b7:ba:4f:2c:6d:48:65:53:43:
c4:7e:3a:5a:04:f6:1d:c9:6e:6f:a2:8e:e5:5a:f6:d6:77:78:
a2:72:bb:82:eb:ff:15:eb:e9:8c:94:6a:87:b5:e1:8e:26:09:
02:ed:d0:49:bd:38:51:4e:2f:32:28:4f:0c:d9:05:4e:14:89:
6d:1b:55:ae:7b:82:d4:0d:e6:e0:7f:48:21:97:d2:76:af:1d:
9b:a3:9c:82:99:d4:35:8d:83:3d:24:a6:ab:45:88:76:5e:d0:
70:1c:b9:36:4f:9a:63:66:f6:8c:30:75:27:b7:3e:27:7a:a8:
a7:00:c9:f4:a1:0b:33:e1:22:15:ce:f1:f9:55:2f:fc:5f:97:
bc:cd:c7:20:58:91:b1:40:3f:9c:46:04:5d:f6:23:77:9a:97:
cd:3d:5e:0c:39:a1:e1:cf:44:8c:47:6c:ea:ce:71:b0:17:9c:
3d:e3:eb:61:2d:db:30:56:1d:ed:26:67:37:fc:ac:8b:3e:04:
38:28:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:10:34 2025 by rpki-client