Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: B8hVH/DXOef5SdkJQwF1JM51wvPlCdboxkVG6sVKVBQ=
Subject key identifier: 45:48:3E:63:09:E6:C7:4E:23:0F:C0:7C:56:7A:0E:2C:3C:D6:52:75
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 0196B8C7D1C5EC8968C746A62362BA448952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0A4E
Signing time: Sat 10 May 2025 06:00:25 +0000
Manifest this update: Sat 10 May 2025 06:00:25 +0000
Manifest next update: Sun 11 May 2025 06:00:25 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: qVNODVanM0y3BkYU2VqCDbV7/GVS0dCgCERTdsLYzF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:d1:c5:ec:89:68:c7:46:a6:23:62:ba:44:89:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: May 10 06:00:25 2025 GMT
Not After : May 11 06:00:25 2025 GMT
Subject: CN=45483e6309e6c74e230fc07c567a0e2c3cd65275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:a1:a5:b9:12:d1:d4:f0:e7:57:b9:45:76:
61:53:cd:1d:a4:5d:8d:ea:1a:20:35:b0:3f:6d:2e:
40:2e:81:60:34:eb:2a:ba:dd:42:fb:7d:44:c2:ca:
e8:b3:81:76:30:8e:5a:c3:c0:4c:67:e9:bb:62:11:
8d:ff:e9:46:f8:b8:b6:5c:58:a0:97:ae:1b:b9:f6:
77:5f:22:5e:20:2b:a7:f2:ab:10:b3:5a:eb:f4:31:
c8:15:bb:94:8b:a0:c2:08:0a:07:f9:c2:70:e4:8a:
36:3d:61:b0:9f:d6:fd:fc:23:b7:01:40:05:f0:f0:
71:7b:fc:d5:92:70:94:d4:04:5e:e0:a5:e0:30:cb:
c5:6f:dd:94:57:5a:ef:32:45:1f:b4:78:b3:05:52:
f5:de:e0:89:c6:4b:84:0d:c7:a3:4f:28:4e:4d:86:
33:da:1d:dc:3c:78:b8:0a:f2:95:76:2c:8c:96:bf:
c3:9d:84:97:75:b3:44:8a:46:13:68:0c:4f:bb:87:
7c:3b:5c:41:d2:71:26:c0:c5:a6:b2:9a:da:c1:2f:
2d:89:be:94:6c:89:05:f0:03:45:8c:8e:35:0c:5a:
0e:90:a8:ab:8b:c6:65:a9:fb:d2:b2:37:fb:e0:6c:
f9:ae:17:65:52:59:08:94:96:e2:4b:91:84:f8:70:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:3E:63:09:E6:C7:4E:23:0F:C0:7C:56:7A:0E:2C:3C:D6:52:75
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:77:85:41:c2:bd:db:95:e9:72:af:2e:2c:3f:2a:3f:4a:
93:8a:c5:55:6e:ba:86:eb:f2:6c:f7:3e:c7:47:c3:8c:8a:90:
14:0c:93:cb:ae:52:60:b2:b1:1a:dd:bd:1a:de:40:8d:c8:41:
e0:2d:40:cd:ad:a7:af:f9:40:a1:0d:5e:0b:6e:ec:fc:da:d0:
87:1c:79:f3:07:3a:b7:32:34:a4:df:af:12:44:90:3b:53:bd:
5a:fe:6f:83:77:96:60:07:33:cb:9a:5b:6e:6f:20:60:bb:8c:
bb:78:db:2e:d8:de:00:64:a8:ac:0c:4d:69:88:b8:9a:e0:38:
d8:21:2d:40:7f:39:9e:1e:02:03:bb:08:69:8b:e9:d6:9d:0d:
00:55:b8:4f:c8:07:e1:cb:e3:f3:2c:34:a3:48:c2:ca:89:5a:
d8:d0:62:19:3e:b5:cc:0c:21:a1:6d:10:f4:d0:59:e5:59:20:
0f:4c:7f:35:77:bc:cd:61:09:65:58:7d:f3:37:98:95:99:6b:
0f:94:ed:54:ec:5f:b4:ea:7b:f3:3b:5f:01:61:34:0d:0e:6f:
a5:e4:6c:36:18:b4:41:4b:c1:00:3f:43:8c:9f:12:df:bf:c2:
b0:04:eb:ea:5a:4c:95:d1:f2:1b:95:97:d1:10:d2:f5:73:3e:
51:e4:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:41:25 2025 by rpki-client