Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: Pz9MqcaElC1ygixtZE8VdX4GhI8CQExYsngHtQNr4dc=
Subject key identifier: AF:1C:B0:41:72:B7:D1:3F:8B:82:47:EF:4A:AB:CD:0D:86:C1:31:72
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 0196BC00562B7FF3D8AB1EE11BEA7A551628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 0677
Signing time: Sat 10 May 2025 21:01:00 +0000
Manifest this update: Sat 10 May 2025 21:01:00 +0000
Manifest next update: Sun 11 May 2025 21:01:00 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: 0eUpP0+z28vGvzMFGeTHVqjYnY566a30aio4WuGZeMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:56:2b:7f:f3:d8:ab:1e:e1:1b:ea:7a:55:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: May 10 21:01:00 2025 GMT
Not After : May 11 21:01:00 2025 GMT
Subject: CN=af1cb04172b7d13f8b8247ef4aabcd0d86c13172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:33:4a:cb:d5:4c:a9:79:85:f9:ac:0e:a9:
30:45:2c:b3:90:b3:5c:c9:18:0b:02:e1:c5:79:a5:
4c:d1:87:0a:bc:31:42:62:a4:7e:5f:26:98:4a:63:
a4:f5:d6:e0:ac:b9:e8:26:e1:4e:25:d8:58:08:7c:
2e:8c:c4:c9:75:79:1d:50:7b:d8:4e:50:08:ff:ec:
ff:f9:e9:77:ab:f4:86:5a:72:a1:b1:e2:cf:46:96:
a4:af:09:f8:9f:a4:6e:49:83:ff:ab:16:a4:19:60:
58:64:0c:35:38:26:10:6d:7e:b0:d6:f8:b8:a3:39:
f2:ac:b3:e6:57:2b:59:b1:a7:b8:29:db:02:82:1f:
06:83:30:e2:57:0c:b0:32:06:23:b0:b7:77:e3:89:
ba:7d:4b:2a:ed:aa:df:19:37:2b:71:2d:00:87:99:
d8:69:a3:cd:3a:3c:db:d5:fe:94:19:98:19:10:67:
cd:1a:1b:c9:ee:d7:e4:c9:7b:1c:84:c8:11:77:f2:
5f:b8:73:cb:00:e1:4d:28:c7:ab:f8:9b:93:bc:bf:
21:b9:16:57:5a:ba:e6:69:80:90:02:63:1e:63:7e:
eb:c7:ed:55:91:24:ee:d3:85:9e:b4:54:2c:ca:c9:
1c:23:ab:22:39:5e:1c:c6:e3:7a:0e:cc:22:d9:16:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:B0:41:72:B7:D1:3F:8B:82:47:EF:4A:AB:CD:0D:86:C1:31:72
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:19:8d:63:16:84:a7:20:76:80:1a:67:69:27:bc:2d:14:fb:
e8:1e:4a:d7:cf:6e:0c:e6:ed:c9:51:3c:f2:51:f2:ec:46:17:
f3:8e:99:8f:df:d8:a4:7b:8a:5e:f7:b5:e5:a4:a2:b3:0a:ba:
c2:f3:c6:51:d6:6c:38:c5:5c:eb:16:d7:62:d2:38:3e:49:4b:
de:38:4e:0d:a0:48:8f:4e:79:e6:d1:38:22:f5:a6:99:7b:5e:
6b:ff:fd:08:7a:8f:9b:d6:1e:e4:4f:42:02:bc:79:3f:4b:cb:
da:37:ea:2a:53:c3:2d:f9:02:14:01:04:30:9f:8e:5f:d9:ff:
42:1c:77:2c:5b:af:5e:f7:23:f7:cc:8d:b1:fd:b5:34:4e:08:
4a:3e:12:3d:19:0b:01:7c:2d:93:e4:9a:5c:76:19:ca:56:72:
66:9b:58:b5:ed:1c:fe:1b:2a:e4:15:75:a8:a5:bc:5a:f6:62:
a6:5a:be:dc:69:fe:31:d5:8a:a1:74:4d:54:92:f9:86:5e:95:
52:74:3b:ae:2c:db:5a:ab:87:d7:67:b9:b7:81:64:50:9e:aa:
2d:a8:72:6a:ad:e3:06:a5:2e:9e:c8:c4:d8:94:1b:87:9c:c5:
91:2a:58:8c:59:7c:7c:48:96:d4:8e:ce:0f:6e:17:0a:af:f4:
87:f5:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:44:43 2025 by rpki-client