Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: yi0tK0DNqO92hXPx7N0PLhJabm+/0DihA18A5FHRmEE=
Subject key identifier: 75:E8:10:64:14:40:77:9F:4A:19:F6:AF:92:94:70:20:38:3D:6C:D0
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0196B9A42C25D0692A7E44A453438CD88970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 0FA2
Signing time: Sat 10 May 2025 10:01:05 +0000
Manifest this update: Sat 10 May 2025 10:01:05 +0000
Manifest next update: Sun 11 May 2025 10:01:05 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: ikD+81X8RLXufhLFRAZCWCUFn+oO1NM/9Shjswka310=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:2c:25:d0:69:2a:7e:44:a4:53:43:8c:d8:89:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: May 10 10:01:05 2025 GMT
Not After : May 11 10:01:05 2025 GMT
Subject: CN=75e810641440779f4a19f6af92947020383d6cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:48:01:25:2e:59:93:d2:ca:f4:7f:51:48:
c4:63:c0:18:bf:01:77:4d:9c:0b:77:76:99:47:d3:
d0:0d:2a:c2:9d:6a:97:da:b4:3b:cd:c2:44:c0:52:
ef:ea:75:a1:43:f2:09:40:a1:ce:af:d5:61:61:e5:
59:2c:24:8f:7e:0c:4d:21:9e:a6:36:ff:28:b6:25:
cd:bb:e8:e6:5b:40:95:74:f8:5c:3f:17:0f:2d:e8:
a5:d1:b5:e9:e4:43:b5:5d:6c:e3:8a:43:19:3d:11:
e2:14:51:22:69:f8:b5:1a:ce:0d:93:21:56:da:ff:
0b:bf:63:40:91:9a:54:ea:ca:e1:15:62:41:ab:17:
42:ee:02:8f:ca:89:9f:38:62:5f:cf:e9:ed:00:3f:
20:06:45:03:da:81:97:fa:b8:b8:ae:06:58:f9:50:
1a:4c:b1:ad:87:3e:8e:37:79:db:68:89:92:c4:cc:
d4:be:f0:7f:0e:f5:7b:5e:f8:9b:a1:a2:f7:a7:ee:
60:bc:d5:c3:3f:13:6e:37:0d:55:7f:b3:8b:70:1b:
75:a0:95:cc:cf:51:01:06:5b:7c:ac:de:da:9a:e3:
25:69:a8:31:87:1f:95:c0:9e:df:46:79:50:6f:ce:
71:d9:7e:96:11:cc:5d:f3:39:b5:bc:42:a0:b2:eb:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:10:64:14:40:77:9F:4A:19:F6:AF:92:94:70:20:38:3D:6C:D0
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0a:0a:d7:5e:f8:8e:4a:c6:de:9c:52:36:bf:db:e0:6c:48:
07:c8:68:4b:66:94:bb:08:a3:ce:0b:c0:69:6f:84:59:71:27:
17:26:44:19:84:5a:fa:b7:b5:36:af:5a:fe:ef:dd:fc:ce:78:
fd:1e:87:00:d9:06:ff:80:1a:de:c1:41:88:b8:4d:6e:84:60:
e0:d9:ec:74:b8:f6:a7:dd:b7:7d:8f:a3:e9:21:93:6c:eb:24:
96:8a:a3:18:f8:e4:d7:70:64:af:ba:41:f7:39:9c:54:fa:dc:
da:8b:96:f1:50:a3:6f:35:b3:b7:83:33:f2:80:68:7c:34:c8:
61:b2:a1:f8:02:b8:73:b1:6f:bb:3d:02:fa:b3:81:26:fd:82:
eb:9d:31:95:e6:2a:92:57:86:86:c1:71:85:0d:f9:c6:9d:7f:
39:c2:00:5e:af:8d:a3:29:55:ea:25:94:31:5a:92:9f:11:08:
f1:fe:33:26:10:f3:f3:14:19:0f:6e:f6:60:84:c7:ad:34:b9:
25:a6:28:29:1d:ce:a3:e8:7e:9d:b0:f7:58:ae:32:8d:f4:6d:
97:6f:a4:8e:07:55:3c:60:6d:b8:6f:19:87:50:d4:9b:11:ee:
dc:d1:72:11:b7:04:bf:77:7e:6e:c9:56:38:1c:7b:f5:73:9f:
c9:94:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:42:26 2025 by rpki-client