Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: wHCSuraQCzZFk7oc7SNr2grVKYdnD97/ChbCnQxOFaw=
Subject key identifier: D1:65:CA:94:23:97:BA:FF:36:AB:04:39:FA:DB:AD:E7:FD:69:D8:FC
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0196B6346ACB6536142C0B5C3068DFE7F444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0CDE
Signing time: Fri 09 May 2025 18:00:10 +0000
Manifest this update: Fri 09 May 2025 18:00:10 +0000
Manifest next update: Sat 10 May 2025 18:00:10 +0000
Files and hashes: 1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: TtCFMMgkSu2xFxC20HboSUJPqakJg0qvPr8O6UB7mPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:6a:cb:65:36:14:2c:0b:5c:30:68:df:e7:f4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: May 9 18:00:10 2025 GMT
Not After : May 10 18:00:10 2025 GMT
Subject: CN=d165ca942397baff36ab0439fadbade7fd69d8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:f6:c6:1f:3c:95:0a:1c:9f:74:c9:a1:c8:
04:50:35:34:a2:2f:da:e5:3b:27:f8:7a:27:48:5a:
4e:18:81:9b:cc:c5:5c:3d:8b:86:f8:c1:15:f1:1d:
25:83:5d:e9:b8:5d:bd:b1:e2:ea:16:b7:55:6f:22:
fc:18:4c:6c:df:b1:ae:dd:06:3b:b2:30:b6:ee:00:
e3:51:81:0c:04:5d:fd:4a:df:b7:60:91:14:b6:6f:
a7:cf:f0:c7:35:bb:ea:6f:95:a7:b6:45:73:98:a1:
74:34:d6:8b:e5:b1:53:23:55:a1:6d:05:17:a9:e8:
84:65:7c:34:1f:9a:46:4c:62:09:5e:fe:7f:aa:a8:
bd:f5:af:50:fc:11:2e:76:d1:af:81:18:d3:ec:a5:
71:e3:12:90:fc:02:49:22:e9:e8:20:e4:bf:17:bd:
6a:c0:3c:57:d2:40:6b:94:f7:92:e6:bd:d7:d5:1d:
10:ab:8f:38:ba:b8:00:02:e2:76:08:c2:e4:8e:a1:
93:4f:27:84:db:f0:04:05:fd:d0:c1:6a:40:92:7b:
a3:11:da:74:4c:2d:58:54:1d:0c:d8:0c:58:a0:f1:
72:0b:ae:b6:d2:33:d3:eb:0c:cf:7a:ca:7e:64:1d:
0b:59:5e:d8:df:02:7a:1d:3b:89:87:a4:c8:15:b8:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:CA:94:23:97:BA:FF:36:AB:04:39:FA:DB:AD:E7:FD:69:D8:FC
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:db:c0:24:25:33:45:5b:0a:e8:e6:64:25:32:8a:3b:41:c8:
12:bc:4f:3a:a5:9a:a0:54:68:e8:13:a3:8b:e2:af:39:b3:49:
71:e2:e3:42:5f:0a:0f:bd:af:bc:81:1c:13:97:d2:d5:16:c3:
82:2e:10:81:77:e1:be:f2:25:6f:b5:90:1c:3f:8a:c1:eb:95:
df:19:4a:b6:a3:a4:a3:3e:66:af:1d:6c:74:00:bf:83:17:27:
2d:51:87:e5:9d:6c:f4:8b:bf:4f:dc:a1:23:7f:13:a4:19:31:
fd:c1:a5:76:73:3e:98:fb:0c:59:bb:8d:71:b3:7f:94:91:64:
1a:96:cc:0f:ef:f7:f8:d1:cb:64:73:15:00:8b:27:f9:6f:fb:
0c:a2:08:ee:82:47:6e:ea:9d:1d:0f:d3:7c:8c:c5:c0:8e:8d:
ee:50:6f:ab:16:e7:71:5f:ac:13:7d:05:0e:68:5a:5b:0e:29:
43:c2:a4:2e:bf:e2:c6:b6:8f:0c:01:84:52:b9:1e:68:cf:e7:
06:bf:96:e3:02:67:10:a3:9f:79:5b:f2:29:c0:15:10:90:4a:
85:e0:a8:a1:2c:c4:fd:67:4f:03:e9:67:5f:f9:7e:05:2f:fa:
36:c1:a9:ae:a1:2f:f8:f1:01:d1:8c:3f:e5:12:4b:00:62:6e:
86:27:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:52:52 2025 by rpki-client