Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: APAks8WLtkaHOuYWpF+XVVdwdEXIh2Z8AtUSpRrPlhs=
Subject key identifier: FB:1B:5D:CE:7D:CC:6A:8D:6D:A8:06:11:C7:7F:77:CB:A5:3F:5A:91
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0196CBAA36B75B28F7967584D16A0881DA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 22:00:52 +0000
Manifest this update: Tue 13 May 2025 22:00:52 +0000
Manifest next update: Wed 14 May 2025 22:00:52 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: ADwx5LvP5ZEBPrHlW7bZsJBeaU++bptCMaag/FUDzhY=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:36:b7:5b:28:f7:96:75:84:d1:6a:08:81:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: May 13 22:00:52 2025 GMT
Not After : May 14 22:00:52 2025 GMT
Subject: CN=fb1b5dce7dcc6a8d6da80611c77f77cba53f5a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:1f:9c:e7:54:be:d0:b9:2a:c1:30:ba:56:
72:9e:f4:14:8a:77:f8:e0:1a:cd:01:25:f2:a6:5d:
ca:a9:bd:66:58:a1:9f:f7:01:ed:93:ad:f0:43:22:
8c:32:d9:3f:a9:7e:f6:20:93:50:62:65:ab:a7:5a:
f0:2c:bf:a5:90:b9:60:30:09:79:5f:5d:db:9b:71:
fa:b8:d7:55:28:69:d9:53:2b:10:b0:c1:a1:52:71:
55:6d:2f:72:e5:ca:87:d7:c6:fe:01:d1:6a:b1:ac:
b8:83:0a:78:5e:5b:df:f0:c2:59:fa:31:a1:db:4d:
18:77:4e:e4:65:f1:ff:07:34:f3:05:e9:96:a4:21:
23:90:df:58:d8:88:08:5c:d9:af:62:51:6f:cf:cb:
85:14:11:75:05:9a:08:1f:da:68:ee:7a:47:1d:31:
a2:8b:f4:16:ab:fe:9e:35:70:ca:98:b9:a5:95:c6:
5a:0e:8c:2e:5c:b0:68:7a:e5:b3:eb:64:3c:09:a5:
c5:1b:17:c1:b7:fc:2e:ca:d0:d1:fb:42:18:de:34:
9d:7a:4b:90:07:bc:4a:5d:b7:f8:4f:82:f9:90:8c:
5e:fc:56:75:37:5e:cd:15:e3:26:71:3e:ea:3e:0d:
82:0e:58:95:6a:65:7e:9e:db:e1:6b:28:b1:47:97:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:5D:CE:7D:CC:6A:8D:6D:A8:06:11:C7:7F:77:CB:A5:3F:5A:91
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:56:f4:b1:66:dd:21:7a:d9:c5:4b:8e:c4:fa:44:c2:e1:8e:
bf:2c:3d:85:70:95:e3:01:03:80:27:32:41:66:34:37:ee:30:
24:af:16:df:5d:cd:0d:8f:de:08:3b:fd:2b:82:1d:2d:f0:c0:
bc:72:f9:a2:64:e2:63:27:c0:53:85:87:f5:82:a6:c5:71:ab:
1d:33:32:eb:0e:01:9e:1c:2c:58:39:58:4e:49:93:02:ef:ce:
f7:e4:91:56:a6:f4:f8:41:f6:7e:c4:93:51:95:f1:1b:ab:89:
19:f7:7d:02:4e:d1:e3:a7:43:68:97:f5:48:05:d6:33:83:5f:
9e:c0:1c:dd:ac:5a:ae:2f:0e:ef:ff:1a:a9:b9:71:66:46:1c:
b4:67:18:18:35:ba:79:ac:d8:95:10:3b:b5:e0:de:b7:84:00:
3e:4b:e3:da:23:5b:07:ae:60:46:fb:57:d0:66:c7:e6:bf:e4:
27:85:48:74:4f:2f:df:63:68:42:d7:16:f5:9f:7b:f0:c1:30:
2a:8a:32:16:79:58:f3:3e:cc:39:c7:29:f0:7d:c3:48:49:b0:
6a:36:5d:7b:fd:02:9c:3e:bf:5e:c4:50:22:41:fa:89:19:7e:
dc:fa:d4:35:15:b3:a2:1f:0a:5a:52:8e:35:66:e7:17:13:1b:
35:a0:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:54:12 2025 by rpki-client