Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: iZnYVVQBrU7Avu37nvjyrvHRrPQNipI8nK03dbOb6wY=
Subject key identifier: DD:21:53:DD:1E:C4:CB:CE:35:AA:84:D7:C8:03:A0:2F:08:45:82:F2
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 0196A2E4CA02A2244AEC743B88F7C0424BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1009
Signing time: Tue 06 May 2025 00:00:25 +0000
Manifest this update: Tue 06 May 2025 00:00:25 +0000
Manifest next update: Wed 07 May 2025 00:00:25 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: OK3JWCuQ9hWuc3MEyzzqIuNxqulJEUdVMYuXrlrI3ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:ca:02:a2:24:4a:ec:74:3b:88:f7:c0:42:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: May 6 00:00:25 2025 GMT
Not After : May 7 00:00:25 2025 GMT
Subject: CN=dd2153dd1ec4cbce35aa84d7c803a02f084582f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:05:52:55:bb:80:68:2a:87:5f:90:cf:7c:
41:c9:42:d7:54:d9:4f:06:01:6a:5c:37:8b:7a:cb:
84:02:c2:bd:29:03:e9:12:63:78:3a:3c:77:32:15:
d4:80:4a:a7:ab:48:b7:b9:d0:66:8c:87:1d:41:30:
25:65:9d:bf:9c:3f:1e:de:d7:e0:be:7e:af:7d:17:
5e:88:62:3e:6c:db:77:e7:30:22:19:e3:9a:7a:10:
a1:44:3d:28:f7:b9:85:85:58:07:ed:c8:71:39:7a:
d6:25:d4:aa:9d:8a:bf:c3:0a:e0:9b:4b:93:6a:e7:
4c:44:37:4a:62:07:24:c4:71:48:be:e7:31:5d:66:
ba:22:f4:1f:54:d7:21:50:f2:81:2f:69:34:22:f1:
48:87:55:21:40:41:b8:1c:e2:aa:e6:40:74:75:5e:
84:72:d4:8c:a7:14:ab:60:ec:c2:7a:9a:05:fc:82:
32:d5:52:00:94:bd:1a:ac:6f:f0:33:ea:cb:19:92:
4b:71:e6:60:4d:a2:54:67:cc:f9:c2:63:44:c6:93:
1e:4d:43:aa:c7:af:03:37:28:63:32:5c:45:f1:71:
51:ae:cd:c0:9f:23:46:40:2d:fd:27:e5:33:b9:68:
59:ce:62:75:22:c7:bd:5a:2f:d2:30:65:3a:47:76:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:21:53:DD:1E:C4:CB:CE:35:AA:84:D7:C8:03:A0:2F:08:45:82:F2
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:73:b9:48:eb:98:14:6d:10:2e:08:d8:ca:25:d3:2c:8b:
a9:71:0f:ec:33:58:e3:7a:8d:a9:e6:74:6e:2b:a5:34:ec:6a:
f2:11:1f:25:7e:e3:c9:11:57:de:e6:54:88:de:1b:04:28:b2:
c4:42:7f:e1:96:18:f1:d8:b5:e7:f8:f0:e2:5e:6e:9d:ef:a3:
f7:2b:84:dd:72:f7:2c:2f:b7:df:2c:64:8c:6b:fd:44:13:be:
87:c8:fb:eb:73:94:bb:9b:4e:0c:18:1b:29:63:c5:d4:43:79:
a8:cd:25:ee:e3:55:17:4c:90:24:ff:be:e1:20:33:22:0c:a8:
4b:a6:fb:c3:b7:f5:ae:c8:da:ba:60:17:d4:1c:2a:82:5a:07:
f8:14:1c:52:b6:54:7f:d8:2e:55:13:a2:5a:b4:11:86:5a:55:
fb:de:19:99:20:12:95:90:c4:2d:e9:71:e5:14:1d:5e:8e:95:
b0:2f:ec:ae:39:c0:53:e3:79:4c:d0:6d:9c:52:73:02:ec:b0:
b6:8c:20:b7:c3:c5:03:0f:08:e5:00:03:67:4f:01:c0:62:fc:
2c:d8:ea:4f:03:2a:07:9c:0c:df:52:f5:3b:fc:0d:28:1d:e6:
1d:f5:71:d8:50:1d:54:f7:e8:7a:a0:62:3f:a4:cf:81:13:59:
43:bf:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:06:06 2025 by rpki-client