Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
File: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json)
Hash identifier: ni/1TPIyrxw0FpXdP5tYb4wF7W7zzPRTgIQ3hLIxA3c=
Subject key identifier: 12:CC:DE:00:26:EC:36:62:EC:A0:F1:AE:1A:59:D3:36:BF:39:34:19
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 0196A8B0493076EC1FBF8303296F0DF6EA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
Manifest number: 0FB4
Signing time: Wed 07 May 2025 03:00:47 +0000
Manifest this update: Wed 07 May 2025 03:00:47 +0000
Manifest next update: Thu 08 May 2025 03:00:47 +0000
Files and hashes: 1: 50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa (hash: 1zEQgnD6BlkobEHrpf54y5TDCgcpHnLxK3nKztK1TZQ=)
2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: nVZEEIHdJAfOHweBOxelTSuhyQ4hPavOkok2+CEZFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:49:30:76:ec:1f:bf:83:03:29:6f:0d:f6:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: May 7 03:00:47 2025 GMT
Not After : May 8 03:00:47 2025 GMT
Subject: CN=12ccde0026ec3662eca0f1ae1a59d336bf393419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:02:68:1b:c6:7c:9b:3a:98:b6:92:af:b9:
e0:0a:24:54:b1:3e:c6:3d:2c:30:40:02:4c:c1:dd:
ad:c3:87:59:2e:35:48:40:6c:d3:22:4e:bf:b6:57:
ff:60:33:02:6a:da:8f:b2:d0:5b:3e:76:92:0c:20:
2e:7b:5c:35:af:39:f8:4e:de:66:2d:fe:14:fc:c2:
bd:51:69:d1:ce:57:d2:b1:c9:2c:61:25:74:7e:35:
8f:7f:00:bb:af:e1:24:51:f0:65:a6:ac:81:6e:79:
0c:59:a2:01:d9:19:34:d1:7b:d0:75:98:b6:0a:43:
53:83:e4:54:b7:46:76:63:18:79:df:96:57:b9:23:
2f:bb:e8:fb:d8:22:8e:1f:b3:f1:81:0d:b1:db:7f:
b5:4f:ac:8d:a5:10:8a:13:d0:90:3b:4e:82:71:b8:
c3:41:e8:c7:98:67:05:70:3b:bb:ce:a0:c1:48:8b:
a2:d1:47:68:d0:dc:f1:94:29:f3:6c:1e:42:5f:b5:
89:04:94:b2:61:45:b5:d7:42:6d:2e:b5:e6:f8:24:
51:e2:92:ab:17:b2:45:72:b2:b5:c9:43:52:65:80:
32:f6:9b:3c:1c:d0:8d:74:19:6f:87:8f:b2:ca:31:
b4:3e:a8:50:4e:a5:94:d7:ed:29:70:21:7c:00:ff:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CC:DE:00:26:EC:36:62:EC:A0:F1:AE:1A:59:D3:36:BF:39:34:19
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:08:1f:35:94:0b:85:14:35:dc:fe:e4:83:b1:c1:f8:f0:
92:fd:92:44:ab:6f:eb:c6:c3:be:35:8e:3c:25:1d:fb:16:c4:
62:a7:9a:13:e0:be:ac:57:ed:43:9c:77:f5:56:1d:b0:69:03:
97:48:ac:97:1a:df:2c:39:83:0f:87:45:e9:1a:58:07:f3:fc:
fd:f9:59:f6:d8:58:59:38:55:18:c4:fd:6d:31:6d:15:19:84:
65:a0:83:77:c2:1c:bb:74:1c:60:07:61:ad:bb:f5:a1:00:c9:
c8:b4:90:4f:a3:8e:5d:28:56:75:9b:6b:05:a2:ec:e9:38:c9:
1b:4c:88:61:a0:c1:9d:3d:e8:33:4d:85:12:ed:51:de:c6:94:
8f:b9:af:e8:ac:e2:5c:ba:1a:94:24:12:14:4c:b5:d8:91:00:
1e:da:21:88:e4:db:03:7f:3a:08:f5:4b:19:e1:f6:49:e3:01:
ee:84:a9:80:1f:9c:56:59:fc:20:62:cb:d3:48:88:d3:4f:68:
f6:63:75:96:07:fc:c0:7b:c4:df:55:31:90:cd:d4:e3:87:56:
c3:87:92:ea:af:4f:a1:e1:e2:94:01:79:71:88:10:aa:9c:5f:
40:db:f9:ad:15:b4:a5:23:27:9c:cf:f1:36:06:07:09:02:ab:
d9:59:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:13:22 2025 by rpki-client