Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: Jpn1ZKOYKz8vSoVwATLANppiz1vKqxWUY/W4Tda1IVA=
Subject key identifier: D8:29:F7:1B:0C:FF:5A:C7:3D:4D:6A:DD:A6:EA:06:5A:ED:B1:4D:08
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01969F088333B1B2ED10A4E2491B25C1E818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 06:00:57 +0000
Manifest this update: Mon 05 May 2025 06:00:57 +0000
Manifest next update: Tue 06 May 2025 06:00:57 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: DaYbPwTEgoAPssng9qomzJ/CaUWCfxilxzEVXa0PnNc=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:83:33:b1:b2:ed:10:a4:e2:49:1b:25:c1:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: May 5 06:00:57 2025 GMT
Not After : May 6 06:00:57 2025 GMT
Subject: CN=d829f71b0cff5ac73d4d6adda6ea065aedb14d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:6a:de:91:64:88:34:5a:9a:ba:61:03:61:
84:02:1d:ec:a4:dc:0e:b8:d1:d2:99:c5:87:c6:54:
8f:16:ee:c1:44:32:03:f2:e2:cf:7e:d8:02:70:22:
1e:ff:07:b5:9e:af:d0:cc:9f:51:05:47:65:fa:d1:
65:90:dc:96:7c:1f:6f:c1:2a:6f:ee:6d:c5:d1:a7:
16:db:1c:fb:6e:82:41:c5:ea:74:7e:29:dd:18:7d:
60:11:63:ab:8d:4c:7a:10:2d:68:cd:1a:89:7c:b4:
aa:ad:13:ab:33:11:41:32:1e:58:a0:c6:94:4a:4b:
3c:a2:26:bd:c6:08:07:d8:86:fd:01:6c:ed:66:41:
89:75:1e:7b:55:57:2d:3e:9d:53:56:d5:9a:6c:4e:
fd:dc:d2:2b:8d:be:68:f0:b2:c9:f8:da:31:54:9f:
85:94:88:d9:c0:8d:b8:f9:1e:ec:fc:90:2b:da:1d:
9a:34:07:48:35:2a:4b:6e:a7:45:b1:2c:af:22:45:
ac:02:02:88:71:12:88:4e:84:6f:94:dc:2e:0b:5b:
6e:f4:96:cb:a9:a4:53:be:c8:2e:23:97:fc:81:99:
5f:40:ff:aa:19:cb:9f:8d:86:ef:11:d8:bd:af:5d:
86:c4:36:91:38:cc:ff:27:cd:e4:a3:ae:25:5d:a3:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:F7:1B:0C:FF:5A:C7:3D:4D:6A:DD:A6:EA:06:5A:ED:B1:4D:08
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:25:42:b0:2c:32:04:c6:2b:5a:b4:06:5c:63:12:db:d0:
cf:e6:8f:a4:c6:62:db:88:6d:34:95:a5:0d:46:cf:1c:4e:a3:
e0:fa:96:95:b6:a7:a2:e7:3b:4a:5f:ad:bd:7f:8d:91:92:e4:
2b:c9:45:a0:fc:ad:f0:9e:c4:1c:57:4a:66:4f:8d:7f:84:29:
24:4b:c5:39:a5:95:ef:a4:b8:57:63:3a:e6:42:3c:27:9d:d6:
b1:8d:64:be:30:c2:d5:e6:3d:b4:90:31:22:46:b1:8b:63:c8:
20:4c:cc:33:8f:87:65:d0:43:74:7c:e0:ad:d6:e5:1a:10:a1:
f8:e5:bb:67:ce:7e:de:b8:5c:6e:bf:62:c0:1d:7d:c4:3d:11:
c0:27:01:5f:6a:9b:23:bc:8f:15:11:38:db:99:b3:a8:96:e7:
7e:c4:aa:a0:f2:82:62:b5:87:2c:19:a0:e0:7d:b8:da:05:5b:
2a:69:60:0d:33:61:6a:66:b6:00:d6:7e:0b:37:47:24:29:57:
54:6b:9d:a2:59:cb:a4:6e:7d:69:5b:c2:51:ae:75:88:d2:2c:
15:c6:94:92:71:c2:bd:1a:b4:2c:16:7a:89:5a:c8:df:e9:b3:
44:17:e6:a8:aa:d3:56:32:2e:b9:f9:8c:b8:77:77:4a:56:ad:
49:d7:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:08:40 2025 by rpki-client