Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: sAUKwdTlHqU673hoV6I/ofJgC8Qav2wqykqYMSXLikw=
Subject key identifier: 3D:DA:1F:44:F9:6F:65:10:20:5B:7F:14:86:24:E6:36:EE:32:25:33
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 0196BAED22CA36E890A1342924538D6163EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 16:00:25 +0000
Manifest this update: Sat 10 May 2025 16:00:25 +0000
Manifest next update: Sun 11 May 2025 16:00:25 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: 4UmpZnYhHS31/7dbmGu2FI66nzGXxU0kNzE/BfOyays=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:22:ca:36:e8:90:a1:34:29:24:53:8d:61:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: May 10 16:00:25 2025 GMT
Not After : May 11 16:00:25 2025 GMT
Subject: CN=3dda1f44f96f6510205b7f148624e636ee322533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:31:bb:a5:80:53:89:6c:7d:5f:71:d0:fe:
1e:4f:bb:bc:7a:f2:19:5e:eb:2b:e5:46:08:80:df:
ac:60:94:82:bd:ae:56:9b:a8:4d:e1:04:97:ba:2a:
e0:74:1c:94:03:3a:2d:be:68:1c:ef:f2:7b:da:76:
1a:f3:01:a5:a7:a0:da:c8:69:47:66:5f:06:eb:48:
77:e8:ec:87:05:37:cf:54:2c:69:2e:3c:ec:3d:03:
32:8d:1f:76:5c:0d:8c:39:49:a9:74:c2:6c:14:aa:
87:37:eb:11:12:37:b9:15:2b:cc:67:78:3e:e6:a5:
c4:f5:42:9c:68:4b:03:bd:c0:96:8c:23:ef:08:89:
21:98:9f:5a:da:42:77:41:12:c9:98:a9:aa:63:85:
c9:71:fe:fb:74:ab:86:49:ee:91:31:70:ba:90:0b:
c2:6d:4a:79:c9:a1:0c:eb:4b:53:4c:1e:09:3c:05:
95:d4:ed:8d:52:3b:28:c5:8d:df:ad:2b:58:e2:32:
29:26:06:de:4a:a8:0c:22:25:79:22:60:cb:bb:a8:
2b:d3:84:0d:8e:67:f7:0d:78:ab:be:5f:41:f9:21:
44:9c:00:5c:be:e7:3f:df:c7:21:81:05:1d:a1:71:
14:88:9d:74:27:be:d1:4a:24:39:69:65:1b:54:b0:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:1F:44:F9:6F:65:10:20:5B:7F:14:86:24:E6:36:EE:32:25:33
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:3f:e6:26:86:66:92:b8:da:10:13:c6:7d:60:65:51:d2:38:
d4:f6:52:e8:91:5a:32:2d:fe:5b:d4:9f:ff:2f:76:8f:b8:26:
b6:3e:aa:ce:cc:9b:d4:8b:e2:48:b7:c7:31:38:86:32:07:6a:
b4:fd:43:8c:04:cc:cc:02:cd:4d:0a:c6:07:16:dc:33:f8:aa:
85:da:95:68:73:4c:a7:1c:67:41:c5:dc:09:0c:90:1a:02:0e:
04:37:40:c7:45:de:04:9d:15:f4:3c:40:48:bc:8d:61:07:9f:
04:dc:03:37:8b:4f:12:4a:fb:ee:7d:1f:b8:a5:87:34:da:4a:
3f:66:ec:af:b4:74:43:58:7c:a2:f8:49:2b:31:c4:4e:a2:19:
09:18:a1:0a:50:e0:5d:ed:84:44:0b:30:9f:60:51:91:4b:4b:
84:fa:b5:70:8f:c4:88:2c:37:39:7e:41:dc:ee:83:19:95:f4:
60:8c:87:2d:f8:6a:83:84:0f:ef:0b:03:65:9c:3f:c3:a3:63:
17:1c:81:f9:e1:ff:24:de:d3:63:05:07:cc:31:f1:58:ef:ed:
8c:71:35:a5:ba:87:bb:15:b0:e3:84:72:a0:c4:90:89:33:91:
f4:49:a3:18:f0:c9:da:17:9a:b4:aa:07:ef:80:ce:11:ed:92:
41:ec:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:21:48 2025 by rpki-client