Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier: LcP7fCGt8ZALwzyScrVoB2bmJJ+lbzDrSpqym3F8300=
Subject key identifier: 88:2A:A6:97:B1:C9:14:91:43:3B:BA:61:7D:0C:67:C1:E6:0F:BB:D9
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial: 0196BCDBBFE8DAFB9801380F1BED88073186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 01:00:40 +0000
Manifest this update: Sun 11 May 2025 01:00:40 +0000
Manifest next update: Mon 12 May 2025 01:00:40 +0000
Files and hashes: 1: QKCpBgruuyz3i6ikVFdg6qQ3F0Y.roa (hash: G88p/gWLQ6tFindRbDEI4oT0jR5gYy6dY2FWfseB5AQ=)
2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: V0NUTAGlnmaPXNr/KKwj51mgad3qstYZmk31TzNDUAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:bf:e8:da:fb:98:01:38:0f:1b:ed:88:07:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Validity
Not Before: May 11 01:00:40 2025 GMT
Not After : May 12 01:00:40 2025 GMT
Subject: CN=882aa697b1c91491433bba617d0c67c1e60fbbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:62:68:e1:f3:be:cf:7e:f0:58:6c:3c:92:
03:73:09:3f:f7:77:69:69:03:d7:29:33:df:08:8c:
94:89:fd:ba:24:8f:cd:78:ce:ed:69:f9:fc:75:1e:
4c:6a:ec:b4:96:28:70:d0:66:81:ed:14:b5:5e:88:
dd:9f:80:3f:9d:a4:86:38:dd:0e:a3:8d:00:4b:ca:
ab:2d:7f:8d:64:87:0d:be:53:5a:c0:ff:58:81:de:
96:de:23:72:a5:b2:98:50:ea:16:1c:6f:a7:df:0d:
6b:71:6d:59:af:91:58:11:5e:17:51:c5:b2:d0:d6:
91:37:79:4f:73:63:71:c6:51:7e:c1:54:be:d7:da:
eb:45:fc:46:34:8e:7a:10:92:06:71:c0:9b:3d:88:
f3:7c:f3:48:48:aa:5e:da:3b:d1:4c:e8:3f:c7:e8:
68:84:de:57:52:d8:84:5d:af:1b:3c:34:a0:8c:08:
98:6d:28:fd:90:ce:d2:ae:6a:0e:3f:fd:9a:78:a9:
13:42:b6:d5:c8:68:c9:8d:a5:cb:ba:15:bc:fb:6d:
52:80:9e:dd:88:be:3d:62:01:c5:9e:02:a7:0f:6d:
47:e7:35:91:19:36:a9:d8:7c:c6:f5:0d:78:6b:e4:
39:3a:10:93:18:8d:7c:5b:96:26:5d:65:56:62:e7:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:A6:97:B1:C9:14:91:43:3B:BA:61:7D:0C:67:C1:E6:0F:BB:D9
X509v3 Authority Key Identifier:
keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5e:c7:73:28:63:20:9a:00:18:82:46:0d:e6:17:b3:67:89:
04:ec:00:88:70:b7:b9:7b:07:6f:1e:ab:e8:ee:ef:22:9f:27:
16:00:25:9f:1f:38:3d:ec:d1:19:89:66:2c:1e:1b:d5:00:da:
6d:df:41:ab:b7:a8:84:ce:c1:b6:4e:3d:e7:c9:99:8f:58:65:
43:e6:e9:99:c9:25:b1:43:0f:47:d2:c3:7d:b8:cd:94:90:b8:
b6:1a:57:76:7b:de:03:d2:87:b8:91:ad:0c:c2:c7:33:e6:59:
29:cf:0f:ec:5e:d0:2b:00:1d:56:0f:4a:88:bf:3a:7c:d6:55:
1a:9d:2c:ff:89:5b:2b:92:ad:e8:f6:75:a6:c5:9e:ab:b0:8d:
7f:e4:e3:b7:28:76:7c:18:b9:92:b7:39:5b:81:92:6d:59:1e:
f7:0f:10:f0:e8:00:02:60:5d:af:fd:50:68:67:1d:23:3d:e1:
57:4d:41:8f:c3:f2:c6:24:27:e6:6d:b6:d1:5f:e0:93:06:ae:
67:18:c7:58:95:b0:ea:ac:48:b9:78:06:14:3f:45:b9:77:be:
0f:19:73:78:95:f9:ca:73:03:4c:7a:72:90:94:19:bf:e3:69:
24:40:34:0f:3c:d7:4f:6f:0f:3a:71:21:73:e5:61:ab:aa:a2:
3a:b8:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:56:23 2025 by rpki-client