Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: uXomVamo2zNxxQfvSTite8wPA6lpl+wOwTY0O8FpfJY=
Subject key identifier: C6:06:98:93:2A:F0:A8:F5:2B:CB:43:06:5B:DC:4F:7D:8D:1C:AB:10
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0196BAED31A93988EC7F9EAD0ADD11114D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1257
Signing time: Sat 10 May 2025 16:00:29 +0000
Manifest this update: Sat 10 May 2025 16:00:29 +0000
Manifest next update: Sun 11 May 2025 16:00:29 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: /57WnT8dT5fhV8tG88aM06YP0/duomDrwVeNQu0CijM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:31:a9:39:88:ec:7f:9e:ad:0a:dd:11:11:4d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: May 10 16:00:29 2025 GMT
Not After : May 11 16:00:29 2025 GMT
Subject: CN=c60698932af0a8f52bcb43065bdc4f7d8d1cab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:cf:4d:c9:af:e1:73:5e:fd:6a:29:a6:fe:
e5:08:d2:1f:40:5b:20:bb:99:9d:99:c0:b1:9f:09:
c2:78:93:b1:56:4e:76:28:9d:99:bd:78:3a:35:e2:
8c:22:c2:5a:e6:e6:bf:72:1f:6a:a3:0b:67:2a:ed:
05:3d:c5:2b:cb:84:1b:dd:cb:55:a3:13:40:04:ce:
7d:5e:b3:7f:be:bd:44:6d:40:af:98:e3:4e:5c:1e:
72:af:bd:6d:c1:3f:94:30:31:9f:bb:f8:98:c4:4a:
7b:34:79:0b:3c:c9:92:07:bc:12:2c:ef:19:24:79:
7e:7c:70:87:dd:8a:51:b5:31:f9:a6:61:b6:1f:c0:
0b:f8:c8:51:2f:7a:85:c1:02:67:9a:5a:d0:c9:61:
fb:24:64:8e:48:b0:12:28:44:e7:b8:8e:08:d6:40:
da:63:7e:3c:bd:60:21:2c:93:67:ec:bf:a5:08:f3:
4b:ad:2d:67:05:15:8e:c4:f0:1e:c9:7d:82:75:a0:
88:09:0c:a2:75:31:9d:d2:b7:9d:e0:6a:36:07:cc:
54:5f:cd:ef:34:f6:a7:e4:99:57:31:25:9e:fe:14:
ba:a0:af:19:36:bb:41:0b:bb:8f:1b:ba:a1:d4:94:
4a:79:3f:9a:5a:47:bf:78:ba:c6:aa:a3:71:6e:0f:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:98:93:2A:F0:A8:F5:2B:CB:43:06:5B:DC:4F:7D:8D:1C:AB:10
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:19:05:d6:c5:40:a7:b8:88:49:f2:91:b1:9b:a9:ae:f4:
d2:fa:48:26:57:5a:a1:07:41:ad:33:28:a0:a6:52:ad:00:a3:
0a:1a:be:c9:b5:e1:c9:9d:f1:cb:89:fb:79:0f:d6:12:55:45:
f8:34:ab:1b:66:35:52:4b:6f:23:0d:ef:81:1c:f9:8e:5a:62:
7c:c8:ef:dd:da:bb:3a:ce:df:da:91:02:6f:df:74:19:7f:a7:
c9:59:63:e5:d3:d5:ee:40:7c:0e:b9:73:b5:c1:f3:b9:50:05:
25:75:c0:92:dc:74:a0:8e:7d:12:94:e1:db:a1:1a:c7:8e:f6:
1e:4c:be:8d:8f:48:c0:dc:d1:5a:c8:b2:0e:12:94:9a:5e:94:
fb:42:b0:0f:58:03:a2:c8:b7:02:92:5b:ff:d5:a6:f6:f3:2c:
68:b2:6c:12:1a:5d:4d:e3:80:63:de:d7:02:a9:29:3d:b8:1a:
3a:14:8e:55:bd:a9:a7:20:63:5b:a9:88:c3:cc:09:7a:ff:72:
61:9e:be:65:9d:b5:cc:4c:f8:cc:ce:5b:a0:54:03:f6:3a:da:
5a:11:4b:1e:96:9f:23:64:b3:ac:d9:e9:aa:f8:2a:65:16:fb:
5e:21:1e:1e:be:88:cd:ae:39:79:7f:73:98:1d:5c:c7:41:b0:
39:8d:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:14:04 2025 by rpki-client