Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: 7wcZezypb4E/TbsJqKs1F+Bt0TNRHJFCjXUlLW4hoQ8=
Subject key identifier: 2F:C4:26:B2:52:41:1C:78:C6:14:3F:4E:EC:48:9B:EE:28:F6:85:DC
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 0196C5A86122BD9E8F711F7C61F205BC602C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 18:01:08 +0000
Manifest this update: Mon 12 May 2025 18:01:08 +0000
Manifest next update: Tue 13 May 2025 18:01:08 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: n6pyt2lBOg07MfOYBxKNGBHnfPv0piuP+IhFjkkg2HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:61:22:bd:9e:8f:71:1f:7c:61:f2:05:bc:60:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: May 12 18:01:08 2025 GMT
Not After : May 13 18:01:08 2025 GMT
Subject: CN=2fc426b252411c78c6143f4eec489bee28f685dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:89:5b:91:83:22:50:f3:71:9a:f3:48:0b:
58:4a:6d:de:21:8c:8c:7e:3b:9c:62:7b:b1:b9:56:
55:91:47:2e:08:df:6e:dd:ce:ce:61:a5:6b:bf:01:
14:af:df:de:e2:10:83:85:09:ca:c6:ef:8b:35:cf:
7f:83:84:a9:0d:cf:68:13:a9:11:dc:17:7b:ad:00:
39:88:d2:54:bf:c9:8d:55:24:53:5c:86:77:15:73:
92:f4:79:16:f3:dc:e2:75:ff:3d:5f:e9:b1:50:a5:
24:af:7c:46:f4:95:8e:b4:a2:e1:89:61:fb:39:2b:
72:3b:83:01:b6:7e:d6:a7:6e:15:d8:4f:7d:a4:88:
b1:b6:de:60:52:7a:2e:29:9e:2e:3c:07:aa:3a:10:
ef:8f:e6:50:b2:02:5a:6d:ef:a4:9a:bc:a4:e5:e5:
80:8c:c0:14:1f:80:83:26:45:4f:8b:a7:0a:82:a3:
39:e3:1a:d7:34:39:b9:36:97:3f:56:8e:98:3b:41:
78:3c:60:dc:36:46:c5:2b:de:7e:ed:a0:fa:c8:3e:
85:67:26:d0:75:85:46:e6:9a:43:90:5f:bd:b7:90:
39:0c:af:7b:57:56:8c:63:0b:7e:57:a6:42:80:43:
00:5f:6a:91:f1:aa:61:22:49:bb:73:ad:f6:7a:2a:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:26:B2:52:41:1C:78:C6:14:3F:4E:EC:48:9B:EE:28:F6:85:DC
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:87:ad:e8:bb:10:1f:73:dc:98:08:40:f5:bb:2e:01:02:9d:
24:06:f8:b2:b7:ae:e5:27:b7:04:ce:7c:9a:91:da:f1:10:77:
90:18:c4:b1:4c:89:09:c6:bc:c7:ca:22:62:2f:93:03:f5:7e:
98:e0:9f:05:d4:ca:fc:1e:49:13:99:20:d1:13:9d:2d:89:ed:
6d:a2:78:85:df:4a:ef:7d:58:69:ee:31:dc:dd:69:78:d9:d0:
47:60:da:1d:42:0a:8c:71:20:32:77:00:3e:5e:a5:d2:74:97:
58:76:96:ed:ae:6c:f5:a5:a9:3a:30:49:36:84:17:7c:cd:7a:
52:68:32:ae:dc:51:aa:ed:83:e2:c7:f9:d1:ca:c6:fa:c2:df:
05:98:f3:ea:17:41:98:56:8b:d0:a8:ff:cf:dd:f9:91:11:d1:
15:7b:42:5c:b4:fe:d9:db:aa:b9:e3:9d:cf:2d:28:45:7b:a0:
af:28:a6:5a:c3:9b:c6:0a:d7:52:48:3d:a1:08:47:c1:91:89:
e1:ff:c8:44:e7:e5:95:96:d7:78:63:8a:32:22:f2:d3:f1:52:
49:83:30:a0:30:22:93:95:2a:30:90:6f:39:55:ff:bf:9c:97:
2c:9d:59:17:eb:c0:62:7a:fd:fa:9f:73:4e:da:5e:d8:b1:fa:
02:24:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:14:15 2025 by rpki-client