Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: SN9UjXMJj2hWGQZOCbzAl2z19BEnSXBzqzbQmnrrSLI=
Subject key identifier: 63:03:83:A9:48:94:D7:B1:41:94:97:0E:16:7A:66:67:8D:C9:A8:45
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 0196C9F27B55F136D990665AC6E8EACC47CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 14:00:33 +0000
Manifest this update: Tue 13 May 2025 14:00:33 +0000
Manifest next update: Wed 14 May 2025 14:00:33 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: CYm6mo59U0S18AHwCXneTDdFxBEWzMFNLhuULP0I5TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:7b:55:f1:36:d9:90:66:5a:c6:e8:ea:cc:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: May 13 14:00:33 2025 GMT
Not After : May 14 14:00:33 2025 GMT
Subject: CN=630383a94894d7b14194970e167a66678dc9a845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:a7:63:a0:8a:0a:2a:84:b0:28:3f:28:82:
28:30:50:b4:81:95:f2:0d:01:f3:ac:50:6a:03:d4:
14:d4:6c:ae:3d:b4:97:83:c0:00:79:ae:69:8d:7c:
b1:5d:83:1d:7a:6a:b7:52:f1:55:96:7a:14:cb:92:
2b:9e:ab:45:b3:02:64:d9:d1:0c:b1:b5:2f:8b:a3:
ea:ef:48:35:8d:d8:da:13:89:a9:03:ba:b8:f1:0f:
12:59:6c:d3:e0:70:2a:2b:b7:1e:04:80:72:23:c2:
82:7a:0c:fe:39:b2:d8:51:72:c0:d3:6a:43:e6:41:
bd:e5:e5:e0:22:4d:62:55:92:dc:7a:3b:a6:7b:ee:
cb:9b:7b:48:18:3a:89:7b:07:d8:2d:ba:6d:9a:29:
1c:54:d2:62:cb:af:63:9f:31:00:b9:d4:08:71:c8:
f7:69:0a:f3:e4:eb:a6:51:c8:6b:fc:b8:fb:87:34:
d4:6c:5a:3e:ad:32:21:1e:25:bf:1d:12:6e:e8:51:
0b:55:06:75:85:ca:33:89:73:ab:70:b6:06:72:bf:
64:e2:27:04:8b:50:53:d3:86:78:25:93:09:da:9b:
dd:04:1c:31:f4:82:ae:5a:a1:c1:e8:55:92:9c:01:
dd:31:ee:84:d6:22:50:ba:8e:a5:a7:68:b8:90:05:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:03:83:A9:48:94:D7:B1:41:94:97:0E:16:7A:66:67:8D:C9:A8:45
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:53:e9:e2:b9:d8:76:63:d4:63:34:f9:46:a3:d3:0b:49:58:
9c:23:99:3f:54:bc:b4:d6:96:31:d6:39:f8:9c:d8:26:c6:48:
4a:37:22:76:11:dd:21:a7:db:0f:68:e0:f3:77:ad:e4:0b:e7:
52:6f:29:91:82:94:fe:9d:7d:bd:24:b7:f2:95:c5:08:ce:1a:
61:a9:b9:9e:c7:55:08:c4:d4:7d:9c:be:09:5b:cd:90:47:73:
fb:3d:81:79:58:74:9a:27:f9:9a:ad:0c:b2:5f:e4:0f:d4:ad:
fa:41:c5:d0:43:0f:29:38:22:24:49:ec:e3:8f:5a:d8:d8:6a:
57:18:b5:c5:12:02:70:b5:9c:29:98:21:df:55:e6:b8:2a:3a:
1b:00:da:d6:ab:94:ce:31:60:03:d1:17:80:56:83:88:f3:09:
9b:cb:b0:ee:50:cc:f1:43:ba:1d:98:ee:2a:cc:ae:00:0d:d0:
d3:e7:11:d9:2a:17:b7:ed:e6:77:11:ec:e4:61:bc:1c:2f:bd:
27:6d:d7:f6:46:6d:25:61:4d:66:71:2c:1f:db:49:39:27:1e:
80:94:e2:1e:40:4b:2b:ed:55:72:48:e9:0a:63:1f:ce:17:fa:
47:ee:f8:17:31:3c:ac:4c:e5:40:a9:82:1e:93:9e:ed:04:eb:
30:74:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:09:36 2025 by rpki-client