Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: G+rI0I7J+HuMZVTTeXZgrJop4uUX0CBv9i9IAKVcoF8=
Subject key identifier: 9A:7D:39:D0:A0:26:F1:6A:83:F9:6D:3C:07:E1:A5:69:2B:9C:67:48
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 0196A088C0E19E761947A9ABBB890E76302A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0D0A
Signing time: Mon 05 May 2025 13:00:38 +0000
Manifest this update: Mon 05 May 2025 13:00:38 +0000
Manifest next update: Tue 06 May 2025 13:00:38 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IhQKj6UiQS-W5EmNKI0dkpCOs90.roa (hash: dOyH8r0Q3jqdPxzWjgiYUrfy8XskQY+sMtZqebKaaBc=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: QVANYAxBmpu5MUK8S0pfNx/eteyKzmZFGQH76h7kE7M=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:c0:e1:9e:76:19:47:a9:ab:bb:89:0e:76:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: May 5 13:00:38 2025 GMT
Not After : May 6 13:00:38 2025 GMT
Subject: CN=9a7d39d0a026f16a83f96d3c07e1a5692b9c6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:48:1c:ab:ee:c7:1f:63:09:3d:f2:11:a6:
1b:3f:6c:8c:bb:5b:ce:48:63:31:e6:36:6a:53:22:
ba:70:44:20:25:72:3d:ce:6a:99:81:e0:33:e3:23:
a0:e1:1c:6a:e4:4c:21:c9:b6:26:a4:93:74:28:c5:
65:cd:23:68:de:bb:68:82:c5:62:c1:ff:48:f6:10:
88:a2:24:e8:3c:ed:c2:f9:cd:9b:95:52:bf:7f:9c:
58:34:f5:1f:6d:ab:e5:d8:fc:e6:bc:96:a2:84:40:
77:9a:8c:fa:63:37:09:9d:ee:0e:28:c2:26:9a:b2:
f0:75:34:c1:c8:e1:0d:09:74:39:69:4f:6f:7b:6c:
41:0b:13:09:a1:24:54:1f:c6:b7:34:1e:c2:25:33:
79:a7:d8:df:2c:67:a1:66:df:00:c3:8c:e2:4c:c9:
f7:8a:33:86:02:eb:89:66:91:ff:09:e7:56:04:8a:
43:e3:5f:92:be:30:68:99:58:17:c2:32:b1:8c:f0:
02:b3:ec:ba:82:86:44:1b:2b:c5:97:c1:ce:32:be:
7f:51:8d:f7:7b:83:15:74:b4:eb:27:f2:78:d2:eb:
f0:cb:e5:11:71:79:fa:07:4f:b8:31:05:e8:94:4b:
2e:bb:96:cb:fc:7a:2e:dc:47:f2:d8:88:5d:71:69:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:39:D0:A0:26:F1:6A:83:F9:6D:3C:07:E1:A5:69:2B:9C:67:48
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:94:1b:89:6f:1f:23:25:a3:a4:63:ad:4c:27:6b:ae:55:02:
31:e2:67:8a:c7:5f:0b:a6:eb:b9:41:c9:16:e2:4e:f9:c1:41:
63:cd:04:15:a8:89:71:c3:47:fb:90:cc:88:c6:aa:30:8c:28:
ca:69:c2:d5:73:60:92:6d:04:93:61:b5:cd:d5:d8:30:dd:8d:
6e:b6:e3:13:30:21:95:4a:b6:bf:f5:69:c6:fa:84:59:a6:dc:
58:d3:d8:0f:cb:c4:01:08:b6:a5:a8:bf:7c:ff:53:7d:fc:82:
f0:b0:93:98:15:b8:84:61:84:7e:dd:fc:76:88:90:dd:d9:a9:
5a:f1:4c:a7:51:85:07:cf:6a:19:39:94:55:be:86:74:02:a4:
35:e6:53:ee:58:f8:0c:f6:e1:91:ae:b8:be:5b:ae:dd:6c:fb:
60:a8:6d:a1:24:79:c7:95:4d:3d:f4:f6:c4:c1:22:fc:cc:93:
a6:87:1c:29:77:73:fc:db:2e:10:2a:2a:90:d8:eb:62:05:84:
4f:7a:42:f8:52:f4:ac:73:0f:5f:2f:74:4a:7d:af:46:06:58:
b6:f6:c9:45:8a:70:35:bf:de:de:58:64:cf:f7:da:4f:01:0c:
53:8a:6a:c7:56:4e:73:af:cb:b3:7d:12:97:6e:03:32:b2:1e:
a0:0e:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:10 2025 by rpki-client