Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: Vq9J9ee4mzxWMY26i4eVNKs3aGsrsQOPGwuMA9MDbaA=
Subject key identifier: E2:39:7D:EA:85:E1:83:EA:26:DF:41:EE:22:BB:1B:39:5C:00:FA:26
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 0196A49C6CBF115989F507CFDEBE8BAA6C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 0177
Signing time: Tue 06 May 2025 08:00:36 +0000
Manifest this update: Tue 06 May 2025 08:00:36 +0000
Manifest next update: Wed 07 May 2025 08:00:36 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: Gzp67hoi9HVVmMlGeEwgHTp7MzTkUx0NvSjspks+gKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:6c:bf:11:59:89:f5:07:cf:de:be:8b:aa:6c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: May 6 08:00:36 2025 GMT
Not After : May 7 08:00:36 2025 GMT
Subject: CN=e2397dea85e183ea26df41ee22bb1b395c00fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:12:49:66:21:64:8a:b2:58:b8:61:77:2f:
01:b9:73:ae:9c:02:a8:50:b7:86:9b:ef:b0:d0:3b:
81:e5:07:ca:85:51:ab:d0:79:8a:e6:c6:ac:bb:bc:
13:ac:2d:6e:eb:bd:a4:df:3a:18:19:f4:be:54:ac:
81:04:b9:16:a5:88:86:d2:17:8f:39:bd:4c:1d:e0:
39:a4:a7:70:16:3d:af:4a:92:ff:88:cc:6d:93:2a:
86:35:d2:43:b6:6f:3f:cc:3e:10:32:6a:d9:1e:3b:
ad:e2:e9:f6:4e:fb:f6:d5:d5:8b:7d:37:1a:26:90:
39:7a:bb:77:61:e7:64:e5:97:d2:2d:11:8d:0a:8f:
e5:93:d6:3a:88:3b:31:c3:d8:38:a2:a5:86:c8:b2:
8f:38:37:3d:4b:ad:65:0d:23:03:f3:17:90:98:73:
e8:2b:27:1d:24:99:be:98:13:78:f8:e8:43:fe:03:
8b:75:8b:39:a0:1b:c2:91:a8:c0:3e:f7:ac:48:05:
fe:75:a7:72:b9:c8:9a:d0:51:d0:2c:ac:94:fa:de:
84:cf:aa:b3:c5:4a:e1:17:17:5c:63:27:68:0a:2b:
94:81:3c:ba:d0:37:ea:6a:59:f1:f5:c1:44:bf:88:
70:c2:dd:04:c3:6b:a4:56:3f:35:24:51:ef:5f:2f:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:7D:EA:85:E1:83:EA:26:DF:41:EE:22:BB:1B:39:5C:00:FA:26
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:ff:39:41:da:ef:f8:3a:7a:3b:81:7f:75:10:71:c7:e1:
cd:2e:b4:44:3d:e5:8c:b9:df:c4:64:7d:ef:68:f7:b2:a2:dc:
93:7b:1c:80:43:fa:48:67:41:00:94:99:95:6c:e6:3d:b1:af:
fc:dc:80:fc:c4:b0:80:e6:33:2e:89:ba:7c:3b:3b:31:88:18:
08:f5:23:9c:05:5d:35:78:f6:16:b4:e4:82:17:2a:90:b5:77:
07:15:f8:a3:30:d6:7c:6e:43:ff:81:35:7f:83:1e:05:c7:ce:
fa:0a:fd:b4:f8:64:9f:8a:ab:36:88:cf:a3:c9:e3:a7:f8:5e:
27:d4:f0:2d:c9:6d:ca:01:36:18:4e:f1:f4:31:8c:2e:1d:3d:
a1:5f:12:ee:d7:33:ea:d7:60:06:39:9e:2b:35:60:1a:fc:74:
aa:50:08:94:38:c8:10:17:64:59:73:c8:56:d4:25:51:a4:8d:
06:cc:1d:62:9a:c1:26:2a:8e:5d:2e:7b:d1:7a:29:65:61:90:
63:75:d1:f1:5c:6b:16:c0:59:db:08:97:9f:eb:27:2d:ab:92:
01:48:1d:c5:69:2e:7b:9e:2f:f6:d6:f5:41:bb:99:b2:17:97:
f7:8c:33:19:56:62:c5:32:86:6d:b1:6a:93:b4:4d:f0:3e:41:
ca:10:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:38:32 2025 by rpki-client