Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: XvP7OPJWgXduqCsIfkH78XqMvzRShXfaD1Js6/fY2Nk=
Subject key identifier: C6:31:49:19:1D:12:ED:34:93:A7:C9:E9:AC:BC:C3:2B:82:E2:6C:D6
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 0196C50342D3B14A04ECBB56E23E71B08B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0458
Signing time: Mon 12 May 2025 15:00:47 +0000
Manifest this update: Mon 12 May 2025 15:00:47 +0000
Manifest next update: Tue 13 May 2025 15:00:47 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: G7fkRjPiDubVOkbHDVh8b2MuMyWKhhtrtFGqSYv/6vk=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
3: dSWnDMzGU7w05-szcewuViNoYXc.roa (hash: Z3YzI+In7TPyeUHO276uy8/ZGrKKO82F7EoRqQw0E6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:42:d3:b1:4a:04:ec:bb:56:e2:3e:71:b0:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: May 12 15:00:47 2025 GMT
Not After : May 13 15:00:47 2025 GMT
Subject: CN=c63149191d12ed3493a7c9e9acbcc32b82e26cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:96:38:f4:a7:3b:91:89:4a:80:71:6d:fa:
89:e9:29:dd:a7:f5:f5:84:91:ec:5e:4b:69:45:2d:
7f:e2:3d:b2:f3:aa:56:2f:56:07:6c:73:8d:e2:d9:
31:37:35:6b:5e:19:82:95:63:4a:29:e8:b1:e6:37:
2c:ba:a4:5b:ef:de:06:cb:42:ba:f2:6b:ab:9d:6f:
28:11:4a:cf:46:1a:98:b5:6b:0c:d6:6d:30:b0:8e:
1f:f7:44:cb:22:ce:e1:49:83:d3:6b:e3:6d:5a:26:
d4:ba:6b:ce:34:aa:34:03:06:24:f7:8f:0a:e1:59:
0e:c5:c5:1d:3f:7d:ba:3f:e5:de:d8:93:2d:74:e8:
35:0f:9e:25:9a:63:49:69:71:e0:0e:1c:d6:0e:1f:
b6:c0:ca:f6:df:0c:7a:11:a4:0f:c4:69:5f:15:8b:
f6:d8:ca:d0:b0:7c:c7:c1:82:89:76:b6:2f:0d:88:
ef:73:04:a8:f8:bc:35:df:e3:e2:49:8c:e0:6d:e1:
d2:02:d9:bf:c9:1a:50:62:51:e4:f7:38:96:27:f3:
3a:49:a9:30:38:f7:41:23:06:5c:9d:b6:e2:de:db:
57:25:85:d8:22:0a:4f:3d:c0:e3:c8:7b:68:e1:51:
1a:b8:81:9b:04:0f:1c:fc:e0:df:bf:67:cd:96:00:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:49:19:1D:12:ED:34:93:A7:C9:E9:AC:BC:C3:2B:82:E2:6C:D6
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:be:d4:bc:1d:b4:bc:0b:7b:22:9b:43:9a:44:9e:ad:04:
c8:fb:ad:b4:e5:db:66:cd:cf:ed:5b:f0:cc:7e:86:98:1e:cb:
a9:f0:b2:91:ef:9e:a6:ea:5e:90:2b:c1:f4:05:b9:ec:eb:78:
eb:f5:5d:c2:a1:79:a6:54:ec:3d:c5:6f:ec:72:72:d9:6e:42:
0e:57:81:21:98:fc:38:37:dd:23:0d:dd:ec:82:66:4a:2a:9c:
61:b4:18:b1:8e:6d:5c:51:a0:99:b1:8a:8f:17:46:c6:31:36:
6c:ce:cc:1c:0d:d4:f0:46:84:7f:84:d6:78:26:11:f1:83:68:
11:d4:80:4b:c2:12:a4:df:02:93:d2:83:20:28:1a:af:29:be:
5b:bd:c7:1d:c2:b4:ae:3b:4d:f7:ac:e6:4c:01:be:f5:44:2a:
55:e3:70:b2:06:50:6b:d8:ab:eb:11:40:10:b7:4a:a9:f1:b5:
72:c5:d8:7c:6f:5d:9e:dd:54:f0:96:35:e3:4c:45:0c:ef:84:
c6:b8:e3:f0:63:da:2e:16:38:29:77:ae:65:ba:14:41:af:3b:
12:85:a2:d1:2c:87:53:bc:69:38:cf:f9:0a:d7:c2:80:f6:ed:
af:a0:69:f2:71:f3:27:fb:9b:8c:2a:34:52:a4:e6:eb:6a:4b:
a0:b9:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:00:48 2025 by rpki-client