Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: iIY4Z/Qqjhov6npwSfqZbXvm9zuHh+HbO8LyiaVbzbc=
Subject key identifier: 96:A6:BD:F7:F0:61:BD:6D:2A:70:C7:86:7B:4F:59:26:43:1D:02:31
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 0196B221134FB92CED70C496AC02BA3BEFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 01B5
Signing time: Thu 08 May 2025 23:00:34 +0000
Manifest this update: Thu 08 May 2025 23:00:34 +0000
Manifest next update: Fri 09 May 2025 23:00:34 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: t3D6kuNC5xhApi2kSZgDYHcO7IrgxbR3/fHvLSAHS80=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:13:4f:b9:2c:ed:70:c4:96:ac:02:ba:3b:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: May 8 23:00:34 2025 GMT
Not After : May 9 23:00:34 2025 GMT
Subject: CN=96a6bdf7f061bd6d2a70c7867b4f5926431d0231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:79:a9:52:1d:3c:5f:5b:3d:d6:8b:4a:20:
9f:e9:f1:9a:f0:24:b6:09:c9:61:1a:85:e1:7a:7f:
f7:6b:98:d3:29:de:ad:2f:6f:db:3a:2c:d4:55:65:
89:b0:81:16:df:fd:17:c1:f9:ba:2d:d6:83:21:c2:
b4:7b:68:76:c6:84:9e:36:e3:d6:34:2b:b9:58:d0:
82:83:97:68:5d:8f:9b:69:72:58:74:3c:2b:28:7e:
d6:10:70:00:e9:78:e1:76:1e:a1:68:03:e7:55:03:
13:db:b0:6d:4f:73:84:6c:d9:95:6c:d9:ad:f6:21:
1c:09:69:0c:eb:96:0e:ff:ca:98:de:a8:ee:37:7c:
02:85:e5:95:17:55:7b:02:af:de:a3:37:63:84:07:
4a:bc:11:4e:25:42:d4:39:e8:f2:71:15:b0:77:42:
02:57:cb:a3:12:1f:92:2b:85:90:05:42:f9:f3:f3:
da:1b:dd:f1:82:41:30:6c:d7:10:8a:7d:35:71:72:
3e:91:10:40:ec:44:9c:e0:b9:56:0e:71:a6:7b:db:
8c:3e:03:c2:31:78:48:b3:43:09:45:b1:ec:30:42:
21:ef:9b:50:20:bd:79:aa:c5:20:2a:7e:6a:60:2e:
6c:08:9c:79:22:64:45:42:7d:d4:c3:d6:6c:46:21:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:BD:F7:F0:61:BD:6D:2A:70:C7:86:7B:4F:59:26:43:1D:02:31
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:9a:96:5d:38:4b:2d:16:e8:7d:58:24:e6:0b:36:27:77:
00:fb:1c:84:4f:ac:54:f0:a4:84:76:88:54:76:1d:5d:e2:49:
d6:82:4c:be:af:97:b3:bc:66:2f:b7:00:db:3f:5d:7c:9d:4f:
09:5c:b6:4d:7f:e4:f3:78:fe:d2:4b:3e:aa:4d:ee:86:16:1b:
18:f3:c7:9a:fa:34:ea:e2:3b:25:bb:47:62:f2:8f:12:5c:53:
25:a9:d7:ac:6d:3f:e0:03:54:b2:9c:e3:55:e3:bc:b9:f3:b6:
33:20:aa:a8:59:f7:8a:cf:52:de:64:98:89:4e:47:b4:de:44:
08:a0:aa:a4:bf:cb:81:bf:be:b4:3c:69:a2:d5:0b:e6:f2:05:
b8:04:e4:f6:bd:36:e6:34:ad:c5:2b:a4:53:99:1c:a4:6a:d1:
f1:99:5c:fb:a8:7f:21:d1:a7:8d:cd:d0:c1:23:0a:4e:fc:de:
66:91:85:33:d1:e3:8a:ab:d0:c3:00:1c:b3:14:33:fa:52:00:
c8:f7:34:b4:f9:25:5a:d6:31:74:08:97:30:9e:d6:e8:c9:12:
cf:41:af:5f:dc:c3:70:ad:72:ed:18:21:8e:bb:61:6b:7f:e9:
61:a4:a1:97:63:ad:ed:46:a9:e1:93:55:62:2e:7e:c4:8f:9b:
74:2c:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:26:46 2025 by rpki-client