Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: YQjujSqaDOxMBnnJoGu1iosDT8jJJC5vdfNsgYBAXDY=
Subject key identifier: 9C:47:66:AD:90:6E:93:C3:6F:8B:1D:D0:E4:D1:35:91:C4:A2:D4:04
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 0196B25888091E114437BC2138D5094AFAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 07A7
Signing time: Fri 09 May 2025 00:01:08 +0000
Manifest this update: Fri 09 May 2025 00:01:08 +0000
Manifest next update: Sat 10 May 2025 00:01:08 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: KUOBt5Yeun+s6auyKrFv0WhQQNVONmnhduMi1L3APWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:88:09:1e:11:44:37:bc:21:38:d5:09:4a:fa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: May 9 00:01:08 2025 GMT
Not After : May 10 00:01:08 2025 GMT
Subject: CN=9c4766ad906e93c36f8b1dd0e4d13591c4a2d404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:c3:fb:f3:8f:b2:7d:f4:91:4d:5d:e0:a2:
d2:c7:c4:fb:8c:78:02:cd:87:30:2c:a3:96:50:e9:
65:9c:23:d2:5f:91:e5:2b:dd:6c:01:15:72:d7:be:
6d:0f:1a:c5:49:17:de:0a:68:d2:49:4a:80:4e:db:
93:ac:9a:24:79:c2:44:2c:21:31:a7:7e:7b:5e:85:
60:58:cc:07:06:b3:a5:21:48:ab:9c:1e:08:62:a0:
79:3c:f3:1e:24:c7:c4:fd:88:2a:37:0f:c3:98:e5:
a5:0c:8b:7c:0e:d9:9b:df:3a:c2:be:98:e8:3a:c0:
20:c5:19:f2:95:77:d7:b4:47:1f:c2:ee:d5:17:68:
d6:d4:a3:dc:2d:e5:41:88:94:a2:c2:e4:cf:47:e0:
14:87:7a:20:f3:aa:bd:f8:79:0c:ec:e1:eb:d1:29:
a5:8b:be:81:e3:ec:d2:f8:83:64:ff:0e:84:52:79:
02:67:15:8f:58:16:a2:f4:23:72:55:6a:1b:e5:22:
52:9e:e6:4e:9a:c0:34:10:a9:b1:44:c2:f8:91:e5:
b2:68:ee:34:93:4e:c2:c3:22:b9:88:31:96:1d:79:
2d:69:6c:57:0a:81:0c:97:07:d7:a9:08:0b:d3:cf:
ee:67:7f:c4:10:c4:66:ab:ec:f6:c7:93:9c:42:8c:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:66:AD:90:6E:93:C3:6F:8B:1D:D0:E4:D1:35:91:C4:A2:D4:04
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:44:20:e7:8c:2c:8a:86:07:35:05:8c:e8:14:6b:9e:db:
28:f8:f9:c6:ce:62:73:42:2b:b7:34:a8:d7:1a:a5:9c:30:78:
d0:95:39:e6:67:e9:9f:e1:d0:3e:fd:73:18:5e:29:88:5e:56:
2b:e4:20:3d:b0:2a:d9:8e:d3:06:df:73:5e:30:76:5e:81:f3:
ea:ec:e1:0a:f5:24:4f:13:05:3a:9b:7d:d6:0a:83:6a:cf:27:
b7:e7:d8:ef:b6:4f:42:11:d2:58:17:d9:56:df:17:22:83:29:
3f:8a:ae:9b:29:08:97:c0:2f:9f:94:e8:47:4a:6f:d8:3d:1c:
83:52:8a:c9:66:f0:09:81:57:09:21:b2:14:60:23:2e:dd:91:
9c:23:dd:9d:7b:76:b0:44:3c:a3:b8:47:06:6d:f1:72:2b:e1:
79:b1:10:62:fb:32:7a:18:e8:eb:92:d7:2a:be:5f:76:d4:12:
c1:fb:96:d6:51:84:0f:dd:d1:d6:99:b9:8b:11:19:fe:73:5c:
aa:be:f0:34:e5:08:39:e9:d0:1e:00:d6:7b:94:21:90:d9:8c:
ca:25:f1:5b:00:3c:02:58:5d:28:2e:65:4b:fe:d1:70:cc:13:
0a:70:cd:d2:36:1a:32:60:9d:be:a3:cb:ac:a7:41:ee:4e:78:
05:ba:ed:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWIgJHhFEN7whONUJSvrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmQ1MGFiMTJkYWM3NTdhODUxN2Y5ODllNzMxNzI1NWEx
NDdjNTAwHhcNMjUwNTA5MDAwMTA4WhcNMjUwNTEwMDAwMTA4WjAzMTEwLwYDVQQD
Eyg5YzQ3NjZhZDkwNmU5M2MzNmY4YjFkZDBlNGQxMzU5MWM0YTJkNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibLD+/OPsn30kU1d4KLSx8T7jHgC
zYcwLKOWUOllnCPSX5HlK91sARVy175tDxrFSRfeCmjSSUqATtuTrJokecJELCEx
p357XoVgWMwHBrOlIUirnB4IYqB5PPMeJMfE/YgqNw/DmOWlDIt8Dtmb3zrCvpjo
OsAgxRnylXfXtEcfwu7VF2jW1KPcLeVBiJSiwuTPR+AUh3og86q9+HkM7OHr0Sml
i76B4+zS+INk/w6EUnkCZxWPWBai9CNyVWob5SJSnuZOmsA0EKmxRML4keWyaO40
k07CwyK5iDGWHXktaWxXCoEMlwfXqQgL08/uZ3/EEMRmq+z2x5OcQozKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxHZq2QbpPDb4sd0OTRNZHEotQEMB8GA1UdIwQY
MBaAFIltUKsS2sdXqFF/mJ5zFyVaFHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVcxUXF4TGF4MWVvVVgtWW5uTVhKVm9VZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83NWMwMTctMTYyZi00ZDBiLTk3Yzkt
MDEzYjJmZWI1ZDI4LzEvaVcxUXF4TGF4MWVvVVgtWW5uTVhKVm9VZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83NWMwMTctMTYyZi00ZDBiLTk3YzktMDEzYjJmZWI1ZDI4
LzEvaVcxUXF4TGF4MWVvVVgtWW5uTVhKVm9VZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBFEIOeM
LIqGBzUFjOgUa57bKPj5xs5ic0IrtzSo1xqlnDB40JU55mfpn+HQPv1zGF4piF5W
K+QgPbAq2Y7TBt9zXjB2XoHz6uzhCvUkTxMFOpt91gqDas8nt+fY77ZPQhHSWBfZ
Vt8XIoMpP4qumykIl8Avn5ToR0pv2D0cg1KKyWbwCYFXCSGyFGAjLt2RnCPdnXt2
sEQ8o7hHBm3xcivhebEQYvsyehjo65LXKr5fdtQSwfuW1lGED93R1pm5ixEZ/nNc
qr7wNOUIOenQHgDWe5QhkNmMyiXxWwA8AlhdKC5lS/7RcMwTCnDN0jYaMmCdvqPL
rKdB7k54Bbrtsw==
-----END CERTIFICATE-----
Generated at Fri May 9 07:30:06 2025 by rpki-client