Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File: B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier: zvXDyzAUhkkFaZJPr7PeUTl1p1lcZerC2KxV+amRTHk=
Subject key identifier: 89:08:1C:AC:2A:FA:F9:50:21:DF:5A:A6:01:7A:D8:E5:32:34:38:62
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0196C3B99B75224A28A6C4AC84AB6BCEE060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number: 1158
Signing time: Mon 12 May 2025 09:00:43 +0000
Manifest this update: Mon 12 May 2025 09:00:43 +0000
Manifest next update: Tue 13 May 2025 09:00:43 +0000
Files and hashes: 1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: 7qoQSQiHx0gwwZJBCqQuVGionPjuxvXkXabnqKqARFM=)
2: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (hash: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=)
3: UYG02sedni6PF3l5885jWR9SDAU.roa (hash: F15eDYq10rpPatO7l2AwP8pJp/GPkxjGwfOAI4ndu8c=)
4: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (hash: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:9b:75:22:4a:28:a6:c4:ac:84:ab:6b:ce:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: May 12 09:00:43 2025 GMT
Not After : May 13 09:00:43 2025 GMT
Subject: CN=89081cac2afaf95021df5aa6017ad8e532343862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:9a:4e:3b:f6:8e:ac:ae:6f:a9:13:c9:c9:
ea:1f:4e:6a:2c:51:22:e2:12:90:5c:4d:9e:2a:9b:
9f:16:18:b6:98:0a:6d:85:bf:5b:37:75:a5:1f:99:
e7:08:7d:79:81:23:10:b0:26:26:b2:ed:58:49:c2:
ff:e3:7a:f4:66:17:45:ae:a6:68:19:4c:4b:b3:ff:
2c:70:13:7b:84:59:e1:c2:8e:9b:8f:04:0e:a8:1e:
d7:ea:d2:83:86:27:c6:05:ff:92:89:cc:2a:85:b3:
36:2a:57:56:96:9c:9f:91:c0:72:10:05:2d:d3:c5:
88:82:4d:aa:06:15:3c:42:6f:14:e1:05:be:31:5c:
d8:b9:51:e7:89:7c:64:2e:bc:ef:0e:f9:71:d1:27:
14:6c:c1:75:90:c5:4f:81:d6:de:bf:f3:f8:7c:35:
2d:fc:05:d5:19:ca:e7:fc:56:64:45:73:07:78:b2:
b5:27:6a:c1:20:71:c5:41:39:17:c0:76:5d:12:f8:
90:01:4b:6f:04:f5:32:a7:ff:b9:ff:fd:5f:c4:5b:
81:3c:64:af:9e:98:3d:1a:50:27:eb:10:04:25:3a:
53:0d:ae:bc:79:b1:47:e1:6b:ec:bb:43:e0:41:8b:
55:5b:8f:15:f5:6e:91:41:89:e6:7c:2e:f1:46:a4:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:1C:AC:2A:FA:F9:50:21:DF:5A:A6:01:7A:D8:E5:32:34:38:62
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:b3:7c:24:d4:21:ec:59:47:08:a6:28:b4:9f:8f:b2:d4:
51:34:ae:c5:9b:01:77:3e:0b:e0:bd:8f:0b:71:92:18:64:55:
ac:df:bb:53:bd:2d:86:17:20:cb:36:f2:4d:e5:e9:ed:c8:c5:
cf:9a:b8:6d:a7:d8:e5:bb:5a:4c:57:3e:26:8e:0a:3f:f8:e8:
9e:8e:7b:84:4d:51:b2:70:5c:38:c3:78:76:cd:e5:f1:93:d6:
8e:bd:36:6a:05:82:b2:48:d9:96:ca:e4:ed:1a:58:45:9f:99:
a1:6c:b5:1d:db:af:fd:78:89:d0:20:09:f3:73:17:b4:c6:c3:
3b:f9:d0:2f:21:99:9d:f2:1d:71:fd:fe:6c:18:d6:8d:68:8e:
03:dc:bd:ae:e1:17:93:45:99:84:aa:9b:73:71:ca:4d:db:d0:
00:80:21:0c:b4:95:44:88:f6:48:20:8a:34:6a:f6:8c:0a:b7:
bc:57:b8:01:1d:43:39:5d:44:76:7c:d5:5d:94:5c:79:5e:91:
0a:18:91:7c:94:b4:65:37:8b:4d:cc:90:f0:d4:8c:14:5e:85:
13:5d:73:8c:6b:16:38:aa:04:c8:72:bc:a9:c0:d1:2c:05:fd:
92:2a:49:f5:6f:f6:1c:cb:b6:68:86:3c:89:a0:e2:db:f7:58:
a0:02:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:04:53 2025 by rpki-client