Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: shURJuikZuK50OLbxKDgn2nacP5lphMmcCuw9MsSpEA=
Subject key identifier: C8:D3:62:6A:8F:88:59:EA:77:A5:52:34:48:2F:8F:33:64:7B:B3:24
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 0196C0EF6F6CC85F8CA3D28C8289180F2B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 09A5
Signing time: Sun 11 May 2025 20:00:39 +0000
Manifest this update: Sun 11 May 2025 20:00:39 +0000
Manifest next update: Mon 12 May 2025 20:00:39 +0000
Files and hashes: 1: 9WfLA6QHajuACG9zKGXgXI_fnBU.roa (hash: aTvWSmVYrhk52fn4L1rzEuUOw3+xRp2a5jHVVtBFY4o=)
2: JY9LzlIgT9I57_KE7zrrGS7E8Qk.roa (hash: pG1i5yA4B+HIYkYc64ggfa0dVvkWYyImVKQY1Fkl/ng=)
3: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: KJ8cdSOAg4U7RXguOxeWbDRimJ/3Mjov5/lZtsWNT+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:6f:6c:c8:5f:8c:a3:d2:8c:82:89:18:0f:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: May 11 20:00:39 2025 GMT
Not After : May 12 20:00:39 2025 GMT
Subject: CN=c8d3626a8f8859ea77a55234482f8f33647bb324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:1d:1c:bd:96:11:5e:31:89:a5:b4:ae:b9:
76:d4:a5:83:2c:10:55:0b:95:cf:7a:e9:8b:64:2b:
71:5f:64:b1:6a:34:fa:a0:6d:3e:f5:2f:8e:ab:5b:
78:e2:23:b8:51:cc:ab:55:44:c3:f3:f0:55:5c:24:
93:81:72:b2:fd:2e:d5:e4:39:37:57:4c:46:02:13:
0a:c8:e6:2e:51:e9:29:b8:5d:e5:5e:15:7e:34:f8:
e2:28:29:61:e1:f1:35:19:78:69:7f:43:e3:ed:45:
70:bc:39:fa:85:84:b1:59:89:68:04:32:68:7d:5e:
6d:aa:2a:24:e2:f6:7c:c7:b3:10:79:6a:a5:14:3e:
a6:a6:d4:ae:bd:17:1a:49:8f:e8:aa:3f:48:89:86:
15:9f:c5:33:23:1e:ef:26:72:1e:4e:92:59:64:b3:
e5:a0:fa:ba:3f:ad:69:f2:bc:40:db:80:18:51:1b:
03:bd:4b:19:18:1d:c4:75:68:a6:87:c1:05:42:46:
72:60:9e:ae:6f:9f:35:d9:11:f6:c5:19:55:0b:b2:
63:79:c1:90:c4:6f:e4:55:cb:a5:ad:76:b8:d0:de:
a4:a1:67:0f:95:20:a3:f0:00:9f:89:8e:5e:74:09:
30:ed:cf:27:d3:e4:44:a8:33:03:95:70:07:d8:8a:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:62:6A:8F:88:59:EA:77:A5:52:34:48:2F:8F:33:64:7B:B3:24
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:57:b4:51:eb:07:6c:12:d8:50:8c:2c:e8:f3:ba:37:b6:
42:15:b5:de:b1:a6:0f:39:cb:0f:71:56:99:b2:49:b0:a9:ce:
f8:bd:92:26:40:36:5f:64:fe:4b:0e:83:cc:ba:ae:92:4a:f7:
8f:a4:4c:8b:ad:0c:1b:75:1b:af:9f:dd:a8:42:74:98:33:ab:
18:1e:29:36:aa:5f:4e:8b:9e:65:26:6d:56:83:20:11:cb:67:
3e:28:4a:1d:ab:e2:3c:ab:bb:f9:15:53:e3:dd:ca:6e:70:46:
c1:44:56:cc:02:cd:5d:10:53:e6:4c:da:62:a1:a5:1c:eb:c0:
a2:26:fc:8e:f1:d6:4e:bf:5a:7f:9d:62:d3:b6:4c:2d:0e:bc:
1b:b9:4b:ac:8e:0d:19:69:86:49:93:4d:2d:a1:09:1d:ab:9f:
5b:29:63:c8:6d:0e:73:45:a9:70:56:fe:3c:6f:25:b0:48:62:
05:69:d7:a0:36:33:6d:cf:c0:a2:31:5d:31:5c:3b:ad:38:6f:
b2:fc:61:c1:dc:e5:38:20:c9:ff:56:17:f1:65:87:f7:ee:bc:
df:70:9a:95:c7:f5:e4:dc:1c:70:a4:fb:26:c5:8f:5f:05:00:
c2:b1:bb:33:c8:a9:62:fc:11:50:a7:7b:ef:a7:13:76:e0:0b:
5c:aa:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:34:47 2025 by rpki-client