Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: 3ClixOde8LBsRf+Ec+qJRf0zo+IHwk9nGM6ssh3wFj8=
Subject key identifier: 2B:F0:E2:6A:3D:F5:F0:3F:2F:2E:05:1E:FC:D1:FA:16:9B:FE:D5:34
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 0196AFC481AF22B5C0200F7C0F2542ADCD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: D0
Signing time: Thu 08 May 2025 12:00:12 +0000
Manifest this update: Thu 08 May 2025 12:00:12 +0000
Manifest next update: Fri 09 May 2025 12:00:12 +0000
Files and hashes: 1: 9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa (hash: +AotBLTXOYZ2qqQz68W39gfX7TdnqXgGz673AR3fS9c=)
2: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: jI7u5OdwHKuUKjPDVqx6q1jrfJrW8k1aH8uUxYAXuso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:81:af:22:b5:c0:20:0f:7c:0f:25:42:ad:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: May 8 12:00:12 2025 GMT
Not After : May 9 12:00:12 2025 GMT
Subject: CN=2bf0e26a3df5f03f2f2e051efcd1fa169bfed534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:ae:fa:53:42:6d:70:29:6f:f6:dd:61:ab:
5b:3a:3f:d9:0d:6c:2c:d4:1f:d3:fe:88:33:07:7e:
9c:71:dc:7e:06:d9:55:90:fc:10:8f:3d:39:8a:7a:
b7:78:bd:35:f0:73:37:e3:17:ee:76:61:71:0d:6b:
3f:52:03:2f:35:4c:47:50:04:6e:f4:70:b0:19:04:
8b:bb:ac:a5:f0:ff:25:1d:ca:bb:12:1f:71:f9:ff:
2d:f2:88:bb:5a:3d:f5:ca:ec:1a:2a:10:0c:3d:dc:
56:09:aa:f4:4f:4b:49:3b:13:ce:fc:d5:6f:c5:a0:
76:46:2d:c4:5b:a6:6a:bd:08:fe:f4:58:32:50:5e:
e2:62:46:b1:98:f5:50:9f:25:40:97:ad:0d:7b:a0:
21:d7:72:0a:96:73:52:d9:8f:fe:45:39:ac:48:fe:
9a:ee:7a:47:4f:76:1b:6d:37:5c:d7:c1:05:56:8d:
17:96:b3:54:d0:fc:ff:18:1d:3a:e9:0e:0b:01:b7:
36:e6:fd:15:d8:83:4b:7f:4e:2b:97:9e:1d:67:81:
10:fd:56:03:f0:1b:05:5d:77:7f:d9:de:db:5a:5d:
f9:09:6d:4a:54:25:aa:de:0c:d6:fa:cb:81:4c:c0:
18:26:cf:6f:de:53:c8:91:83:5f:4a:c5:a6:e0:bd:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:E2:6A:3D:F5:F0:3F:2F:2E:05:1E:FC:D1:FA:16:9B:FE:D5:34
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:4f:0b:0e:a9:9b:15:0e:96:3b:a2:56:22:1e:62:4a:a2:
6c:1c:47:88:d0:83:c1:77:8f:40:fa:96:e5:a7:ac:d2:bf:c8:
99:93:4b:f0:27:5a:d4:e0:cc:96:5b:ea:da:49:6c:bb:c1:ba:
0c:a2:9d:61:8d:b4:0b:5d:f9:1d:39:22:7c:2b:53:25:ae:30:
f4:22:32:7e:f5:d8:0a:0f:88:a4:b7:e5:94:3b:fb:1f:89:5f:
aa:71:fa:ad:53:20:b8:f9:9b:de:d3:f5:66:1c:71:ce:0b:26:
cc:6a:0e:05:f6:5f:1c:b3:8d:5a:35:07:6f:0b:82:59:57:de:
04:82:7f:af:c7:06:fd:95:25:f9:dd:27:a8:82:77:77:07:a2:
b8:e5:9f:58:b7:44:26:00:6c:f7:41:db:cc:df:1a:85:5a:66:
9e:d7:b0:bf:23:37:58:5c:ce:e2:8d:37:30:e5:26:d8:08:d5:
95:24:cc:fe:c7:14:53:a0:f6:6d:cd:35:1a:30:bc:b1:4e:85:
e0:9b:35:91:2f:37:8d:96:2c:cc:8c:76:5c:0b:bc:76:b7:2d:
de:3b:47:68:0e:c8:b0:9b:1b:af:20:88:7d:10:4e:61:e1:69:
d8:3a:f7:e1:4c:a5:7b:db:8b:dd:65:65:88:e5:36:a8:2e:a9:
1d:0d:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:28:49 2025 by rpki-client