Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier: zx/wbTdJoxo8sf9LuZJMzpgqMETFlNZ/KLzDaQYUEVw=
Subject key identifier: D6:72:C1:E1:83:C4:8A:85:EF:BB:89:C5:37:D2:21:E7:A0:CF:28:0F
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 01969FE41B678569E6A3DD85B4B4126183E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number: 0425
Signing time: Mon 05 May 2025 10:00:48 +0000
Manifest this update: Mon 05 May 2025 10:00:48 +0000
Manifest next update: Tue 06 May 2025 10:00:48 +0000
Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: PZXa2MIej05WtCMRGoSTopK2JncDwKxiKqXv8AoR/ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:1b:67:85:69:e6:a3:dd:85:b4:b4:12:61:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: May 5 10:00:48 2025 GMT
Not After : May 6 10:00:48 2025 GMT
Subject: CN=d672c1e183c48a85efbb89c537d221e7a0cf280f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:b8:e6:64:30:a8:43:0c:e9:39:b0:e0:2a:
93:0b:fa:bb:b9:29:8f:7a:a8:17:a5:13:7f:17:cc:
39:57:88:c6:92:35:27:df:03:94:1f:4b:8d:b6:f0:
f7:ea:ca:c2:50:be:6a:68:a9:c1:6e:6e:6d:06:6b:
a1:39:53:a2:18:ab:3f:e9:09:11:e8:c3:91:f5:3f:
59:79:04:22:57:c7:9b:da:98:00:8a:ac:bd:a2:10:
ec:9a:f1:2c:dd:8a:f3:63:85:5f:2b:e5:36:b9:30:
b5:ba:0f:0c:cb:76:b0:5a:7f:aa:eb:1e:e9:25:aa:
a2:67:fb:a9:45:89:77:43:f6:62:c4:2f:a9:51:53:
21:4a:9b:9e:89:db:e8:64:d8:08:6f:e0:7f:9b:57:
8c:42:e3:a3:af:f2:66:0e:f9:49:0f:b2:47:d1:ac:
9d:0c:3d:b2:df:9d:3c:fc:7b:d8:8b:bd:47:8b:17:
5a:e0:d1:96:9f:52:04:eb:a2:b8:67:93:5e:be:03:
6b:26:93:39:45:7e:ab:ae:05:fe:5a:ed:f2:68:60:
32:19:f9:e5:7a:ff:0b:23:36:92:f9:10:82:b9:e6:
e9:ef:dd:ed:d2:05:d6:24:e7:50:61:32:5e:54:f9:
56:5b:d6:19:e7:56:10:b4:18:2b:46:90:95:91:97:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:C1:E1:83:C4:8A:85:EF:BB:89:C5:37:D2:21:E7:A0:CF:28:0F
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:92:d5:4a:b3:4a:65:85:9f:61:f0:73:f3:dd:42:0f:48:
46:c8:df:72:5d:78:06:7b:87:b4:7a:5e:d9:2a:c4:91:dc:60:
ef:12:78:88:16:4f:2b:06:28:02:ef:05:d0:fd:e0:7a:a6:e3:
79:6f:90:70:c8:0a:c1:cb:60:11:e2:e5:10:a0:26:4c:49:00:
d9:3e:32:a7:4a:12:03:b7:2a:ae:4e:80:10:ca:7d:b7:be:7c:
0a:df:14:95:b6:4e:36:89:06:b1:a4:0b:bc:96:85:7f:85:21:
b8:f5:b1:9e:1e:2b:2c:8b:14:c3:00:b1:4b:24:21:c9:9a:98:
e5:18:85:8e:4d:61:44:e0:9d:3f:b3:5a:bb:c5:73:f9:1c:c2:
ad:75:02:42:50:ae:c8:a7:d0:2b:90:c7:87:b5:55:c1:1e:f3:
f5:5a:dd:c3:dd:98:bb:cd:4f:0b:32:d3:e0:f2:35:95:f6:8a:
7e:51:e4:b2:36:25:37:6b:0a:ea:51:3f:d3:48:71:0a:71:0b:
07:5b:b6:e2:18:7d:02:4f:1e:98:3e:68:fe:c8:34:05:49:ab:
9b:08:ae:d5:28:87:f5:a7:b7:1d:0a:ba:93:0b:f5:16:9b:5f:
42:23:1b:ce:2a:a2:c9:4e:56:89:4d:15:53:ed:c9:ac:0e:f7:
68:42:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:28 2025 by rpki-client