Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: agf3a7RKsKOW56k6cH415lT6Ip+AE/M5TquZ23ZphUE=
Subject key identifier: DF:2B:14:44:6C:F5:56:A0:BF:F1:7A:11:CC:58:58:59:91:94:FC:89
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0196BC6DE5B4D9F3F690C3A933C8428B9542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 14C7
Signing time: Sat 10 May 2025 23:00:40 +0000
Manifest this update: Sat 10 May 2025 23:00:40 +0000
Manifest next update: Sun 11 May 2025 23:00:40 +0000
Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: k6AwRC1KGpmu+zN7/+bzD+9jB0cqeO2pSZs0XQVy3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:e5:b4:d9:f3:f6:90:c3:a9:33:c8:42:8b:95:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: May 10 23:00:40 2025 GMT
Not After : May 11 23:00:40 2025 GMT
Subject: CN=df2b14446cf556a0bff17a11cc5858599194fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:6d:57:7d:6c:1e:0c:16:39:e7:0b:4b:4e:
dd:49:df:1e:26:16:39:07:cc:0f:1c:5a:32:6d:62:
3f:85:10:ad:ae:43:4d:2e:23:90:8d:99:4d:13:76:
b8:bf:58:21:70:94:9e:12:40:d9:e8:49:c3:0f:5b:
88:88:bd:c5:dd:c7:76:fc:04:a0:56:0b:2d:69:04:
e6:ce:52:33:1a:a3:b5:c2:7b:ae:8f:13:79:8d:bf:
fb:3a:87:58:11:ef:06:45:8a:61:1f:10:dc:4c:e9:
ea:25:9f:a0:bd:a6:69:a8:4a:46:b4:12:9e:eb:ef:
cc:e4:6b:63:c6:72:f7:ce:41:ee:da:27:dc:2e:89:
d8:8e:d0:a4:d8:44:49:04:ac:4f:54:07:3f:e7:cc:
07:bd:75:18:86:e4:23:72:6f:28:c7:f4:2a:50:e9:
60:d2:1f:2b:be:a8:31:69:ea:dc:8b:0a:10:48:34:
8c:f6:af:bb:9a:47:8d:74:96:70:a2:0e:ad:5a:95:
be:b1:28:d3:16:9a:71:db:cf:7c:f6:32:15:7b:76:
67:89:39:0b:42:01:cb:f3:9a:79:9a:b8:1d:fc:1d:
8d:ee:79:19:0d:26:fd:f2:ba:c0:78:e6:98:1c:88:
d6:0c:f8:16:b4:a8:ec:ca:41:9b:36:96:af:77:5a:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:14:44:6C:F5:56:A0:BF:F1:7A:11:CC:58:58:59:91:94:FC:89
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:ae:29:e2:3f:e5:54:4a:b5:99:99:7a:1d:26:82:5f:ad:
d2:fa:9f:e6:e0:6b:fb:63:f2:0b:a1:80:ec:ba:78:ec:2e:9f:
89:8c:68:3e:03:37:4f:3c:42:8e:1a:40:03:72:55:5c:e9:05:
a3:e8:64:17:b7:5f:67:19:21:0f:5a:b2:2d:27:3d:4c:22:b1:
0a:08:43:18:59:40:19:92:03:fb:61:00:73:f9:7d:fa:f9:5f:
c1:90:dd:ba:b4:b6:55:1f:f7:dd:d8:71:e0:a1:ae:48:ce:8d:
75:85:82:8c:66:27:a8:61:f4:9e:63:2b:20:71:9f:f5:b1:25:
11:54:59:84:bb:da:a9:ca:d4:32:9b:9c:6a:6f:61:97:81:f4:
31:d0:7d:3e:b1:2e:c9:1b:79:15:7e:2a:6a:30:ab:d4:bb:a1:
40:33:c8:30:f8:59:d8:89:c8:25:54:49:78:a0:8c:c4:18:d9:
f0:5a:86:18:16:fb:6a:03:a9:46:9c:9b:f2:d1:3e:a1:f0:81:
d4:bc:b8:55:e7:33:e7:e1:64:18:48:40:1e:cb:81:1c:44:b2:
e9:92:ef:28:49:22:d8:c0:84:f5:8c:6c:a0:a6:8e:6a:42:31:
35:08:42:00:75:73:ef:26:ca:84:79:a4:c1:0d:0a:00:50:03:
50:ac:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:39:54 2025 by rpki-client