Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: rGEhvM7lQHdZB51xy0HCla311x6QY4JjAUxl4R1Yto0=
Subject key identifier: D7:D3:25:0D:40:FA:27:74:9A:10:06:BF:57:2C:84:20:04:03:F5:6A
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0196C3148322773105DE3FE1F303903DE235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0668
Signing time: Mon 12 May 2025 06:00:23 +0000
Manifest this update: Mon 12 May 2025 06:00:23 +0000
Manifest next update: Tue 13 May 2025 06:00:23 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 0H24m+X7s5tdQkpYTqjYQVge8x8YQ6P1/CNFWzoQF0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:83:22:77:31:05:de:3f:e1:f3:03:90:3d:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: May 12 06:00:23 2025 GMT
Not After : May 13 06:00:23 2025 GMT
Subject: CN=d7d3250d40fa27749a1006bf572c84200403f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:60:4c:30:02:e2:70:99:a5:32:8b:a5:1a:
99:be:47:17:34:4c:a0:2a:71:cc:a5:ee:1a:c9:04:
63:82:71:f0:f1:5d:70:0e:c3:f1:63:31:5a:e8:e5:
8e:99:cb:c2:62:2f:50:d0:21:84:47:ef:89:16:6d:
93:34:60:a8:ee:e1:0e:81:f1:54:20:d6:d7:51:57:
a3:f7:71:b3:40:b2:72:84:75:5e:3d:50:d0:70:d0:
5f:d7:cd:84:dc:c1:06:fa:48:65:da:c5:76:ac:cb:
8f:ff:48:87:5a:3a:ce:62:6b:9e:52:54:cc:7a:db:
72:e8:3c:fa:e6:9b:f7:ec:9d:64:f4:57:97:10:90:
5e:3e:c3:84:85:51:20:90:33:8a:46:0b:c4:d5:eb:
9d:40:3d:e7:d6:a3:ef:ad:15:42:06:ac:85:cd:f6:
19:1c:ab:b6:91:37:30:b0:fb:d9:a6:3d:6f:83:db:
55:be:43:1f:fb:a2:3e:29:2d:03:09:99:17:04:4c:
fb:cf:71:69:54:90:4b:45:39:ce:e8:0d:78:1e:1c:
06:fe:f0:f6:c3:19:40:3d:ed:8b:e0:e4:17:c9:06:
fe:83:d6:db:a0:26:64:a6:cb:b5:45:e8:ac:e2:95:
d4:9b:11:a3:61:bb:b9:ac:7e:83:f1:6d:9d:2a:60:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:25:0D:40:FA:27:74:9A:10:06:BF:57:2C:84:20:04:03:F5:6A
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:da:9b:4a:40:17:75:67:40:fd:6a:b9:ba:93:30:87:74:
df:25:16:3a:ad:bd:ec:dc:d1:1d:05:8e:ee:94:72:73:34:7c:
16:46:a2:e5:4a:d5:fc:2f:0a:1f:d3:8e:0a:2a:d1:01:82:ea:
ae:6b:38:51:1a:16:43:3e:4a:2b:5e:4c:e5:14:b3:87:20:83:
9d:01:fe:1a:62:e7:a9:27:c5:8a:b2:e7:65:cb:c6:e2:06:f6:
96:3d:bf:4c:30:9d:6c:a7:fb:e1:8a:3f:09:c0:06:4f:70:dc:
46:0e:e5:33:6b:60:98:45:81:fd:bb:4f:92:16:40:39:05:39:
55:c4:65:14:bf:64:14:41:cf:0b:ad:8f:f6:7a:86:33:4f:4f:
53:ae:0a:a7:92:85:db:8a:d1:95:09:e2:b2:ba:06:2c:5e:35:
1f:5c:26:80:f3:de:6b:e3:03:bc:18:52:4e:8d:c2:ff:b0:94:
b5:7d:72:29:6c:e3:2a:05:2d:2a:b8:cc:68:ee:03:c9:02:c0:
f9:96:f3:41:c9:51:b0:6a:c1:fb:cc:69:c5:90:62:e7:66:bd:
0c:f4:f1:3d:5d:f6:11:23:5e:cf:41:2a:f9:89:20:fa:62:5d:
2c:63:3b:12:1a:a1:18:28:7c:4a:47:92:f5:c2:03:b6:33:7c:
d8:12:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:20 2025 by rpki-client