Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: xr3wIZFc0RikjzOq67d3ji0626zZC1VJ3W3Wh4MMfmU=
Subject key identifier: 9F:3B:BD:47:D3:D2:08:54:59:49:9A:7D:9D:A9:A7:0E:61:6B:18:04
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 0196C6BAD2196D98464A61A9D3B9DBE93AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 3E
Signing time: Mon 12 May 2025 23:00:54 +0000
Manifest this update: Mon 12 May 2025 23:00:54 +0000
Manifest next update: Tue 13 May 2025 23:00:54 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: uQy659PEDnDwl/6DexIee4cYEXgJ0pjvXWJTIdDiw18=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:d2:19:6d:98:46:4a:61:a9:d3:b9:db:e9:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: May 12 23:00:54 2025 GMT
Not After : May 13 23:00:54 2025 GMT
Subject: CN=9f3bbd47d3d2085459499a7d9da9a70e616b1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:bb:68:f3:68:b3:4c:63:14:f0:e2:5e:8e:
d3:91:97:e2:60:0f:2f:cb:37:91:7f:bf:51:e6:43:
03:62:0a:bf:86:a3:7c:0c:d6:83:c7:00:ad:8f:a9:
d9:d8:2c:dc:a7:0f:aa:d9:da:89:fb:9b:ec:b5:0d:
ad:8c:48:e7:84:d9:7c:36:81:f0:ab:e2:53:5a:62:
b4:62:13:2f:e3:82:4f:4c:fd:2e:30:f7:29:35:8f:
e4:05:56:c1:2c:98:d9:84:41:ec:a4:a4:d8:df:42:
02:7d:34:c0:53:f9:8f:7b:45:e0:d2:28:ff:e7:d9:
1c:41:37:4c:df:06:02:2d:1c:17:a7:6d:77:70:e2:
82:ef:c6:2a:d0:64:5b:8b:51:23:c9:09:50:3f:e7:
da:81:58:22:88:91:5e:e9:2f:04:ae:5d:4d:10:8e:
57:11:62:52:eb:6f:2c:9b:d1:06:23:4b:82:0c:5f:
74:19:b9:46:51:db:35:f6:05:d2:6c:79:98:ce:a3:
92:c4:8e:da:28:c6:0c:7e:9a:28:62:30:37:f7:82:
bc:04:f7:64:a6:58:5c:e3:51:ef:10:15:5a:16:ba:
79:a5:54:b7:58:6e:6c:db:a2:48:35:61:11:d0:c7:
02:01:c7:41:5b:3f:5a:ed:a6:a0:ae:eb:65:70:b7:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:BD:47:D3:D2:08:54:59:49:9A:7D:9D:A9:A7:0E:61:6B:18:04
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:99:5a:7c:d5:cd:90:71:83:5d:bf:c6:d4:ed:08:58:c2:af:
cd:01:0a:50:39:9c:72:d8:00:49:77:74:62:2b:64:96:70:b0:
83:36:bb:bc:e6:fa:13:43:84:1c:c7:14:fc:2a:7e:33:60:2a:
1a:5e:e0:d1:ed:04:1e:e2:a7:a4:ae:3c:6a:2d:22:1e:e3:73:
58:1b:fe:a2:b1:55:d0:27:64:cc:c2:ce:8f:82:11:ca:35:64:
33:6d:72:0c:ec:5d:73:d2:f8:58:c0:76:69:46:50:0c:b0:35:
be:1c:73:76:d1:e7:47:03:ab:42:9e:8f:40:46:dd:e0:3a:eb:
4d:93:fc:a9:85:a6:9f:98:b8:c3:e7:f0:c0:79:06:ff:29:50:
18:91:53:bd:b0:d1:0d:da:7f:87:7e:e0:af:40:2a:b8:05:7e:
f6:41:72:1b:4d:42:9f:0e:36:81:35:db:bc:04:b8:cb:ce:92:
b1:17:c3:f4:35:24:bb:83:c8:d2:78:3c:91:40:1a:c7:81:d2:
80:d5:5b:29:4a:08:aa:31:e7:da:65:20:de:fc:36:af:60:8a:
cc:ef:17:ae:a1:46:87:f2:f2:f1:3a:0a:c7:81:ba:ac:64:90:
cc:b9:f8:67:27:d9:a9:d3:69:f5:78:fd:1b:7c:87:ee:af:0e:
d5:62:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:10:41 2025 by rpki-client