Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: Ma/12cn6SOEC+0jSbi50sV2/woDSH7kOjJ6cTP+Hh3g=
Subject key identifier: 01:AA:8D:63:0B:AC:F7:06:CB:9E:B2:FA:EF:14:1F:8A:12:45:71:0D
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0196BEC9FD0A87B27BA85CD8F1685774E31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0EA0
Signing time: Sun 11 May 2025 10:00:30 +0000
Manifest this update: Sun 11 May 2025 10:00:30 +0000
Manifest next update: Mon 12 May 2025 10:00:30 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: CJTvMBR1Zox22xrV+I/8xju96XN4/LaK8zUoTWqOGDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:fd:0a:87:b2:7b:a8:5c:d8:f1:68:57:74:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: May 11 10:00:30 2025 GMT
Not After : May 12 10:00:30 2025 GMT
Subject: CN=01aa8d630bacf706cb9eb2faef141f8a1245710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:a1:3d:dd:7d:93:dd:14:b6:3c:99:8a:60:
af:62:ed:5d:8d:68:88:d1:e9:33:ac:d0:40:5b:33:
89:3b:88:e8:52:f5:6e:ec:59:57:03:17:93:ba:a7:
87:22:b2:ca:f5:a2:f3:e9:07:dd:1c:f8:4e:f0:86:
05:2e:02:a1:97:d2:0c:b4:00:d1:11:ca:9f:34:2a:
9b:c1:17:bf:e9:74:13:d4:79:cf:d0:18:d0:6e:44:
12:11:3c:51:14:bb:83:b4:8c:65:6a:a4:dc:20:9f:
bb:1d:ff:ee:0d:08:b4:8a:a8:07:93:e3:bc:10:c4:
f3:c1:99:0a:66:7a:5e:78:d7:cc:c2:64:44:53:50:
b1:74:52:ab:7c:66:ff:fe:2c:49:42:31:d1:7d:aa:
2f:0f:c2:d1:2c:f0:d0:6e:ab:0a:52:ea:56:2a:9d:
cb:14:17:1d:48:f2:2c:40:9b:31:98:cf:58:83:17:
72:48:40:45:f0:70:5a:82:2a:e4:1c:c3:48:27:66:
af:cd:fb:9c:cb:41:32:72:c6:bf:9a:c2:92:6d:9c:
79:db:d0:39:be:e1:ba:b7:b6:f5:d1:3a:07:e9:41:
03:fd:b3:2f:b4:55:30:07:fb:36:45:21:e1:18:3b:
0c:5b:56:57:5d:d9:e2:2c:10:d2:57:96:13:c4:d1:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:8D:63:0B:AC:F7:06:CB:9E:B2:FA:EF:14:1F:8A:12:45:71:0D
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8b:ed:d4:e1:bc:03:8a:9e:1c:e6:31:88:21:a4:45:9f:57:
22:01:7e:83:23:bf:b7:fe:6d:da:22:fc:3e:08:be:12:dc:df:
ca:47:b2:76:f2:3b:cb:3f:d7:67:a5:66:e4:9c:d4:fe:6c:45:
87:a9:6d:e1:05:31:b6:59:e1:ea:da:24:c2:62:3d:bd:85:bd:
5b:9c:0d:b5:02:02:3e:5e:85:63:02:44:27:a7:93:d8:4c:31:
c4:f0:1c:90:a4:5f:b1:32:27:36:11:70:6b:fe:5b:f0:e0:50:
e6:9e:63:8d:84:11:09:d8:6e:89:ef:8b:e2:d9:b1:48:4e:4e:
3c:18:31:8f:47:01:34:f4:ae:6c:9a:13:91:16:fb:2d:bd:b3:
ad:7d:ef:22:54:22:2a:1b:f6:49:b7:43:cf:07:8f:58:59:cc:
5e:ee:ae:0d:75:4a:68:d9:a9:24:59:69:3a:12:94:c5:c7:64:
24:d3:9f:03:12:cd:f3:6e:c5:32:34:b4:84:ee:2c:db:91:36:
bc:8c:90:db:b9:42:d8:21:f1:a0:09:e3:26:8e:a8:97:3d:4a:
db:9a:ab:eb:b4:b0:1a:a7:2c:5b:9d:fd:0a:b8:b2:34:08:70:
41:9d:9d:0f:8d:a3:c3:50:94:07:9b:1b:36:77:8a:82:ff:5d:
7d:b7:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:43 2025 by rpki-client