Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: a4blqxDygENWtVPe3tIP64+2gXH1Li/9n4VIwR8bMIc=
Subject key identifier: 59:88:44:03:52:17:AF:A6:C1:E2:1C:CB:5F:FA:DB:08:01:1C:60:BC
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 01969E2CABC4674626C3D9934F8E6AA7C8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 02:00:49 +0000
Manifest this update: Mon 05 May 2025 02:00:49 +0000
Manifest next update: Tue 06 May 2025 02:00:49 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: zGp7B8ONHt+9p2Q1LDctLtD5EEYd899ihzWlhySYCdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:ab:c4:67:46:26:c3:d9:93:4f:8e:6a:a7:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: May 5 02:00:49 2025 GMT
Not After : May 6 02:00:49 2025 GMT
Subject: CN=598844035217afa6c1e21ccb5ffadb08011c60bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:2f:62:8e:b4:b0:94:d4:b8:7f:b9:7d:64:
24:e2:38:82:27:c6:b6:b8:b3:4d:51:52:66:5b:c2:
ef:c2:69:73:d8:9a:44:0c:7a:95:a5:d1:ff:a7:50:
71:5e:ee:59:3d:02:61:82:b8:7d:20:c0:7b:b4:48:
1e:5e:9a:be:b5:1d:c7:06:4f:ba:95:4c:bb:29:57:
7d:dc:d0:8d:49:a5:48:df:32:ec:66:f6:45:94:0a:
3d:60:b3:cd:25:9b:72:d0:55:55:32:63:96:f1:5f:
fc:87:9d:c5:9b:42:e2:6a:28:58:d0:c9:6e:3e:6c:
bd:cd:95:d7:54:2d:bd:24:d0:a3:6d:91:73:ea:1a:
e3:4c:d4:80:65:2a:1a:69:9a:66:ef:bd:22:a7:63:
20:ef:38:f4:54:36:ad:6e:a7:73:8b:20:bb:c2:f7:
16:f4:cd:1b:43:41:f2:c5:db:16:65:bb:f3:a9:71:
8e:67:a8:dd:59:00:88:8a:95:28:45:c4:c0:4c:58:
29:30:0a:7d:99:c6:c1:a5:3c:3a:a5:77:95:33:13:
3f:f6:fe:cc:40:f8:d3:53:df:b6:83:3c:35:c7:f5:
10:8b:f4:89:81:82:4e:4d:8a:5e:1c:20:ff:ae:f2:
b3:b4:f8:1b:23:e7:1f:cf:98:95:99:19:7d:b8:fd:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:44:03:52:17:AF:A6:C1:E2:1C:CB:5F:FA:DB:08:01:1C:60:BC
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:42:31:35:68:09:7a:c4:9c:d7:51:82:26:3a:fd:a9:20:
e3:0b:86:a1:21:ae:1c:04:b0:da:73:9c:d7:0d:17:4c:67:be:
f7:c2:3b:9b:62:df:1f:78:07:7c:c0:1d:ed:5b:b8:c3:fb:c1:
42:43:d2:f5:9d:22:1b:48:53:42:e0:32:74:6e:f5:1e:5f:44:
5b:86:1f:e9:07:dc:4a:e7:9e:10:a2:a2:d0:4f:b3:6f:45:d2:
89:b2:0f:c9:01:63:f2:d0:3d:35:38:ca:b8:4c:e4:84:c5:cb:
62:20:8d:fc:4c:8a:00:d1:77:22:d7:2c:da:c8:7a:9d:97:48:
85:39:97:f5:8e:48:df:4e:15:2e:35:bd:7b:5d:f8:e8:48:f4:
79:3b:c7:1b:2a:6a:9a:1e:8f:7b:7a:f9:02:76:0d:c4:87:47:
31:13:83:bf:a7:72:6b:48:a4:ca:ff:e2:a3:64:c5:26:a2:d6:
9d:7a:39:e8:9f:55:b9:aa:92:c3:16:f6:40:9a:45:0b:de:00:
51:81:a4:6e:4f:36:c9:e2:fa:98:3a:5c:0f:13:0b:7e:01:c2:
f1:fc:7b:1e:28:51:b3:bf:02:fc:d3:c5:62:b8:e9:30:25:59:
42:4c:8b:64:16:c3:a1:1e:bc:0b:5d:d3:f1:5e:a2:39:d5:27:
8b:38:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:09:31 2025 by rpki-client