Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: qLQfvxLx1hkOJd7qrz7UnXCV/bWBob8ra6GSu+u5Qlw=
Subject key identifier: DB:28:4F:AE:9C:32:74:69:8F:43:C8:20:3D:DF:25:33:87:CE:71:E2
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0196BE934652A084B6267341C95BDCE7AADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0942
Signing time: Sun 11 May 2025 09:00:44 +0000
Manifest this update: Sun 11 May 2025 09:00:44 +0000
Manifest next update: Mon 12 May 2025 09:00:44 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: lxL5JJ3Uh5bmcQmmhpqs1lpVnVkVYSu91j9UYevIsj8=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:46:52:a0:84:b6:26:73:41:c9:5b:dc:e7:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: May 11 09:00:44 2025 GMT
Not After : May 12 09:00:44 2025 GMT
Subject: CN=db284fae9c3274698f43c8203ddf253387ce71e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:0b:2b:01:32:5c:32:c0:70:cd:f6:78:69:
fd:9d:18:15:ef:44:6f:59:d7:91:76:5a:72:a8:f2:
81:4f:37:f6:1e:8d:c6:fe:b4:9b:65:5b:fc:51:50:
b3:35:fb:22:ea:c3:e0:bc:9a:e7:a5:5e:e6:b0:0a:
79:cf:69:fa:1a:2a:1d:96:e2:f1:30:1c:1a:b0:77:
17:13:15:6b:b7:98:b7:ac:fa:58:61:22:f1:f8:7b:
30:cc:61:f5:36:a8:a4:fa:ae:3d:26:6e:56:38:ba:
a9:61:db:00:16:d0:5d:23:9a:3f:9c:1a:aa:c0:75:
52:06:6d:f6:5d:5b:b9:07:fa:7f:86:1d:4f:ff:0b:
96:99:cf:61:8f:23:ae:62:22:c4:30:70:b6:78:b5:
4c:df:f6:07:2f:7b:ab:5e:ed:a0:d5:40:9b:19:2f:
4d:dc:b0:01:c7:3c:67:a6:68:01:72:de:fb:6a:d8:
60:11:c3:85:1b:33:38:f3:e1:0f:4a:bd:1b:7c:cd:
b3:fe:f3:1f:e1:f5:66:6a:a3:f0:e2:31:6a:b2:df:
bf:52:72:bd:aa:b8:61:76:db:32:30:70:6f:f6:3e:
e1:d3:11:14:d2:53:10:1e:cf:35:12:72:0a:ef:9a:
e8:75:cf:91:2a:15:f9:ef:51:81:e3:61:54:a2:be:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:4F:AE:9C:32:74:69:8F:43:C8:20:3D:DF:25:33:87:CE:71:E2
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:6a:50:b2:99:bf:46:c5:d8:a4:64:48:bf:62:bf:88:f2:
52:b3:ec:04:4a:37:98:fb:28:91:2d:40:6b:a4:d9:99:7f:b4:
78:a2:0d:7d:6e:1e:51:6e:5d:e4:d7:40:3b:1a:da:bd:64:6b:
11:e6:7c:e6:f3:db:82:b7:88:16:a2:17:a6:36:fa:0b:4e:18:
36:27:cb:28:24:4b:ce:19:ab:91:20:0d:9f:fa:d3:04:be:4d:
da:76:19:a6:e2:44:2f:8a:cb:77:0b:e3:ca:0d:46:c5:28:e1:
c9:10:61:8f:77:e5:0f:b2:35:24:ba:8f:f9:93:50:ca:53:92:
09:37:61:8f:29:a6:e0:24:d2:11:a2:8a:14:e2:51:49:f4:90:
7a:27:e0:26:76:0c:06:c5:50:c1:87:1a:b2:ff:bd:51:a4:7d:
bd:f2:36:f3:d9:cb:6a:92:8a:53:2d:91:09:71:78:4f:f4:c1:
f2:b4:8c:1b:15:63:1f:39:cf:86:3d:33:24:a9:ff:1c:84:11:
d9:30:43:92:5c:87:a3:4c:c6:ae:24:f6:13:8f:73:9d:4b:85:
c4:b6:84:9d:23:b9:f9:d4:c9:72:21:52:cb:df:cc:2c:73:8c:
de:d8:a5:5d:03:c2:29:a0:a9:28:59:15:4e:fa:04:c4:9f:b6:
2c:2c:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:01 2025 by rpki-client