Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: QO+10AHtljMPc4u9NrwRgPwm1gjDtXK1IM6GGkob3ps=
Subject key identifier: 44:E6:B5:5B:31:AD:5F:08:6F:01:D4:26:48:75:D5:E7:79:69:0D:DB
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 0196B8FEC0EC7F8FFB0DF6654AC7D77023F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 066A
Signing time: Sat 10 May 2025 07:00:25 +0000
Manifest this update: Sat 10 May 2025 07:00:25 +0000
Manifest next update: Sun 11 May 2025 07:00:25 +0000
Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: G9qVwOjJnoDPTiG0jlfeeQ83UNurtJdZap/93L25uxI=)
2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:c0:ec:7f:8f:fb:0d:f6:65:4a:c7:d7:70:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: May 10 07:00:25 2025 GMT
Not After : May 11 07:00:25 2025 GMT
Subject: CN=44e6b55b31ad5f086f01d4264875d5e779690ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:e2:36:aa:14:70:2c:e4:93:b6:f2:8c:ae:
0e:13:40:4d:c3:fa:9d:56:78:19:60:db:8d:66:f5:
f7:48:b3:85:ae:10:51:8e:cd:17:ee:bc:9c:df:d9:
8d:da:d8:b3:77:11:a3:b9:b7:35:a6:01:22:af:ec:
bf:36:02:66:9d:46:54:83:44:75:c9:ca:c1:d9:33:
92:e1:f1:c2:1b:77:09:bd:dc:40:33:e7:b8:4c:05:
96:53:a9:b4:20:5e:3e:37:04:fb:ac:9e:b0:df:25:
11:d9:f9:ab:7d:01:8c:1c:da:a7:41:20:0a:7b:4e:
82:c0:51:17:29:78:54:c2:fa:36:64:61:9f:a3:5e:
b5:eb:51:71:2f:c9:5d:fb:f2:97:a5:6a:71:ca:ef:
32:a6:2f:7f:af:e6:37:7c:03:3a:f0:d3:e1:2b:60:
2e:23:d5:7e:74:bc:c5:67:83:7e:51:6a:15:e7:4b:
23:c5:01:a9:ee:1b:ee:47:ed:ba:fc:76:8d:cf:1d:
67:5a:a5:be:48:aa:a3:74:4a:fa:29:77:46:82:91:
35:e8:25:de:02:32:7f:31:3d:76:50:ed:73:49:0c:
27:ed:fb:8b:9a:ed:93:53:19:ed:37:ed:67:3b:a2:
80:72:6b:b1:a2:ce:c4:96:46:ea:75:e0:07:ca:b9:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:B5:5B:31:AD:5F:08:6F:01:D4:26:48:75:D5:E7:79:69:0D:DB
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d3:89:29:d6:fc:56:68:91:fa:97:27:60:60:c4:46:8c:30:
cc:25:17:10:37:3b:1f:eb:1e:c6:43:89:e2:d4:f8:f9:63:6b:
4d:25:4f:f6:e9:06:91:f5:f5:22:94:aa:34:ca:e3:18:2b:7d:
1f:1f:91:6b:0a:37:4f:88:6b:34:10:c6:0e:29:59:3b:dd:38:
60:49:1e:a2:93:06:e1:00:5a:ad:03:28:f2:20:9c:77:25:eb:
57:ed:8b:8d:7b:96:05:43:b1:b2:43:54:8e:ef:29:a5:b8:68:
b9:0a:9b:8b:f1:87:c2:3a:3d:14:cd:47:83:fd:57:08:6c:53:
4f:ba:71:48:90:cc:f9:26:28:69:33:69:28:69:ed:1f:d4:43:
83:e1:03:4d:d2:9c:0e:56:13:73:f4:1e:58:8f:e5:5d:ff:54:
85:02:de:8f:fd:4d:f1:13:dc:fb:dd:bd:e7:36:8d:96:4d:1d:
3f:af:a0:3f:48:5b:47:a3:55:25:41:b0:49:f6:a5:45:90:34:
d5:2f:ce:04:e6:8b:34:25:6a:f7:f6:93:92:e1:f4:a5:0b:28:
c1:f2:38:d9:e5:d0:7e:8a:23:91:50:72:c8:81:25:78:73:7b:
3e:c0:9b:20:26:40:da:6d:47:eb:2c:a4:e1:08:f1:54:f6:f6:
2b:bf:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:49:33 2025 by rpki-client