Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: IZOoBUwOHnWSka+D0tMD+ztmpCIe2cAUqjp0e2Bl2O0=
Subject key identifier: D0:58:68:15:F1:04:B3:82:BA:2D:9A:37:5E:D5:CC:F9:EE:A9:AB:2B
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0196C1CB1E7213302D2D1C5DF483968DE223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 0910
Signing time: Mon 12 May 2025 00:00:36 +0000
Manifest this update: Mon 12 May 2025 00:00:36 +0000
Manifest next update: Tue 13 May 2025 00:00:36 +0000
Files and hashes: 1: H27SmDR8baZpuMXqTM3iDpRfuZQ.roa (hash: HRHfMmSbiheBl5EWJYTnfvHlbbvdFtOGz3m90LhYcYY=)
2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: /lCrgAtvtuisp0gpqhBzhGd0vkNPuxvA2+2I0KFR9n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:1e:72:13:30:2d:2d:1c:5d:f4:83:96:8d:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: May 12 00:00:36 2025 GMT
Not After : May 13 00:00:36 2025 GMT
Subject: CN=d0586815f104b382ba2d9a375ed5ccf9eea9ab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:0a:39:9e:06:fd:9e:bc:be:50:10:bc:bb:
71:9c:2e:90:fb:41:58:16:8a:ff:f8:91:3a:f3:17:
ea:a2:cb:a4:33:d4:ba:e4:a4:51:94:9b:99:8c:99:
69:f2:7b:54:b7:d4:85:ea:60:5e:fa:c2:28:77:08:
8b:07:18:d9:e6:3b:31:52:1e:25:d1:b8:3d:37:f0:
19:7a:c4:20:32:b6:24:f2:fd:b7:e8:d1:5a:e0:9b:
91:8a:bb:bf:be:5e:99:94:d3:9e:0b:3e:45:a6:fb:
d6:2b:75:12:5a:c7:c3:db:a0:c7:d3:5e:91:6b:d6:
47:48:16:3c:2d:04:d5:5d:56:90:06:73:ae:c9:bb:
4e:69:31:44:9e:6c:99:e1:a8:c4:99:e7:b4:11:09:
10:a3:89:bd:cb:1f:9a:c7:93:3a:f7:91:4c:4a:89:
dc:b7:c9:78:ab:34:4f:29:7f:cf:ce:c0:45:56:26:
32:21:19:b4:68:55:bf:d0:6c:cd:d4:37:de:6d:f6:
df:38:65:36:35:37:3a:6b:3d:f0:28:7a:c4:46:92:
38:7e:a9:bd:55:dc:d4:06:d1:3d:b7:68:b8:53:a1:
01:cd:26:b6:03:72:2f:e2:dd:bb:74:18:69:ae:aa:
be:e6:1b:27:27:0f:70:cf:3f:91:d9:d2:96:c2:33:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:68:15:F1:04:B3:82:BA:2D:9A:37:5E:D5:CC:F9:EE:A9:AB:2B
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a0:c6:ba:bc:67:5c:7b:62:74:05:3a:d6:57:66:f5:59:2c:
8d:10:68:0b:61:6d:dd:eb:3e:91:16:c0:5f:c4:e3:ea:5f:bc:
13:15:b3:5b:61:fb:37:a5:1e:c0:fa:2f:a6:ef:a1:f3:60:db:
71:44:99:df:0d:f2:4c:b4:d1:1a:0b:76:ba:25:d1:d1:06:ec:
7d:0e:94:9d:1f:56:f3:28:1c:1e:40:1e:df:47:e3:43:70:b4:
28:13:2f:87:9d:16:1f:b3:5a:26:b2:30:19:34:65:8e:3a:99:
6e:79:88:d0:1c:00:6e:a5:b7:23:34:40:39:7a:67:54:fc:ba:
85:d7:84:7f:12:4a:30:65:e9:07:96:c6:93:36:6c:eb:b9:8b:
8e:f4:61:d7:bc:61:e2:f8:66:0f:8f:2e:f7:55:05:60:b0:fc:
a0:fa:b4:3a:26:61:cf:91:44:24:39:81:a7:a5:a5:a9:67:bd:
a7:3f:2e:4a:36:3c:2c:2f:7b:f3:b6:5b:6f:70:37:7a:46:62:
a7:18:6a:0e:62:b0:5b:42:da:49:17:34:02:f4:66:c4:76:81:
7a:a9:6d:08:12:40:b4:63:11:54:09:81:02:a6:07:2e:ab:b8:
02:2e:7c:3a:fc:21:ef:d1:c6:a2:18:83:16:6f:26:7d:ea:23:
dd:2c:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:14:51 2025 by rpki-client