Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier: VVRm/zfwb8tFefeQ2KOSz4e2i/dFJB7+q4ruP+MOIfc=
Subject key identifier: 8F:E4:37:D9:A3:BD:3B:08:9A:4E:8A:38:11:29:E7:99:92:64:8F:C8
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial: 0196B7B5B0B7FEE76D0FF85A6CDE4EE8F421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number: 14C3
Signing time: Sat 10 May 2025 01:00:59 +0000
Manifest this update: Sat 10 May 2025 01:00:59 +0000
Manifest next update: Sun 11 May 2025 01:00:59 +0000
Files and hashes: 1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: OJ2j68GpBzDYLu71WfFT9txI4hsZp1CXSEaNLjP+gHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:b0:b7:fe:e7:6d:0f:f8:5a:6c:de:4e:e8:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Validity
Not Before: May 10 01:00:59 2025 GMT
Not After : May 11 01:00:59 2025 GMT
Subject: CN=8fe437d9a3bd3b089a4e8a381129e79992648fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:e0:fc:99:19:4b:5a:3c:ea:c5:f4:08:91:
de:7c:76:3a:ba:3f:54:8d:36:6e:91:4b:ae:99:17:
59:7a:c8:12:21:25:28:64:61:01:90:bc:27:67:fd:
b4:41:ba:fd:66:5f:e4:bb:92:a4:1b:d8:3c:07:2e:
df:e5:df:45:f6:2b:91:7d:47:0a:e1:f7:59:8e:f0:
03:ba:91:e5:bf:37:5b:3e:11:a9:bf:e1:82:63:7e:
79:c5:90:c6:5c:06:1f:33:67:c2:43:52:c1:79:8e:
39:12:b7:5e:c1:88:a0:57:7b:34:d7:da:48:a7:69:
1b:ad:c4:43:0c:ac:13:cd:52:30:49:e3:e1:a5:5b:
1a:04:b3:8f:e5:d8:9d:74:d1:c2:61:be:67:c3:57:
6c:42:c6:f6:8b:79:79:23:68:92:2d:f3:62:04:4d:
75:6d:9f:1f:9d:6e:8c:3b:68:7e:14:56:f8:49:25:
a7:67:60:86:33:2c:78:3a:52:4e:ae:55:fa:af:32:
71:be:90:15:c0:1d:fc:f7:92:01:e2:2e:e6:42:6c:
d4:ea:ea:25:c1:81:dc:a4:b7:60:33:0f:5c:66:59:
bf:0e:55:9a:c6:cd:5d:28:02:d6:85:07:2f:f1:4c:
6c:00:72:fe:28:6f:fb:8a:b2:0d:e2:38:18:de:2c:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:37:D9:A3:BD:3B:08:9A:4E:8A:38:11:29:E7:99:92:64:8F:C8
X509v3 Authority Key Identifier:
keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:3c:a9:be:c1:5c:f7:e4:be:e0:5e:dd:5a:4d:51:b3:31:
5e:db:14:48:22:33:73:b3:ce:14:d1:b0:6a:77:9f:cb:c5:24:
b4:6a:5f:34:e5:1c:dd:f6:83:90:32:93:a6:ed:8a:42:a9:d1:
b7:5b:89:dd:86:49:dc:42:c8:79:7b:41:c3:6d:aa:a8:13:47:
55:9f:e7:be:a0:bf:86:22:d3:23:36:83:49:a0:99:1c:ee:ea:
6a:44:d7:0f:f9:b1:58:0c:b5:41:22:ef:7f:54:93:a8:c3:82:
df:43:7c:7a:d1:25:58:a9:c5:cd:07:8f:0c:62:6f:53:39:8c:
18:f0:0d:83:df:63:1f:41:24:db:93:9d:71:06:95:dc:f9:92:
ec:da:49:d2:8e:82:4b:98:74:3a:cd:88:55:4c:4c:04:9b:1b:
fe:57:b3:09:30:17:6c:70:c8:f2:48:e9:94:c4:4a:2d:c2:c3:
5e:ff:57:ef:04:35:d8:b4:a7:f4:9a:59:ad:db:bd:de:fd:2f:
24:3c:ef:6a:dc:25:2e:20:9e:83:aa:b1:f0:2e:76:b8:da:dc:
55:14:0a:8a:ef:dc:e8:9c:48:a1:bc:91:4d:d9:96:1e:d1:06:
3e:6e:86:1a:41:01:f1:46:3d:38:51:b0:b9:bd:35:5a:b8:70:
c5:c6:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:26:12 2025 by rpki-client