Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: QBjCxXPfB94No5HsxwqjExSAAU6GT9jNCXy8Tskfb3w=
Subject key identifier: 56:D5:18:B4:D6:DB:AB:F2:BD:12:6A:27:FE:A4:F9:EB:85:40:DE:D0
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 0196A6C259DDC9FBF8EDFEC6E827192D9CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 18:01:16 +0000
Manifest this update: Tue 06 May 2025 18:01:16 +0000
Manifest next update: Wed 07 May 2025 18:01:16 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: W/BF7vQrRY4v923VoltwlGovFoW5+MQL3FAhqGQRYzs=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c2:59:dd:c9:fb:f8:ed:fe:c6:e8:27:19:2d:9c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: May 6 18:01:16 2025 GMT
Not After : May 7 18:01:16 2025 GMT
Subject: CN=56d518b4d6dbabf2bd126a27fea4f9eb8540ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:39:51:62:1c:8c:14:7c:7f:92:0a:75:14:
1d:6b:45:e4:89:ab:79:d3:59:d0:df:07:b5:92:68:
eb:d3:09:3a:5d:1b:a4:d2:8d:f3:6b:df:90:9a:1c:
66:55:df:01:eb:08:08:98:b6:ee:b9:35:40:2c:0b:
56:98:f7:f1:d4:2e:2f:13:9c:0d:93:2c:e8:98:74:
dd:9e:87:1d:d5:00:64:05:1a:7e:0f:83:16:9d:1d:
cd:4b:ba:5d:59:a1:00:3e:04:54:89:3e:72:78:1d:
00:ca:3b:cc:3d:db:e2:38:56:77:47:6e:31:72:65:
db:1e:25:ab:4e:8d:ac:8c:44:c8:76:34:db:56:49:
48:cf:d5:22:33:0b:1b:bc:4a:89:d5:47:75:f3:3d:
71:29:37:62:55:f9:de:68:ef:6a:ae:7a:51:d0:f0:
d6:7d:33:a5:cb:ed:bd:df:7a:b2:88:46:08:04:05:
53:8f:58:70:f5:f5:1d:84:15:95:ca:5f:31:fc:32:
d9:a2:cc:eb:4b:3e:06:26:10:b0:6c:e0:2d:38:c7:
bc:16:b9:2a:5d:b4:7c:32:61:e7:6c:49:ec:67:1a:
29:1c:c7:4b:ca:05:78:9c:1a:c7:b0:d5:ee:b2:76:
f3:ee:90:94:82:7c:7d:bc:53:45:16:86:9a:87:eb:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:18:B4:D6:DB:AB:F2:BD:12:6A:27:FE:A4:F9:EB:85:40:DE:D0
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0f:75:6c:7f:24:f0:af:fa:3c:72:c1:49:37:1f:49:e1:60:
2e:6d:94:80:e5:cb:35:40:74:ed:df:c7:e9:ec:8d:a6:6c:0e:
c2:8a:66:51:d3:d1:d0:4d:e1:7d:65:80:5c:d7:eb:77:bb:ad:
92:55:59:7b:ab:02:63:f8:1b:56:ae:ae:b7:c8:c6:0f:75:ca:
9c:dc:39:21:78:c0:b3:bb:2c:9b:0d:ca:0b:ba:71:05:42:93:
e5:d5:66:9b:57:03:44:48:86:0c:e0:43:07:13:06:ee:13:74:
05:e4:01:b4:ec:34:ef:f6:56:0c:a8:b3:8b:ae:b1:86:04:aa:
39:8f:f3:9f:35:23:18:cd:6b:6c:89:a4:18:a3:2f:b2:08:5d:
c6:84:09:8d:44:49:77:2e:0a:95:1f:a1:65:e1:38:2b:79:ee:
59:72:8c:bd:3d:00:c0:89:b0:50:46:df:5f:8b:ff:ac:b1:7f:
a8:f4:25:4a:ed:01:f0:c4:e3:b9:2d:4e:f7:1c:98:93:7a:94:
d3:3c:c1:6d:c9:d3:f1:bc:0c:d6:62:cb:05:6c:a1:bd:b2:0a:
6b:b1:c7:72:a6:11:8a:99:b7:54:36:c1:5e:cc:92:9f:be:1e:
ff:f9:c1:70:ed:cd:36:6a:e6:2f:6c:42:6a:13:39:50:49:bb:
b9:52:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:24:16 2025 by rpki-client