Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: G4kX2HrjYCFd9D6SMfvHbZ8FVnewpHUGtLjRSRrd56o=
Subject key identifier: 27:99:60:E2:EC:B2:C7:18:49:43:1D:E8:17:1E:61:7F:56:82:2F:11
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 01969DF615ADADEA7D1C921324752AE6C46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 0345
Signing time: Mon 05 May 2025 01:01:12 +0000
Manifest this update: Mon 05 May 2025 01:01:12 +0000
Manifest next update: Tue 06 May 2025 01:01:12 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: RXh3Rpn/FEyBQAEOcFkwC/R5wEIomavd8P4LlXw7aoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:15:ad:ad:ea:7d:1c:92:13:24:75:2a:e6:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: May 5 01:01:12 2025 GMT
Not After : May 6 01:01:12 2025 GMT
Subject: CN=279960e2ecb2c71849431de8171e617f56822f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:f6:0a:73:c6:9c:88:23:9f:3e:73:a5:b5:
0d:71:54:d1:04:62:a5:3b:82:c1:ae:61:b1:37:44:
f5:e4:63:69:48:57:31:88:44:49:03:85:a5:1e:78:
33:5b:a6:05:35:19:e4:83:cc:f3:6a:e4:7b:40:c0:
b4:8b:12:b5:5f:64:75:60:06:8f:54:5b:e5:b8:c1:
ab:c9:01:8d:c3:bc:4e:b0:36:f4:a4:8f:70:cf:60:
7d:1e:eb:12:be:45:62:01:7c:61:65:70:ea:b2:44:
25:b4:43:69:a0:3b:25:9c:ba:a5:1b:63:f8:21:e6:
cd:ef:d0:8b:24:e3:95:c9:61:74:90:75:f5:d8:f8:
b6:d1:22:47:c9:58:fd:48:1d:19:da:87:2a:8f:40:
f3:98:6a:65:4f:c1:9a:1d:5f:48:c0:1c:c9:7f:e4:
bc:ed:0a:f1:a0:56:62:ca:04:ed:f1:dd:e6:05:b7:
92:dd:5c:d3:7b:ec:9a:75:68:e4:2d:1e:e3:48:e7:
0f:04:9c:f5:33:9b:1c:b9:ee:ce:ae:1f:e6:2a:83:
29:1d:44:2a:75:0c:6d:f6:37:94:25:bf:67:b8:e8:
4e:fb:23:d0:f0:ff:76:de:f2:09:03:13:3b:ab:f3:
e9:ad:2c:78:f6:a6:7e:e4:5f:1e:0f:06:33:2f:f3:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:60:E2:EC:B2:C7:18:49:43:1D:E8:17:1E:61:7F:56:82:2F:11
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:b8:f2:2b:14:7d:1d:2b:82:17:45:45:9e:6e:65:eb:dc:
26:c6:5e:c3:d1:41:11:1b:bf:b0:c6:6a:63:bc:66:45:e9:4e:
f2:a6:08:76:4f:2f:e8:c3:94:12:24:09:45:63:be:d5:a9:a9:
3a:50:d4:b3:3d:71:74:cf:0f:93:5e:3d:42:54:f0:d8:49:0b:
86:f2:12:b9:a3:c1:67:04:ac:a1:5f:41:21:c6:7e:88:9f:92:
ee:14:17:0f:19:d1:0d:e9:d0:bd:7f:3d:58:99:18:97:ed:b2:
0c:82:17:f8:cf:14:f0:0d:6a:7d:04:51:4e:0c:f4:e6:a3:9d:
31:49:ed:2a:cc:50:32:d7:87:ca:0d:f6:5f:d0:68:62:5b:37:
0a:3e:0c:9d:e6:a3:ed:ba:93:a7:61:43:ec:7a:a7:fe:51:e3:
ca:00:b0:16:c3:22:de:2a:3a:6c:50:bb:79:e0:46:ea:90:c8:
6a:12:72:d1:a5:de:47:b4:84:3a:65:fd:be:07:fb:6a:a2:66:
66:c1:4d:d1:c1:f4:28:87:c0:52:e7:b5:2a:fa:3f:92:9e:ca:
8f:b5:ec:4a:4b:7b:9f:93:19:a5:83:3b:fe:2f:53:30:31:ee:
86:97:95:5e:eb:90:e5:af:eb:40:0c:72:bf:4b:ce:36:58:61:
70:7e:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:01:37 2025 by rpki-client