Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: eJ/xBifBzk/hFw9pgrwVbL0N2hTW2+ZUTa82xh5X3x0=
Subject key identifier: C6:22:57:64:E3:18:7A:8E:33:6B:A1:9B:09:6B:F6:5F:A5:DF:A8:14
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0196B40F766AFC8C991EB147599023F77C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 08:00:34 +0000
Manifest this update: Fri 09 May 2025 08:00:34 +0000
Manifest next update: Sat 10 May 2025 08:00:34 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: 78GG7cBwH/xZRe2aKmMoTSB+COnsl6KmfdB41RI3Ez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:76:6a:fc:8c:99:1e:b1:47:59:90:23:f7:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: May 9 08:00:34 2025 GMT
Not After : May 10 08:00:34 2025 GMT
Subject: CN=c6225764e3187a8e336ba19b096bf65fa5dfa814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:3a:a2:39:da:f3:59:dd:63:2f:58:5d:89:
18:ac:c0:a3:7d:40:ff:98:3c:5e:f6:a3:c7:1b:c7:
ba:f1:5b:4f:78:cd:a4:fd:35:49:f7:9c:e3:e3:ba:
55:c3:09:a6:54:d5:26:d1:dc:72:4f:b2:44:bc:1f:
dc:f9:8a:f5:0d:34:92:d0:48:c5:51:46:79:e7:7f:
c6:b3:65:9f:71:8a:da:79:a9:c3:19:95:e8:91:38:
91:ed:72:0b:3d:51:93:c5:61:0f:0a:6f:93:83:e4:
35:35:20:14:4c:bd:95:e9:da:63:dd:1d:9e:5a:52:
42:1b:77:20:23:bb:d6:86:60:3b:44:23:b9:d1:f9:
ce:fe:f3:7d:f5:19:3d:b8:3e:e8:1f:c2:9e:a4:91:
33:d9:b6:98:ad:c5:81:28:aa:31:f9:1d:5d:35:9f:
80:dd:82:cc:a6:4f:a0:8b:95:a8:65:22:5f:f7:3e:
b8:29:b6:d1:6d:0a:1b:21:db:35:0d:b2:24:51:44:
b7:b8:a1:52:f8:a9:9b:04:d8:a2:ae:04:4f:6c:22:
7b:73:3f:2f:f4:1c:d2:4b:e1:b7:02:24:8e:88:0f:
fd:b0:fb:4c:7e:12:cd:20:48:80:e8:0a:ac:b0:92:
8c:56:c0:95:50:f0:e0:87:21:8b:7b:6e:7b:7e:ea:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:22:57:64:E3:18:7A:8E:33:6B:A1:9B:09:6B:F6:5F:A5:DF:A8:14
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:20:40:75:1c:16:56:60:cd:72:1a:8d:08:19:b0:c7:67:aa:
f1:bb:84:c5:a0:89:26:86:7c:04:f7:8d:2b:b7:e0:55:9a:e0:
d8:65:7b:1c:48:e0:82:d2:93:3c:cd:44:cb:9e:05:6c:c9:ac:
33:9a:a1:84:31:33:97:e0:61:3c:0e:98:f4:d7:f1:a3:fe:fd:
15:8b:19:b8:56:02:86:e1:60:43:13:16:e5:5d:06:32:83:ad:
59:3d:f7:a8:8d:9c:00:2f:c7:d9:a0:cf:31:70:fc:3a:1e:6b:
18:e6:2b:1b:1a:4c:32:6e:d9:6b:ca:66:fc:89:32:a4:bb:64:
57:dd:4b:75:63:38:e6:eb:8e:7f:2e:1a:17:06:f7:ff:fb:6b:
2d:e4:18:e1:3d:48:c2:95:f6:11:ef:70:bf:dd:2d:18:96:f7:
bd:10:04:a0:38:38:06:49:cf:d6:0e:0a:e4:5d:37:e0:0b:0e:
4c:c3:4d:74:a5:78:2b:88:73:ea:fb:bc:6f:c3:e8:64:30:55:
c8:f2:8d:87:b5:68:e2:2d:a5:0e:70:52:23:7f:d0:62:96:54:
65:ff:d0:57:7b:04:71:b7:a0:35:66:cd:a5:f0:90:b5:dc:30:
f1:29:96:87:2b:69:ae:84:69:12:e2:7b:b1:57:a7:81:a1:f4:
d2:31:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:52:20 2025 by rpki-client