Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: wZIswYYcdvGtZSxcXn+Qs6mPW4c11XBk8qeibAdKblI=
Subject key identifier: 18:D3:60:8E:6A:43:CD:70:2C:CB:4D:70:D4:3E:83:45:6D:1C:B0:0C
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 0196B7EC79D71C354ABC1C73B3329DDB43E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:00:50 +0000
Manifest this update: Sat 10 May 2025 02:00:50 +0000
Manifest next update: Sun 11 May 2025 02:00:50 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: JC0gB2PERpKJK5efZSwm62J4gFG/ow53jSddmJg2aLo=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:79:d7:1c:35:4a:bc:1c:73:b3:32:9d:db:43:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: May 10 02:00:50 2025 GMT
Not After : May 11 02:00:50 2025 GMT
Subject: CN=18d3608e6a43cd702ccb4d70d43e83456d1cb00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:c9:93:23:42:6a:10:7e:09:bd:8d:0d:0a:
2e:fb:6d:a8:cc:dc:a4:66:10:74:b9:2a:0f:78:5d:
e8:47:b1:39:32:76:79:2b:85:be:5b:6c:17:0e:ee:
8f:fc:86:17:ac:27:e5:1f:a7:54:5c:69:fc:d2:bd:
0d:e2:bd:4f:f1:d9:86:f9:34:91:f9:29:b4:f5:0e:
c4:10:f6:13:c7:52:a4:c3:46:36:1d:db:16:4d:2f:
55:65:d0:14:45:66:96:d5:d3:95:10:b0:58:e4:a5:
72:2d:b5:96:d6:e9:66:ea:98:2e:e6:c5:5a:54:6c:
99:8c:a7:11:ad:42:46:e0:b5:83:7f:78:be:77:98:
75:f7:67:a2:f5:cb:bc:12:ee:eb:39:db:b8:39:bb:
67:67:67:bb:b0:5d:04:bb:6c:a8:c8:3a:fe:1a:38:
10:74:73:3d:bd:fc:1b:77:96:91:2b:9e:e2:ea:5d:
9b:6c:b4:d4:02:18:df:34:72:5f:e4:28:06:26:b4:
46:46:c1:9b:a9:83:6d:96:cc:7d:de:2e:d2:0c:58:
e0:95:d6:8c:b8:1a:68:ad:f6:a9:82:2c:31:d8:46:
7f:91:29:c1:55:24:71:96:26:4d:bb:b9:b8:85:8e:
82:6b:3e:f5:9e:74:81:47:16:e4:4f:18:41:d9:5f:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:60:8E:6A:43:CD:70:2C:CB:4D:70:D4:3E:83:45:6D:1C:B0:0C
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:44:d6:1a:f1:9b:5d:45:bb:28:df:a8:ef:6f:b0:c7:12:d2:
83:34:26:df:d9:9b:5c:5f:94:3c:6b:09:ef:f0:3d:b6:95:37:
4e:bd:dc:91:43:f6:f2:6a:ab:8e:16:3f:f7:1e:98:b4:90:b6:
0b:12:34:ee:32:ec:e2:90:6d:10:35:75:e8:21:da:ad:3c:61:
f8:99:22:81:2d:1c:46:9e:0d:57:30:a5:2f:d9:30:89:a5:8d:
cc:15:4e:a3:50:64:90:32:8c:74:67:6d:04:27:01:2e:9c:56:
ca:6b:c9:70:bd:a6:af:ea:30:d3:5b:16:ac:6d:47:4c:56:cf:
03:57:fe:31:bd:5a:31:41:63:71:8c:7d:b9:9b:6a:58:fe:74:
a0:fb:c4:03:36:4b:53:fe:9e:0f:2e:2f:69:cc:44:0a:5e:d3:
70:cb:d4:41:bf:ab:ed:8d:ef:ec:84:42:6c:92:98:78:ed:ee:
ff:d5:08:c1:b8:c3:e5:9e:63:ce:01:00:47:6c:5c:f6:b5:cc:
b4:56:4e:c2:20:5b:9c:38:4c:58:30:b3:7c:e5:38:83:da:89:
49:1a:3a:b7:94:0d:13:71:60:91:84:d2:26:b2:8b:21:bb:95:
76:78:29:e2:60:49:6b:15:bf:a2:1b:00:9a:2e:9e:cd:bf:8f:
55:80:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:23:23 2025 by rpki-client