Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: XYt6xU5ght/6AVEgUwiXxjA8/5bgw/+HPtrncxlCv2Q=
Subject key identifier: DB:0E:FA:86:C0:3C:CC:AE:C6:C8:0C:ED:53:DA:1F:BA:81:A4:93:FE
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 0196BF37C9540DE48D19915453FDDDCB601D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 12:00:26 +0000
Manifest this update: Sun 11 May 2025 12:00:26 +0000
Manifest next update: Mon 12 May 2025 12:00:26 +0000
Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: 62OBkYBN0mK0eT9Xj2i0KboQShFHeyF2S284CgoxMog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:c9:54:0d:e4:8d:19:91:54:53:fd:dd:cb:60:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: May 11 12:00:26 2025 GMT
Not After : May 12 12:00:26 2025 GMT
Subject: CN=db0efa86c03cccaec6c80ced53da1fba81a493fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:6a:64:a5:fe:a6:b6:b3:b7:29:da:09:07:
fc:d9:23:45:22:42:d0:37:b4:18:8d:df:d9:f4:ef:
e0:7c:b5:61:1f:1c:e6:ea:c1:18:39:b8:7c:fd:89:
e2:5b:29:a6:3b:4d:8c:e1:74:e6:64:89:2c:15:01:
6f:70:66:ad:d6:1e:98:15:fc:52:f8:4b:87:b4:3d:
0d:ff:f8:3c:e6:43:00:b0:7e:a5:d2:60:4f:2a:47:
fc:35:dd:65:61:e9:33:38:22:c6:91:12:6e:85:79:
44:7a:1c:3c:d4:17:f0:01:8b:25:b3:b4:12:6e:45:
63:83:a1:7c:32:45:04:05:d5:2d:88:2d:6b:e0:20:
96:8f:02:0e:1d:56:bb:77:c7:dd:25:03:4e:b8:3b:
d4:bd:97:67:f9:8b:58:9b:4a:06:2d:7f:7a:dd:d6:
70:29:19:84:9d:df:2c:7b:a7:13:6d:90:99:55:44:
4b:da:e2:b2:64:f8:d3:dd:81:1b:51:02:5b:b9:c4:
d9:58:57:fe:d2:74:6c:d5:51:1e:f8:9b:16:e3:4d:
e5:86:a7:fb:28:d8:31:0c:0e:e2:00:fd:52:35:9b:
75:05:ef:c2:f0:a0:93:6d:65:b6:49:e6:ab:fa:6d:
01:eb:fd:96:56:37:cd:e7:a4:a9:09:0a:36:c7:17:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:FA:86:C0:3C:CC:AE:C6:C8:0C:ED:53:DA:1F:BA:81:A4:93:FE
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a4:5c:af:ab:3b:99:ae:ca:8a:a8:38:7a:c5:98:56:33:1a:
de:c8:b9:52:d5:24:62:71:e1:fb:3d:0a:34:7f:b2:24:98:85:
cb:6a:03:f2:01:ac:07:da:85:8c:37:fa:ed:1f:7e:48:5c:d8:
49:c3:f3:77:fe:80:39:92:ad:87:36:1c:6e:a7:97:89:53:c8:
62:97:0d:6b:7d:6b:2e:84:5a:af:fd:50:03:1d:e5:0a:d9:bf:
77:01:d5:5f:47:c0:64:cd:46:42:9a:c2:14:9c:7c:16:78:90:
4e:6b:a5:b0:1f:af:86:64:ff:e4:79:22:f4:25:4b:ce:1c:9a:
9e:65:16:a7:a9:2c:c6:39:24:1e:22:f4:58:4a:c9:c4:f5:21:
25:5d:e3:9b:0a:49:a3:81:d9:c0:c7:3d:c3:1b:a4:e5:5b:3c:
01:47:4c:e2:68:3f:9e:85:0b:71:2c:43:34:b1:4f:1f:a5:b7:
7d:4f:89:a4:39:ea:80:ca:04:dd:0a:0e:81:8b:49:ba:51:cd:
9c:6d:a9:15:dc:65:3e:99:c3:63:9d:68:a3:2f:73:92:7e:20:
99:29:88:b7:46:a1:33:06:de:97:82:05:eb:ab:84:a2:60:c3:
4a:80:5d:94:dd:cb:29:0d:db:8b:6e:d8:68:c2:1d:3a:df:bc:
de:81:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:24:44 2025 by rpki-client