Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: cwnbSORmJCZMfXXjFVsx0LIBcRuIu7G1yERjCad4ovI=
Subject key identifier: 75:66:AA:C5:78:E3:96:85:5B:16:B4:63:9F:AC:3D:E6:C2:50:2A:14
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0196C3B92F84D94CA30D0DF541DFF4AD49B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 09:00:15 +0000
Manifest this update: Mon 12 May 2025 09:00:15 +0000
Manifest next update: Tue 13 May 2025 09:00:15 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: rJ+iyCQQfRsU0yIIAIz2EXq+e7NQ6d3dCMSJWIPXgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:2f:84:d9:4c:a3:0d:0d:f5:41:df:f4:ad:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: May 12 09:00:15 2025 GMT
Not After : May 13 09:00:15 2025 GMT
Subject: CN=7566aac578e396855b16b4639fac3de6c2502a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:17:de:c1:83:24:8c:34:23:ac:77:36:a6:
19:e8:a1:ed:45:54:7e:7d:a6:2e:7d:63:b5:00:17:
c5:b5:f8:0c:e2:71:dc:0c:8a:4c:a1:02:63:3a:5f:
9b:57:ad:f8:51:44:4e:12:11:b9:f2:c2:df:0c:c8:
31:98:78:64:c5:73:cd:21:2e:0e:e2:ca:b9:c1:b5:
b6:13:1d:f8:a9:62:28:bc:86:13:47:3b:b2:83:7f:
84:39:02:93:2f:e6:77:4c:16:fc:72:99:40:f4:5c:
b1:5f:da:7c:73:58:81:91:9f:10:86:0c:0a:6b:d1:
91:69:e4:4b:95:b4:41:91:23:45:31:de:04:3e:a0:
32:89:35:45:bc:80:4c:bc:a0:04:79:61:24:01:31:
5d:ec:a7:3c:b8:63:e9:17:64:68:c8:56:c0:97:0b:
d8:94:1c:5c:55:f3:85:59:1a:4b:8d:87:6b:d9:4a:
85:e3:f2:8a:fa:85:2c:7d:61:25:78:be:7d:fe:d6:
1f:ed:b1:19:5e:b5:99:d1:90:d6:1b:51:78:90:85:
a0:a1:c8:e2:61:73:a0:ce:85:37:05:3d:d5:2f:28:
52:a9:7e:f5:6d:97:62:55:fb:f1:f1:e1:5b:d1:f0:
67:f0:5f:d0:50:a5:f9:fd:d1:c0:50:77:04:3d:0f:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:AA:C5:78:E3:96:85:5B:16:B4:63:9F:AC:3D:E6:C2:50:2A:14
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c5:09:b0:48:3d:c3:55:41:8c:e4:ec:1e:9b:fa:59:fe:07:
65:27:4a:29:c5:c6:bb:2c:34:18:fb:55:99:78:45:22:93:4f:
ee:29:9a:05:b7:7a:e1:1c:2d:c4:39:a1:75:09:07:34:2e:e2:
7a:9c:b5:e9:53:a5:2b:19:17:8b:c2:5c:db:5d:f0:c5:67:0a:
03:ae:75:25:18:39:22:01:64:fe:06:de:0b:6e:88:17:bc:cf:
6e:ea:c8:68:83:f4:42:51:7b:27:90:9f:5e:3c:ea:a3:35:9a:
1f:fa:be:17:c0:a6:6e:98:ae:eb:b5:d6:94:81:52:03:0d:81:
45:4c:88:1f:9d:32:a7:da:e4:c3:66:80:6d:68:fe:60:90:5d:
8f:ac:0c:bd:b0:7d:00:11:dc:b7:87:ae:74:bc:88:a4:6c:9a:
9a:b8:29:4e:b8:dc:ed:61:83:1b:50:2d:7f:e8:a4:7e:89:be:
d2:8c:cd:30:a0:47:1f:60:68:20:bd:d8:d6:97:42:5c:3b:17:
d0:ef:bd:a9:a5:0e:47:8e:59:0e:18:78:8f:67:8f:4e:7e:00:
81:13:59:48:08:63:5b:49:ff:ed:2e:c8:2e:9e:29:2d:5f:21:
bd:60:b1:01:d1:dc:0b:ea:af:d5:ce:90:10:47:9e:19:8b:e2:
22:6b:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:56:08 2025 by rpki-client