Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: +NuBLdImGK0kZTor01oDAil6mYQ64dhwIrSmDIc3mRs=
Subject key identifier: AA:CD:A8:A5:B9:19:11:78:83:9B:E6:6D:3E:48:B9:FC:9B:EF:C1:2F
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0196AA9E8946A1F5D719246860A0547F683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 0857
Signing time: Wed 07 May 2025 12:00:38 +0000
Manifest this update: Wed 07 May 2025 12:00:38 +0000
Manifest next update: Thu 08 May 2025 12:00:38 +0000
Files and hashes: 1: 0aVULxHFqdDfNnT5CqmJEz5qebM.roa (hash: p1YUyJePrroRXqe7gzHmSFVR4nwW1EVYKUdr7JKm3tY=)
2: 1x2QkjrjfmH7457XFfnRPIPsvrU.roa (hash: hdLqZqotCS5NMzBAHyICUCVoucf1opCMX8HxfI3Xt9w=)
3: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=)
4: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=)
5: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: gNimVl3qhmIH/uwIiLH4fSjeziofTp+QZMtFmxsbsg8=)
6: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=)
7: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=)
8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:89:46:a1:f5:d7:19:24:68:60:a0:54:7f:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: May 7 12:00:38 2025 GMT
Not After : May 8 12:00:38 2025 GMT
Subject: CN=aacda8a5b9191178839be66d3e48b9fc9befc12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:df:1d:c1:09:43:a2:3c:0f:10:f9:6c:89:
4d:30:5f:76:11:ae:ec:a9:fd:37:61:9a:c0:c6:23:
29:5b:ee:2a:75:72:a9:62:89:99:a6:af:77:7a:cb:
be:ce:bc:b5:fc:ee:ad:4a:03:a8:bf:2b:aa:e6:88:
a0:79:b6:d0:04:d0:53:37:47:5c:e9:65:8c:aa:59:
52:c3:fb:ec:45:53:9d:52:a5:89:08:41:bc:09:51:
2f:17:f1:05:26:a0:1e:2a:b8:38:00:6a:6e:b4:22:
86:d3:0e:19:45:f8:56:26:ae:bf:c5:bc:bb:23:e8:
3d:f8:47:71:06:ba:a3:bd:6e:98:a8:57:6e:23:ab:
3a:72:bf:36:11:f5:b7:ad:12:9a:ca:74:a4:1a:80:
1f:db:4e:b7:71:20:4d:0b:0c:92:2b:2b:c5:8e:da:
00:fa:15:8c:a9:1a:15:17:55:e3:9d:53:98:9f:90:
df:a3:86:38:ac:01:4c:ca:19:25:07:66:6d:cf:ca:
b9:21:37:ef:47:95:e5:23:8f:21:61:d6:68:68:14:
10:02:3b:74:c8:10:94:86:30:e4:5b:43:e7:cd:1c:
e5:94:aa:96:d0:91:5c:58:c9:38:6d:64:8e:12:c7:
cf:58:18:a4:c7:0e:60:77:9c:42:ed:51:77:77:d9:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:A8:A5:B9:19:11:78:83:9B:E6:6D:3E:48:B9:FC:9B:EF:C1:2F
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5d:d6:6f:c6:1c:74:b1:5a:8c:8c:46:b2:b4:68:9b:12:d4:
b7:5a:60:cb:db:bc:42:0f:a5:16:ad:7f:b0:04:4b:39:3b:01:
bf:af:f8:b2:d3:8b:ce:7c:48:41:2f:c9:d1:41:d4:9e:c9:79:
79:d0:04:5c:63:de:1c:f0:b4:27:1e:43:83:ee:d6:16:fa:2f:
c9:43:17:9c:93:62:0b:98:58:fc:b2:41:9f:8b:5e:33:80:a2:
be:b1:05:39:40:81:15:59:e0:f8:50:36:aa:d6:24:5a:59:83:
4c:d1:4d:0e:5a:17:a7:c9:76:77:a4:22:38:c4:70:fc:2e:e4:
8e:f1:ba:33:62:bd:77:bb:cb:db:16:aa:1a:ec:ed:28:56:9f:
6d:fa:17:d5:e7:eb:e5:93:05:17:ab:ae:02:c3:41:11:96:db:
73:4f:5c:63:63:f8:9f:34:39:f7:6c:c7:3c:ea:fa:e5:26:81:
a6:fa:d7:b1:fe:01:5a:ea:e6:fa:47:b9:2b:af:05:94:44:da:
ce:88:86:66:7d:43:6d:ca:18:29:20:f1:6a:1b:48:7f:3b:ec:
7c:38:f7:7e:a5:d2:13:ea:7c:d2:7a:7f:9c:15:9f:ef:ec:13:
9c:97:3d:45:f7:89:f7:f9:cb:dd:c3:ff:00:db:98:93:92:0c:
0a:03:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:09:32 2025 by rpki-client