Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: 9nlMcpNZPnxmcHYzpeNtfIIuf57Gu4x+tO3fUhUykpA=
Subject key identifier: D4:DE:45:30:B7:65:50:F5:70:38:64:46:0F:D9:EF:E1:0D:A0:0B:7F
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 0196CB72ECC9D7E825668089D20839464DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 12E6
Signing time: Tue 13 May 2025 21:00:28 +0000
Manifest this update: Tue 13 May 2025 21:00:28 +0000
Manifest next update: Wed 14 May 2025 21:00:28 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: ASBIQ0AOkzGZa6895hDXqaXHFuyDRPi36O09R4RbMMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:ec:c9:d7:e8:25:66:80:89:d2:08:39:46:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: May 13 21:00:28 2025 GMT
Not After : May 14 21:00:28 2025 GMT
Subject: CN=d4de4530b76550f5703864460fd9efe10da00b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:19:84:59:d2:16:b1:9a:a5:31:e6:92:bd:
50:9d:94:26:59:b1:3f:a6:86:2a:d4:69:05:b3:cb:
28:e2:2b:34:f9:f4:ea:ab:fb:78:bd:c4:ef:e7:77:
97:85:f9:a8:a8:fa:2e:f4:cb:72:b3:58:83:a9:37:
77:3f:d0:92:e9:94:ff:bd:e5:5d:df:f5:99:62:a6:
68:4a:6c:1b:7b:4a:2d:24:e7:05:80:ec:a4:da:1a:
4a:a2:96:a9:6c:e1:80:6e:9f:4e:23:1e:d4:2c:bb:
98:c2:d7:ce:26:7f:b6:1f:ca:7d:17:85:86:8d:55:
56:0e:37:5a:47:d8:cf:a2:29:cb:58:38:d1:6d:a9:
29:39:cc:81:b2:02:60:df:b5:b1:5f:d9:c3:0f:d2:
aa:66:5f:7e:02:bf:ce:da:c2:75:25:92:4f:ed:4c:
81:a7:79:c9:04:2f:b2:05:18:8b:05:71:52:be:7a:
8a:3e:fd:a7:ff:a8:96:d5:1d:d8:d2:fc:b1:b6:4b:
77:27:db:a3:23:14:ee:cb:16:95:20:76:23:3c:aa:
02:4a:91:cd:18:af:ae:1f:6b:ea:6c:4c:98:82:a2:
0e:48:43:cf:bd:22:5d:56:ca:17:63:2c:5f:b2:0a:
52:8b:00:ba:64:39:e2:a7:b6:00:8c:83:dd:df:f8:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:45:30:B7:65:50:F5:70:38:64:46:0F:D9:EF:E1:0D:A0:0B:7F
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:bb:04:a6:63:4c:6c:43:4e:08:bc:d0:3f:4a:51:9e:dc:
9b:30:c2:00:19:f1:34:f8:eb:63:5c:8e:a0:cd:6a:77:dd:0e:
35:d3:ff:0d:d8:89:e4:dd:5d:6f:89:50:74:22:73:77:ac:4a:
04:46:87:d3:d6:31:d7:87:a8:84:79:49:7d:9d:85:79:fa:d9:
e4:52:87:06:66:86:8f:fc:c3:38:7a:d5:41:af:b7:70:9b:45:
9d:fb:fc:88:73:70:a7:2b:52:43:06:ed:3e:ab:24:96:ee:a6:
af:84:bb:ca:00:d8:dc:a2:39:01:c3:7f:16:a0:8a:8c:d4:97:
b9:83:4c:f2:5f:33:81:f8:a0:ad:95:f5:68:ec:8e:d7:c7:e6:
ae:12:33:5a:ae:1f:a7:14:fc:ce:9c:c2:a5:6f:62:d5:0f:03:
66:a0:1c:57:4b:73:fb:78:11:4d:a3:43:79:3d:2e:56:d0:8c:
aa:57:1d:06:89:ea:0e:25:a2:40:d3:56:9d:33:5d:3d:6e:3a:
5e:7e:21:29:7e:30:97:e6:d6:fa:12:e9:80:f0:82:cf:f1:a0:
34:ec:46:dd:c5:f8:9f:79:76:26:d9:bf:9d:9a:1d:7f:f4:82:
a0:1c:11:46:43:f9:12:bf:b5:40:58:b7:78:40:d6:22:4c:f5:
dc:38:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:34:59 2025 by rpki-client