Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: zR1O2CKnPRmyjK5vjpfq00/8Fm9t0eX877QeejMmyqk=
Subject key identifier: 06:73:50:49:FA:B6:C7:9D:55:2A:FE:6B:5C:B2:D1:33:B1:20:81:10
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 0196AE0DC89253C837FA18787D34D8B3A5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 153F
Signing time: Thu 08 May 2025 04:01:00 +0000
Manifest this update: Thu 08 May 2025 04:01:00 +0000
Manifest next update: Fri 09 May 2025 04:01:00 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: gCC6WfD3G0W81OUtQ41QnFI7Ulb+n1bKeGArARfyDI4=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:c8:92:53:c8:37:fa:18:78:7d:34:d8:b3:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: May 8 04:01:00 2025 GMT
Not After : May 9 04:01:00 2025 GMT
Subject: CN=06735049fab6c79d552afe6b5cb2d133b1208110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:0e:23:3a:a5:dd:ed:29:39:1c:07:b6:81:
b9:7c:71:84:bb:c7:9b:fb:6d:a0:f2:3c:d9:ab:ed:
d1:d5:13:54:95:42:f0:be:f0:6b:e9:5b:5e:64:58:
9c:1f:68:b1:33:f3:0d:f6:d7:04:a3:fb:46:4a:5e:
7d:f8:54:8a:ac:79:5e:03:da:27:bb:79:e0:0a:0f:
3d:9d:53:e9:d9:73:4f:85:cd:81:6d:f5:98:4a:8e:
61:69:0d:a4:4a:3c:83:b9:89:fb:b7:cb:72:0e:91:
f4:cc:59:e4:93:91:db:6d:3a:ab:f2:bb:e6:97:f5:
18:c4:8b:5f:23:6b:98:74:b7:04:33:13:47:0e:9a:
55:3f:66:55:18:24:91:70:b3:6f:d9:67:e7:2c:3d:
ef:9b:8c:8b:84:4b:15:4f:63:1d:51:c9:83:5a:5d:
a5:c2:87:0e:8f:f5:26:09:de:c6:a4:9f:0d:3d:39:
32:71:7d:81:af:5c:66:64:a9:6e:2d:e2:57:a0:98:
68:f9:76:89:ca:3c:2f:d1:e0:6e:67:2b:8e:db:79:
a2:e0:64:b2:6e:a0:c4:be:59:48:1a:fd:1a:58:58:
ae:49:76:e4:e2:9e:8a:6e:90:d8:52:40:36:eb:df:
14:4d:b0:75:73:a1:9f:22:20:52:d0:3a:2c:6f:bf:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:50:49:FA:B6:C7:9D:55:2A:FE:6B:5C:B2:D1:33:B1:20:81:10
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:77:10:6d:92:a5:86:4d:9b:ba:8c:16:20:10:91:54:7a:
cc:5b:93:b6:15:40:59:ee:a9:a5:19:ac:56:3b:5d:5a:0f:54:
00:01:9a:c3:c0:ca:1f:47:ce:fc:f7:f1:7d:24:a4:9b:1a:ff:
47:e3:7e:70:05:df:cf:ca:5f:51:89:9e:66:ac:40:dd:73:79:
20:e0:fe:e1:cd:5c:17:cd:ed:b3:a1:72:ac:a6:28:88:7d:36:
c3:07:e0:56:98:20:5e:42:8e:48:63:24:48:53:e7:cb:d3:e6:
4a:ac:67:28:ec:1e:4a:e7:2e:d1:af:ad:3e:fc:3a:8c:9d:29:
6b:9c:62:64:8c:07:c6:cf:8b:cd:0c:34:7c:ae:9e:21:f6:16:
61:d8:80:7d:73:dd:d0:f5:4d:24:50:81:0f:fb:7f:9a:8d:9e:
7a:8d:03:32:e5:e9:a6:5a:b5:0a:e7:6b:86:03:90:3c:c0:05:
fe:d7:ec:f6:e9:96:8a:a8:1a:d1:19:78:83:d1:ba:32:be:cb:
9b:23:54:3f:1a:28:6e:ed:74:40:1c:05:fe:36:02:43:16:ba:
45:e0:0d:88:10:55:5a:77:da:f7:03:b5:3d:eb:5b:5f:ee:26:
da:be:ed:10:f9:8c:40:35:ab:d7:46:b2:e5:2f:4c:e8:fe:fb:
e1:70:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:17:19 2025 by rpki-client