Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: t5I+G4SDSFd4aJSNLuTow3XN1YAZowpwuwUlU/SsWSM=
Subject key identifier: BE:94:58:1F:74:73:C8:54:5A:0C:34:74:BF:15:FE:3E:4D:0E:E5:00
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 0196CA60A1376AB4A5A57FE11D9CA83AAD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0E0A
Signing time: Tue 13 May 2025 16:00:52 +0000
Manifest this update: Tue 13 May 2025 16:00:52 +0000
Manifest next update: Wed 14 May 2025 16:00:52 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: rKVZc6nHoH49fnefJmm2Xji1EKv1hMDPzam/GsYSrgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:a1:37:6a:b4:a5:a5:7f:e1:1d:9c:a8:3a:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: May 13 16:00:52 2025 GMT
Not After : May 14 16:00:52 2025 GMT
Subject: CN=be94581f7473c8545a0c3474bf15fe3e4d0ee500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:63:cb:cf:21:90:07:eb:bb:8c:98:87:15:
77:c4:a1:5e:6f:05:47:09:2e:f7:6e:56:d1:ad:ca:
4c:83:d0:99:29:f6:b0:80:61:f0:19:4f:7c:b4:8f:
ae:8d:29:24:d4:36:c2:e6:25:d8:c1:33:4c:67:da:
ee:83:31:60:22:99:e2:7a:c3:2f:ea:61:f2:fd:f5:
6d:0a:cf:07:8d:a8:f1:1b:16:af:e0:9e:79:c9:3d:
e1:5b:f5:ad:eb:30:08:05:7d:95:69:6d:43:a1:42:
b1:45:fe:e0:49:39:cf:9d:ad:fb:95:a5:b5:75:6e:
8e:7c:bf:ec:d3:c3:0f:61:65:22:b9:af:e2:51:45:
fc:ee:77:8a:1d:6f:ff:a3:81:02:9d:85:89:3c:fc:
38:c5:61:25:a5:64:39:bd:39:4c:75:77:16:c2:da:
3b:6b:5c:64:09:ef:a4:12:4b:66:5a:4b:19:4b:17:
85:72:31:ba:fa:29:81:fe:e9:0a:3c:22:f1:48:c0:
e1:97:5c:ce:c1:d4:2e:ce:40:32:34:50:77:2f:be:
60:ef:0e:3b:0d:b3:cb:dd:78:9b:95:04:50:4b:9b:
9e:88:df:d2:be:28:9d:fc:1c:42:58:35:ed:a2:75:
c8:b1:b7:6e:13:b5:0d:cb:be:1f:51:f5:3c:e4:ac:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:58:1F:74:73:C8:54:5A:0C:34:74:BF:15:FE:3E:4D:0E:E5:00
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:40:2d:7c:68:11:e8:2c:cf:fd:54:c6:f4:75:14:6b:3e:
95:4b:6e:d4:1c:08:77:cd:63:f3:4a:b3:e2:e7:81:16:32:e7:
6c:fe:d9:d4:cc:6c:23:a7:24:9d:3f:dc:90:ee:41:11:e8:e8:
fa:60:65:89:28:df:97:15:90:f7:6a:29:3b:11:84:12:88:98:
63:d3:e9:cf:7f:da:47:7f:44:e4:97:c7:4c:b4:23:7f:f5:08:
b0:92:46:4c:33:4b:3b:96:39:56:63:5f:b7:a0:b5:93:31:0c:
e7:3d:ae:17:7c:d7:aa:0c:c7:68:8d:c9:d1:cf:b9:66:b4:88:
33:9e:c2:06:a6:8f:d7:ad:c8:1f:20:0c:9c:69:df:f7:64:bd:
0b:d7:f8:ad:85:6b:80:2e:31:9b:03:1b:23:60:00:25:c6:1d:
b3:04:fb:76:e1:65:dd:50:6e:5b:3b:77:75:ce:84:42:79:32:
01:f6:f8:96:25:3f:b8:61:85:6b:5c:80:83:b4:93:db:b8:d4:
96:9b:fe:6a:0b:89:75:3e:fd:f7:4f:ea:bb:b1:58:5b:12:80:
77:ff:fd:aa:2f:ab:57:ce:d5:8d:a7:2d:3e:43:7e:d3:92:32:
f2:e2:14:fa:ce:38:75:67:9f:67:58:97:4d:80:e4:51:93:d8:
1d:b1:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:47:07 2025 by rpki-client