Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: GvQo0kSoeWMIEnOb9wIzCVCgT6/qO5nQSGba8gfa7p0=
Subject key identifier: CC:1D:2F:3C:3E:19:B9:C6:38:EB:D5:92:28:B4:FD:CE:F3:56:B5:28
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0196C12644AE4AA6BA9BE199DCF7A9C1F851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 21:00:32 +0000
Manifest this update: Sun 11 May 2025 21:00:32 +0000
Manifest next update: Mon 12 May 2025 21:00:32 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: 0b9xxUCHJB8zr7wwsFiIgtTO/gA+kL5g56xN78ew1ho=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:44:ae:4a:a6:ba:9b:e1:99:dc:f7:a9:c1:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: May 11 21:00:32 2025 GMT
Not After : May 12 21:00:32 2025 GMT
Subject: CN=cc1d2f3c3e19b9c638ebd59228b4fdcef356b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:91:f6:7e:4d:fb:bb:0c:b4:af:06:47:d3:
c6:36:4f:3d:2c:01:1e:0c:9a:07:d4:f4:64:b0:d8:
18:92:b8:5e:54:b2:1c:f1:89:bb:4a:60:0f:87:db:
34:b0:45:ff:d7:9c:d3:cc:c0:20:c9:0d:5c:51:9f:
60:72:1a:46:e2:46:98:69:c5:ba:85:5f:20:e6:a8:
b0:d2:7e:bc:73:67:b2:00:22:bf:20:19:f1:cf:77:
5c:5a:ae:09:e1:23:9b:61:66:c4:d5:d5:4b:06:5e:
8b:49:1f:f1:e3:2a:6e:26:39:d6:01:b8:6b:6c:68:
ed:40:96:7c:32:32:06:cb:e5:8b:74:52:13:db:79:
c1:96:e8:19:fa:b8:24:0c:7f:97:48:94:48:08:78:
15:e6:d5:e1:78:16:8a:c0:8a:ab:ac:95:71:9b:ed:
4d:66:fc:c7:d9:53:f2:21:a0:df:9d:37:9f:dd:16:
1e:91:1d:cd:3b:f0:27:d7:6e:0e:11:dc:50:1a:c2:
ff:85:67:93:a8:42:99:2d:dc:49:2c:20:bf:d8:3d:
5a:4c:e3:b9:be:81:90:c1:39:7d:31:68:20:6c:1a:
fd:12:b7:40:5f:65:10:bf:0d:72:c4:5d:69:b7:cc:
48:b7:76:ae:c3:25:d2:c9:8b:09:59:09:12:2e:c1:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1D:2F:3C:3E:19:B9:C6:38:EB:D5:92:28:B4:FD:CE:F3:56:B5:28
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:02:30:f4:42:e8:0a:5f:de:86:f4:c4:1b:2a:e9:8f:ee:
c6:3c:f3:f2:1e:74:bf:d1:7a:05:bb:8b:8e:73:08:18:ab:ab:
86:95:a9:6b:c6:7f:7c:2a:ee:b9:4e:32:c3:a6:af:25:9b:51:
e8:07:6e:ce:86:8f:7c:6f:91:41:6d:dc:76:f2:8a:65:f7:b7:
68:5d:65:8e:26:b7:85:41:a6:c5:07:d0:87:7e:69:48:0d:e3:
f5:33:ab:ff:d7:79:0f:71:0f:3d:54:65:c3:0d:02:a4:c9:69:
d2:2f:78:cc:ed:e5:cc:47:3b:0d:7f:08:31:a3:04:5a:58:56:
04:7a:7a:c2:d3:a7:38:af:d8:d7:8d:bc:a8:33:d2:54:09:64:
b6:bb:93:9c:cc:39:6d:2d:c8:0f:70:50:de:3e:49:7c:74:89:
18:d6:be:b9:04:45:d7:d2:ec:ff:33:ae:63:10:17:bf:1c:40:
eb:eb:02:a9:e9:76:56:d6:1d:76:d1:38:a6:76:86:82:a2:63:
12:0d:7b:6c:a7:1d:fd:c9:3b:bf:82:fe:c0:a0:86:4c:70:53:
d4:01:56:80:8f:6e:e7:44:40:18:a5:26:f4:6a:72:88:29:3c:
e7:9d:9d:51:67:94:95:9b:0d:99:f4:ce:fd:f5:58:07:4e:08:
b8:5c:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:13:19 2025 by rpki-client