Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File: iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier: nnSJPhSoGcD8GfahedxF9yykgGAev+1TbN/Ly6gwluo=
Subject key identifier: 52:94:CE:33:BD:61:24:D6:68:61:95:80:2F:53:4E:A2:8E:04:51:B6
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 0196B5593DBB3306D2ACE66677A704796876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 14:00:46 +0000
Manifest this update: Fri 09 May 2025 14:00:46 +0000
Manifest next update: Sat 10 May 2025 14:00:46 +0000
Files and hashes: 1: 1-dqt2rN6d4zMTr30hL21uHD8mgs.roa (hash: 9J3OxeItEP/tcUsxKEYBHkcY9sk3+Jl9zYiOLoIv6HY=)
2: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (hash: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=)
3: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: re70rn2N/e1Udb94QFzNxwSgFywKfMdH9zpmvqfi/fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:59:3d:bb:33:06:d2:ac:e6:66:77:a7:04:79:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: May 9 14:00:46 2025 GMT
Not After : May 10 14:00:46 2025 GMT
Subject: CN=5294ce33bd6124d6686195802f534ea28e0451b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:d2:74:04:c3:8c:83:b4:39:25:3a:51:5f:
36:e0:0c:c5:00:87:31:d0:46:92:98:b2:c3:64:10:
17:b3:b9:1a:c4:41:0b:dd:53:4f:71:56:e8:1e:ca:
39:09:a2:18:27:cb:2a:56:e5:20:0b:1e:0c:8e:fb:
8b:b9:7d:c9:6b:2f:1d:3f:6e:48:59:b4:ad:fd:75:
fe:ff:d4:aa:9b:8e:6e:4c:fe:f4:69:7a:52:4e:6c:
6c:23:63:4d:63:cc:11:32:cf:b3:86:72:3d:00:f8:
bb:c3:7c:de:31:c4:3a:9f:f2:68:35:f9:06:3d:24:
d8:a3:fb:4a:27:76:06:b0:d1:a0:0a:92:1a:5d:eb:
3e:36:e7:f9:5b:34:7d:0e:6a:4a:6a:58:15:a8:45:
a6:aa:f7:9a:3e:01:76:2d:3a:92:0b:25:34:06:74:
dc:43:56:9a:bd:4e:cd:e5:93:3d:a7:c6:25:d0:61:
84:1e:85:a1:97:ab:85:0e:84:31:db:0a:52:20:fd:
64:85:f1:7b:b6:98:0e:69:18:d1:78:8c:c6:ef:33:
5a:57:0b:cd:a9:d0:85:57:08:90:58:b2:ee:22:bd:
70:35:f7:c2:78:2e:6f:d7:22:fc:43:2a:3c:5b:29:
c1:28:eb:43:2f:19:43:31:45:62:ad:c1:77:68:0e:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:CE:33:BD:61:24:D6:68:61:95:80:2F:53:4E:A2:8E:04:51:B6
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:55:d1:4c:ae:d2:42:4e:12:86:fa:52:3d:f8:d8:61:37:94:
3a:0f:7f:65:c6:5c:2e:78:1d:db:11:85:82:2e:60:c6:58:e2:
f8:d4:a1:27:70:f4:2b:55:fc:80:b9:6a:98:d7:72:0e:c4:bf:
ca:b3:b0:d7:df:cf:9f:47:b7:f6:92:6a:83:31:4f:2d:78:fe:
1e:06:35:61:2c:22:60:62:45:37:18:e2:e2:2e:73:13:cb:f0:
07:59:b6:87:7d:79:00:1d:37:e2:a0:1f:8c:c4:50:32:ea:61:
38:27:cd:43:f5:27:80:fa:73:93:ab:ce:c9:76:6f:19:2c:fb:
35:92:bb:84:bb:66:54:17:39:20:a2:f1:0c:a9:98:5c:41:21:
3b:8c:fb:4f:6c:8c:d8:15:70:46:2c:4c:9d:9a:7f:26:26:26:
27:10:42:9b:06:4c:56:56:d1:27:58:2a:d4:82:21:46:d1:68:
02:b6:55:a8:6a:f0:67:66:14:21:46:c2:d6:da:df:44:b2:0d:
0a:39:2d:78:17:e1:7c:96:17:87:ea:35:b4:bf:41:43:03:91:
a1:bb:d3:ab:d1:b1:38:09:df:31:6b:a6:a5:20:64:f6:c0:99:
71:27:2a:0d:c2:20:98:95:01:5d:c1:83:2e:44:3d:90:ee:d8:
2b:d8:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:06:12 2025 by rpki-client