Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: D9tCyc+wkBKpU+H3N3322JOqwPbXKjKihnijqqA3D2w=
Subject key identifier: A9:0A:57:03:8C:E7:99:FA:08:30:0F:25:BC:23:B8:DC:A2:7B:FD:F0
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 0196A49C4188E0E729A10573A6E5DB746C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 08:00:25 +0000
Manifest this update: Tue 06 May 2025 08:00:25 +0000
Manifest next update: Wed 07 May 2025 08:00:25 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: bOcKTWq2xOBRb11tWRrxp4fIj1q/jrWKcwBfYFgMZE0=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:41:88:e0:e7:29:a1:05:73:a6:e5:db:74:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: May 6 08:00:25 2025 GMT
Not After : May 7 08:00:25 2025 GMT
Subject: CN=a90a57038ce799fa08300f25bc23b8dca27bfdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:81:1e:e5:d3:97:35:c6:4a:86:ea:b6:6d:
5e:1c:df:89:4d:53:eb:c2:b3:f4:df:83:41:79:cf:
ca:c5:80:ec:6b:ed:22:11:a9:09:89:be:b0:23:e6:
3e:62:d1:ba:db:07:97:2b:79:71:17:28:34:ab:be:
95:20:7a:56:de:46:e7:7e:46:2a:72:39:7a:75:eb:
11:39:02:e3:bc:a8:a4:d6:22:5d:50:f8:fe:63:a3:
3d:a7:f4:d8:dd:5a:a5:ea:94:28:0c:c3:f8:ea:bd:
32:73:90:6f:4d:95:a8:2b:f3:87:3e:8f:ae:ed:0b:
91:f6:72:d2:02:2c:b1:62:13:01:82:a0:96:14:43:
eb:c6:3f:b5:fb:aa:24:10:cb:9d:61:80:77:71:cc:
e3:0a:31:96:61:a7:c2:63:a4:be:64:44:03:2a:84:
b9:09:86:b7:19:6a:48:73:c1:a5:4f:84:69:71:46:
75:8c:c6:52:16:54:29:82:42:0d:1b:85:aa:56:45:
63:95:d2:d0:9c:da:b7:62:28:cd:54:22:11:c1:6f:
ac:55:69:9e:18:3f:b1:59:fb:63:af:0e:8b:aa:99:
fa:2d:35:02:07:3c:42:9f:b6:54:19:42:65:87:18:
5d:a4:d6:f6:be:c4:70:bb:27:68:95:1f:18:2d:6f:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:57:03:8C:E7:99:FA:08:30:0F:25:BC:23:B8:DC:A2:7B:FD:F0
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fd:44:98:a3:8e:2a:5f:14:2b:e8:4f:f7:02:80:47:dc:cd:
7a:d7:a9:99:1a:59:36:44:55:96:5d:b4:90:0f:da:de:e1:cc:
ac:df:01:b4:47:60:da:89:6f:70:2f:08:7e:c5:9f:ef:0b:73:
0e:39:1a:33:90:3e:72:6d:1b:eb:96:03:ff:21:db:de:6d:40:
e7:58:2f:4a:94:c7:a1:33:e5:53:69:6f:db:42:87:b2:59:c5:
9a:84:0f:b1:d0:6c:e1:c3:13:2a:57:f1:07:2f:20:90:b1:e2:
18:1a:fa:57:09:a4:23:0c:c0:c3:47:85:49:d0:a1:9a:df:5a:
32:4e:ee:a6:1c:37:ae:ae:77:de:04:f7:5b:16:8f:6b:c9:ae:
7d:83:16:e8:35:20:16:4b:71:d2:a5:ce:f6:2d:b8:22:3a:b2:
a8:cc:f8:5e:6f:b0:5e:99:93:52:1b:a1:69:4b:21:e0:7c:13:
f0:d9:d8:9c:06:7b:78:19:59:05:f1:65:b0:ce:b3:30:ce:57:
e3:fb:48:3e:f1:43:59:10:0e:b9:cd:6b:5e:bc:b9:c9:01:aa:
15:5e:44:e8:eb:bc:22:c6:d9:e6:1e:3e:51:3d:f7:40:6c:78:
f2:ca:c8:17:ad:7b:2d:42:e2:42:98:4b:57:d8:30:54:5e:1f:
62:46:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:58:26 2025 by rpki-client