Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: +heELbx1u3gyaQ5e8EaZhEU1tt6c026Em5VeXgFWffo=
Subject key identifier: 3C:52:44:3C:49:12:69:C2:9D:8B:5B:6F:E1:B1:CF:24:F0:80:A0:69
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 01969E9AF7F157EC12877CD08C23DBC6A658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 0D7F
Signing time: Mon 05 May 2025 04:01:18 +0000
Manifest this update: Mon 05 May 2025 04:01:18 +0000
Manifest next update: Tue 06 May 2025 04:01:18 +0000
Files and hashes: 1: gGw6ft1sLBQmsJ-vRfx6KJXkhbk.roa (hash: S1p9cVSO3FaBQReociITznoI/L2Cqm4kk12uycY2TsA=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: jmkgxLzeRisK5KC4z7IGuMWBHr7esgReV4u+xqJ08kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:f7:f1:57:ec:12:87:7c:d0:8c:23:db:c6:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: May 5 04:01:18 2025 GMT
Not After : May 6 04:01:18 2025 GMT
Subject: CN=3c52443c491269c29d8b5b6fe1b1cf24f080a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:85:0c:ff:69:06:f8:32:29:91:96:60:f7:
2e:59:5e:69:35:af:0d:ea:c5:9e:32:4f:81:65:fa:
1a:1f:39:78:13:93:9b:01:92:79:08:be:55:bf:05:
ff:59:4f:f9:f8:dc:a0:cb:d8:12:35:f5:49:67:53:
84:7c:eb:4a:bd:75:5a:8f:f7:4c:ac:c3:68:b3:3b:
78:6f:f3:f1:3f:33:b3:12:19:82:c1:1d:7f:92:65:
68:a4:16:bd:07:67:ae:3a:84:b8:41:d0:24:f7:30:
9d:21:df:8c:a3:37:73:4f:7e:66:95:ff:73:54:aa:
a7:e9:1f:c2:de:eb:ec:03:34:d5:1d:d6:77:5f:46:
b7:38:d3:a5:4d:d4:ee:7e:a7:db:a4:be:6a:fb:03:
ce:85:81:b7:d0:43:3d:dc:35:b7:98:b6:f8:0f:28:
0a:a8:b8:ad:43:bf:40:2c:50:69:16:8e:05:35:ff:
3c:b2:28:f7:72:7f:18:34:1e:fd:e7:c8:13:48:12:
92:8d:76:04:68:4e:27:88:86:9b:be:73:da:e0:f9:
f7:65:36:51:a3:7e:f3:4a:e2:91:cd:c4:4c:e4:be:
98:60:0d:e5:f3:53:79:0e:65:ec:45:a2:84:31:62:
fe:6a:8d:23:b5:28:46:84:0c:7a:17:81:e6:67:6f:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:44:3C:49:12:69:C2:9D:8B:5B:6F:E1:B1:CF:24:F0:80:A0:69
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:38:c5:51:5f:e2:3e:0a:6e:2d:d0:d6:05:37:38:63:ca:
28:08:7c:f1:74:ce:89:bb:7e:5a:55:d9:3d:49:1a:7a:b9:42:
fc:83:39:03:56:60:96:66:bc:fc:68:08:1c:eb:f8:a5:74:bc:
da:1c:59:f2:a3:5e:6f:4b:8a:07:0e:33:b6:5b:c5:75:5f:42:
35:aa:fa:26:4a:03:1c:86:dc:00:4b:0a:2b:80:db:fc:bd:d5:
a3:a6:8e:1c:fe:e7:0a:24:8f:06:18:21:ab:a8:28:a4:71:86:
bc:32:c6:0f:2c:3c:11:7c:e8:7d:9a:4a:bb:a4:05:ce:59:2f:
2a:34:05:83:42:6d:2b:01:10:14:c3:74:d1:b1:a9:d8:aa:7c:
c3:88:99:f2:c5:f2:81:bc:1d:af:f6:72:a0:2f:52:37:2f:6a:
d5:fb:6a:14:25:27:97:b2:bd:47:75:a0:0e:9e:c3:12:9b:f0:
2f:ac:c5:4f:7c:d0:e9:eb:d9:d9:41:00:7a:0f:ab:21:93:b2:
4e:74:33:9b:67:bd:53:2a:26:71:b3:0d:08:2c:8a:78:8f:da:
2a:c6:8f:f5:60:9e:ba:de:dc:a1:24:e5:48:b4:e4:d0:3e:04:
3d:e7:82:01:ae:cc:fb:01:27:2f:bd:e6:64:ca:1b:0f:67:2a:
d0:b8:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:02:51 2025 by rpki-client