Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: 7YtaVwHGcvaHRWmBDT/U/ufaRpE/ZxHtQ9lnGKRjS58=
Subject key identifier: 57:01:AC:22:0C:B4:DF:91:57:78:62:8E:26:23:33:E3:F0:60:3C:C0
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 0196A31C1ACBD57DF79B7109F2580B9D467D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 0CDB
Signing time: Tue 06 May 2025 01:00:50 +0000
Manifest this update: Tue 06 May 2025 01:00:50 +0000
Manifest next update: Wed 07 May 2025 01:00:50 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: MSHtRP7Om8e1V9wZ9xREBviAP52lRHDDFhTtetoa2MI=)
2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:1a:cb:d5:7d:f7:9b:71:09:f2:58:0b:9d:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: May 6 01:00:50 2025 GMT
Not After : May 7 01:00:50 2025 GMT
Subject: CN=5701ac220cb4df915778628e262333e3f0603cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:a3:18:86:6b:b0:61:e7:46:d8:e8:46:0f:
f4:84:38:93:21:bb:b5:23:73:60:f5:07:bc:17:49:
89:ba:37:ca:73:69:3d:49:b8:e4:6c:82:71:95:5a:
19:b4:3a:bb:11:7e:7e:02:40:b4:ae:e7:01:6d:63:
1d:70:69:8e:f4:4b:ac:e3:29:3b:eb:32:8e:4f:a7:
cf:28:80:76:6e:2d:a8:0c:f7:6d:83:2d:8f:74:fe:
4d:6d:66:bf:7b:68:4b:e6:c8:0c:1e:b2:88:2f:1c:
d2:74:a8:8f:14:f8:5c:5c:4d:f7:a5:75:c1:9e:d8:
82:be:40:5a:89:13:1a:aa:b4:ac:9b:2e:ad:f5:cd:
71:f4:7e:a4:34:2e:05:ca:46:f2:3e:a4:15:6e:49:
91:08:9e:c6:7e:1d:db:7e:2e:ec:7d:3b:35:3c:e6:
63:f5:f5:cd:57:62:84:25:32:f9:6a:b6:cf:35:ca:
4c:7f:d0:5b:b7:97:ae:21:66:78:b3:30:2c:7a:c7:
74:df:5f:99:45:56:ea:15:28:98:23:95:f1:43:2d:
d0:4f:a7:fa:42:59:f7:2e:42:32:a3:17:8a:dd:1a:
54:6c:03:f6:6e:b3:b9:5d:88:35:c4:f6:5c:88:fc:
99:ad:e5:c5:4d:e0:57:da:7f:c9:fb:3d:d6:a0:60:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:AC:22:0C:B4:DF:91:57:78:62:8E:26:23:33:E3:F0:60:3C:C0
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d7:0d:a4:d0:3c:0e:5d:58:e8:80:69:d4:06:82:c9:07:ff:
2e:86:1f:c3:cb:31:86:4f:d3:7b:47:aa:c9:62:29:e4:ed:f7:
a3:5d:de:f0:ca:f9:2e:87:96:34:10:3d:6f:ef:59:60:e7:66:
cb:7e:0c:9a:d6:92:e3:e5:c3:df:f2:b7:76:0b:7a:61:57:08:
20:26:b0:af:5d:1c:3e:bd:16:a8:44:67:23:f8:a7:9f:2e:30:
bb:01:d3:b0:a7:66:14:00:ba:77:62:8f:d0:a9:91:99:53:6b:
bd:a4:48:61:fe:aa:bd:fb:b3:fa:c7:23:95:4d:76:c8:6d:84:
4f:40:62:a6:df:52:e3:c2:54:1a:3b:ef:a1:76:98:12:0f:e6:
ba:bd:5d:f9:47:56:b9:01:d0:04:8d:8c:e8:81:a2:6b:f1:42:
40:c5:97:56:fc:56:c6:1f:37:75:ae:13:9d:3b:ea:86:fc:69:
83:ed:89:15:d4:57:ea:0f:0b:38:52:9c:87:56:11:0f:ae:1c:
e1:1e:17:a8:0c:7f:78:04:59:f2:30:0f:c2:6c:30:4c:fb:d2:
d2:e8:ff:6c:53:45:0a:d8:70:e6:bb:74:1a:5d:0e:7d:d9:69:
82:d2:48:52:bb:19:4d:40:a8:dd:d6:7a:8d:ae:ea:09:55:5c:
55:15:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:19:28 2025 by rpki-client