Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: OEpQnloH1rnYEAZssBIYTNE2m5SOrDVBMXOOuUuCs4Q=
Subject key identifier: 09:FF:7A:D0:6D:73:F7:9A:C5:8A:8E:BF:C3:A9:5B:D9:66:3B:BE:B7
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 01969E63097F6BABEDD8E6EDC3671B4F6731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 14DE
Signing time: Mon 05 May 2025 03:00:12 +0000
Manifest this update: Mon 05 May 2025 03:00:12 +0000
Manifest next update: Tue 06 May 2025 03:00:12 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: oyAknSH6SzubZIs7uNpHZns1feM1QJLIqKGZrhuIYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:09:7f:6b:ab:ed:d8:e6:ed:c3:67:1b:4f:67:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: May 5 03:00:12 2025 GMT
Not After : May 6 03:00:12 2025 GMT
Subject: CN=09ff7ad06d73f79ac58a8ebfc3a95bd9663bbeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:db:b5:ef:9b:da:87:60:bb:c0:35:28:d2:
b4:28:fa:af:27:aa:81:02:9e:9b:61:42:aa:77:3a:
5a:f5:db:00:9c:30:1e:ec:76:5c:a2:cf:c4:34:f2:
2b:ef:bb:24:af:c9:cb:f1:28:16:8b:1e:1a:ff:bb:
15:3e:c5:11:20:54:c3:d3:8d:a9:db:bf:27:6f:d2:
3f:bb:1e:9e:47:cc:9a:12:32:12:18:77:f3:ff:0a:
9c:f7:74:b3:92:f1:37:dd:47:27:9c:f4:9d:a3:f5:
46:51:76:02:0e:f7:ad:93:b9:2f:8c:ab:c7:34:5c:
dc:44:d3:79:e9:e3:c4:57:1f:a2:4f:42:55:1d:49:
49:30:48:df:8d:eb:88:1e:a1:d6:be:81:2f:8f:25:
33:13:cb:b2:90:20:ed:9b:b9:a7:2b:c0:4a:7d:c0:
e2:36:39:b9:de:d6:8f:e1:cd:5d:a0:09:01:c1:11:
08:6e:6b:79:4a:3d:f3:00:fd:15:93:16:b2:8c:74:
68:ff:b8:4a:d5:ed:57:32:5f:26:bb:b3:b2:74:36:
93:8a:b9:00:ad:cc:17:e2:6b:4b:f3:ef:06:c7:8b:
48:3c:0f:66:d2:36:9b:26:ca:d1:30:f8:24:97:d9:
5a:36:a0:64:4e:2e:e1:f8:c0:30:df:2a:c3:86:78:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:7A:D0:6D:73:F7:9A:C5:8A:8E:BF:C3:A9:5B:D9:66:3B:BE:B7
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:5a:bc:90:f8:26:67:d3:65:e7:0c:64:1f:09:58:04:76:
ec:f3:ac:72:c3:e1:2f:e6:2d:d3:ac:60:c5:3f:24:d9:3f:07:
2d:56:70:65:41:0d:16:0e:da:11:8e:0c:f9:b3:7e:5f:09:0b:
9a:00:3a:d6:45:42:15:07:2a:23:b6:f4:a3:91:97:f2:59:39:
12:66:52:61:ff:f2:dd:bb:9d:4a:9e:f5:6b:39:99:50:35:23:
2a:eb:b7:22:ec:3e:7b:28:70:8d:d4:d7:98:a4:20:9b:c4:ea:
6d:44:68:a3:d2:89:b0:89:8a:e4:57:38:91:63:3c:df:e5:57:
3f:be:35:2b:6a:f8:f3:8c:b9:1b:f2:f3:78:59:f1:88:9c:86:
87:df:4a:74:60:60:a1:10:42:3b:6e:2a:56:f0:eb:7e:fb:69:
27:03:a6:41:7b:ae:86:36:52:a7:51:60:6f:4c:3b:bf:d1:9a:
a5:cc:81:5b:ac:a2:fd:ed:58:91:ba:75:4c:53:72:d2:5d:07:
a2:25:51:ac:87:c4:31:50:4c:0d:92:42:59:59:d7:73:02:61:
f5:48:b7:64:ab:85:3f:47:16:ec:08:f1:5f:8b:6a:a8:81:e1:
2c:ca:4d:a0:e6:fc:d3:b7:15:8c:94:4f:dd:22:c3:22:40:4c:
0d:ab:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:05:31 2025 by rpki-client