Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: hM9K+YdWkEA4LwRvkreLkBTTAjtqaJd1goDWqsr2vBo=
Subject key identifier: 86:3B:C2:0D:14:2C:89:C9:63:9A:EC:3D:60:01:7C:95:8A:14:20:7F
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 0196D7ADD94D3005B5461782DB22A48AFC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1548
Signing time: Fri 16 May 2025 06:00:16 +0000
Manifest this update: Fri 16 May 2025 06:00:16 +0000
Manifest next update: Sat 17 May 2025 06:00:16 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 5isHwM3WeMNHpbxj3SN2yyvImu+QGrMfvzl73LcF8HI=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ad:d9:4d:30:05:b5:46:17:82:db:22:a4:8a:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: May 16 06:00:16 2025 GMT
Not After : May 17 06:00:16 2025 GMT
Subject: CN=863bc20d142c89c9639aec3d60017c958a14207f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:33:5e:58:59:47:c1:a2:df:33:02:29:2c:
2f:7a:0b:ec:16:1e:c2:61:bf:ea:d7:bf:5d:b1:29:
31:11:2f:a9:84:1a:39:b5:a7:ec:ed:05:c7:19:81:
0e:70:2b:da:0f:e3:9f:7f:1b:e0:35:f5:a4:5f:40:
74:97:61:f2:99:2e:0a:ab:c1:1b:11:87:3e:d1:de:
35:5e:e6:a8:80:71:8d:24:72:b9:ee:b1:f2:fb:c5:
ba:fa:53:76:de:6f:1b:ea:33:9d:3a:4b:6d:8d:ad:
20:7a:da:c3:73:23:b1:59:c4:2a:11:d1:7e:96:2e:
e5:7e:50:0e:63:40:d5:c2:00:2b:81:e3:02:73:76:
0c:ab:c9:6a:bd:d1:3b:c3:7f:f0:9c:17:aa:f8:93:
a9:32:cc:5f:d6:3f:d0:2b:d0:98:de:6b:31:d0:81:
03:01:6f:79:60:ab:42:8b:08:fd:7a:ef:ac:27:0f:
cb:df:1c:8a:df:3f:a4:71:ba:0b:43:64:8a:ef:a6:
65:ef:6c:8f:4e:13:1c:51:09:1f:d5:2e:f5:3a:3b:
dd:fe:60:25:6a:99:c8:cd:86:88:71:3e:b2:22:55:
77:2d:c8:4f:24:55:d0:4b:2e:16:aa:1a:3a:ba:3c:
b7:f6:da:d6:59:07:2a:2f:94:ee:d3:65:21:b8:05:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3B:C2:0D:14:2C:89:C9:63:9A:EC:3D:60:01:7C:95:8A:14:20:7F
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:01:7a:fd:69:49:e8:ab:c7:3f:72:44:53:bf:f4:9e:3a:
8e:d1:7c:69:77:11:e7:19:1a:b7:10:7a:b7:ea:34:f6:e9:f2:
51:07:70:92:7c:3d:ff:37:de:b4:a2:06:42:86:4f:e1:90:d2:
7f:cd:9a:c3:ef:8c:27:f9:17:39:0e:ba:7c:e6:0d:26:13:ac:
b7:69:93:73:3d:70:40:7c:8d:71:be:04:81:8a:96:1a:28:42:
0c:d5:73:7e:1f:26:25:90:aa:e2:44:31:5e:48:07:6d:0c:79:
ed:3d:cb:7f:64:a4:de:2e:2d:23:d5:8a:4b:56:77:83:0e:30:
62:1c:05:ec:8f:9c:3e:cb:d7:1b:5d:ab:84:b9:5e:c4:63:6c:
4e:bb:47:69:ee:50:b0:c6:03:1d:aa:e7:1c:00:89:ca:1b:24:
64:8b:ef:a7:88:09:90:b5:34:16:41:c0:de:43:d4:7c:6c:32:
c3:37:5f:4b:a9:e0:34:4e:e4:27:b7:7f:a4:23:00:fa:b6:f5:
74:c0:9e:78:a4:04:18:4a:12:3d:e5:14:3b:d6:fb:3e:e7:13:
c6:b7:6c:53:92:90:8a:4b:cb:85:01:ca:6d:0a:d3:ad:d8:a6:
b6:ee:f8:db:97:7d:04:85:fd:5b:59:dc:fb:96:b3:ca:62:4a:
f1:58:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:20:44 2025 by rpki-client