Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: YL3cSSqzw2uUno+1NO0RmLtUDCW5yO7ZdaT8hrTvLtI=
Subject key identifier: 00:CE:B6:45:A4:7E:77:EC:62:7A:CB:DC:04:40:B1:E2:BB:61:D6:66
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 0196D40875D8965CFAD70EE61C9252E71529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: 01D7
Signing time: Thu 15 May 2025 13:00:46 +0000
Manifest this update: Thu 15 May 2025 13:00:46 +0000
Manifest next update: Fri 16 May 2025 13:00:46 +0000
Files and hashes: 1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: X1fPXsroOTYUDjX0FRjYKLCY11ybvNw7lw1Irfs/Hlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:75:d8:96:5c:fa:d7:0e:e6:1c:92:52:e7:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: May 15 13:00:46 2025 GMT
Not After : May 16 13:00:46 2025 GMT
Subject: CN=00ceb645a47e77ec627acbdc0440b1e2bb61d666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:14:84:dd:b4:a2:6a:3b:f9:86:3b:f6:3f:
61:93:f2:3a:00:08:24:6e:e6:bc:0a:03:95:d9:a4:
57:12:61:1b:df:bd:1d:fd:d8:b6:e4:e6:12:86:7d:
41:86:f0:0f:10:80:df:59:b7:5e:a6:7f:77:a3:7e:
cc:1f:a5:ab:50:62:91:c8:7f:1d:f9:da:b7:cd:22:
fa:a7:f7:89:5f:29:55:6b:68:0c:60:a0:7f:c5:06:
bd:6e:3b:07:0b:aa:91:31:12:bc:e4:ab:b8:6e:5c:
3a:e1:cd:78:30:0e:a5:3b:7e:6f:46:e9:32:75:d2:
3a:19:1a:0e:2f:6f:ff:45:ec:46:03:4a:21:d4:99:
c4:08:db:4b:75:43:fa:8a:62:90:7e:35:d3:e2:4a:
1f:97:8f:fb:e2:83:82:f2:7b:2a:c2:c3:70:f3:ee:
b1:2c:3c:4c:d9:a0:fe:61:fc:fd:2e:30:b1:3f:0e:
c6:ab:a3:56:8e:43:48:9a:e6:75:0a:99:b6:7a:e7:
7b:80:98:db:4e:37:1e:76:fe:f0:50:09:41:bc:aa:
74:cf:74:8e:16:7e:85:ed:61:d4:cc:26:06:a4:1b:
9d:fc:13:95:b7:93:1f:2b:90:78:ad:7e:b9:91:4e:
c3:8f:70:0b:80:3c:5e:1f:fd:39:18:80:77:b6:46:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:B6:45:A4:7E:77:EC:62:7A:CB:DC:04:40:B1:E2:BB:61:D6:66
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:d5:0c:17:4d:b9:3e:10:97:84:3e:56:aa:cd:bd:12:7d:
b6:e5:bf:c5:60:9b:4e:f3:eb:d6:47:c0:e4:37:ef:18:1c:fd:
4e:8e:de:0b:65:65:64:c6:42:27:c4:56:c7:a7:9f:0b:90:60:
bf:93:39:b3:55:67:e5:f0:94:cb:f4:64:b1:cf:8a:6c:59:5c:
4a:65:10:a7:8d:0e:b2:6d:db:76:f3:94:78:a8:95:5f:2a:4c:
e9:c8:8e:ef:d1:30:f6:fc:85:24:29:49:10:8e:91:4d:3e:94:
82:ed:fa:4c:3a:d0:b2:c9:d1:41:e5:19:11:f3:4b:a8:6e:dc:
1c:15:32:b2:d3:3b:05:66:ab:0c:1c:ca:c9:2c:c2:7c:15:39:
04:e9:25:ed:7a:b7:aa:a1:4b:b4:b7:2a:f7:8a:18:39:24:d1:
fb:a5:42:9b:24:b7:4d:c5:ab:17:6f:f5:1e:3e:93:36:b7:cf:
9e:c6:42:ea:54:5b:52:98:99:34:60:68:6f:61:da:fe:be:b6:
4f:9a:ba:2c:6b:bf:5d:63:ad:85:ff:b5:5a:73:f3:ec:1c:46:
62:1b:c3:2a:86:de:86:20:93:21:d6:1c:fb:ec:83:85:cd:d1:
d6:d6:22:dd:87:2d:f2:d6:44:b6:f7:23:7e:60:5f:3c:f5:c6:
52:1b:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:31:15 2025 by rpki-client