Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: RORh8LKjPRnbTRx7qq54jB+nveRafzFpoGemrAJDsxI=
Subject key identifier: 4F:3B:52:1F:41:1F:F9:B5:92:14:4C:9A:F0:BC:87:9A:C0:86:AE:BF
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 0196BC6E4457A082732D0F5CA4AC886138CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 08CD
Signing time: Sat 10 May 2025 23:01:04 +0000
Manifest this update: Sat 10 May 2025 23:01:04 +0000
Manifest next update: Sun 11 May 2025 23:01:04 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: vyt4pkBSoIJRKrcpFx7JsbPdKyFyIfyXf11p637zqhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:44:57:a0:82:73:2d:0f:5c:a4:ac:88:61:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: May 10 23:01:04 2025 GMT
Not After : May 11 23:01:04 2025 GMT
Subject: CN=4f3b521f411ff9b592144c9af0bc879ac086aebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:76:25:a2:1a:73:82:4c:ef:eb:80:d2:d0:
9c:60:c5:9f:62:f5:59:63:b3:f3:a3:2e:eb:84:40:
27:aa:1b:bd:0a:b2:9e:52:23:2b:ae:16:38:b5:d0:
43:21:1e:6c:12:57:b1:83:a6:66:9c:ee:9c:5d:df:
e5:ef:6e:d9:02:8b:a8:6c:a2:97:7d:65:15:ab:c2:
b0:2f:8c:91:ba:54:88:9d:09:8e:68:29:c9:38:be:
33:8c:f8:51:be:b8:eb:c1:88:92:5d:ca:bd:5a:29:
c2:e6:b8:2e:1f:3d:e3:d6:53:04:4b:af:fa:e8:c6:
71:b6:6c:26:fe:c7:2b:f2:8c:4c:ff:af:a4:3b:1b:
ef:e3:18:51:b6:a0:fa:6c:06:a0:ba:d5:f7:73:97:
2a:0b:75:46:29:4a:5b:80:c6:cb:f7:15:5f:af:d6:
2d:62:5d:81:e3:06:93:d1:53:1d:c4:c7:3a:b5:94:
c6:30:11:1a:93:d2:29:0b:73:6d:b6:07:4b:f3:88:
89:83:ad:e0:81:5a:7a:f4:67:d9:a5:76:58:0c:50:
c4:73:8b:01:b2:3a:49:e1:29:5f:a9:4d:f6:f9:9a:
2b:55:06:97:f7:87:f6:9b:d0:ea:11:61:e7:02:6d:
f1:a7:97:b2:03:e7:1a:51:f6:45:ba:ea:d8:0c:d7:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:52:1F:41:1F:F9:B5:92:14:4C:9A:F0:BC:87:9A:C0:86:AE:BF
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:bc:21:13:3b:28:63:62:dd:26:45:3a:77:45:1a:da:45:c6:
5e:68:f2:9a:22:28:a7:b2:d3:92:48:e9:fb:5f:9b:ac:8a:ad:
07:7e:36:0a:50:24:97:ed:69:7b:1d:50:bf:de:17:2b:27:af:
78:8e:b2:53:d0:7d:47:ee:30:1a:81:66:f3:ec:4d:c0:b1:d4:
34:ba:9b:f1:e0:5a:b8:1d:9a:38:5a:77:21:54:6d:cc:6e:b4:
21:25:f2:e9:6f:b7:11:02:31:e1:ea:5b:3b:bc:84:f2:e2:fe:
a7:55:94:5b:d0:bc:4e:f4:d9:36:43:78:ae:65:65:dc:2c:93:
0c:a0:24:6c:9c:e6:68:06:5f:b5:92:f9:e7:9d:24:a1:37:62:
23:6a:f8:d7:32:2d:52:a8:9b:3d:55:b9:5d:97:73:93:b8:0f:
5a:26:7a:27:60:4b:fe:34:ae:45:d3:2f:de:24:b5:9d:fc:18:
44:cf:33:61:32:cc:46:f9:cf:f9:41:98:31:ed:00:cf:8b:e9:
ff:57:fb:05:b3:15:3f:e9:40:3d:d7:dd:08:ba:76:24:bd:d7:
c7:63:0f:55:cf:9d:e3:b1:51:f5:47:45:56:2d:3c:47:ea:5b:
0b:65:f6:42:f2:b0:73:ec:13:d3:88:34:a1:79:93:03:73:18:
43:d1:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:30:03 2025 by rpki-client