Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: QiAXK5U7Y+vDx5Z9J1fuMPl1UOv3m6IoNysnrkQOT7U=
Subject key identifier: 4C:71:D0:A9:D2:2E:08:66:C1:24:31:32:F7:3B:10:39:6B:33:47:88
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0196C34C18CDDB2B0557E9CC45A537125DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0E67
Signing time: Mon 12 May 2025 07:01:06 +0000
Manifest this update: Mon 12 May 2025 07:01:06 +0000
Manifest next update: Tue 13 May 2025 07:01:06 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: E0SMmLtPqkJ//lMhnxCRRdv6Zvr4cKz+C4eh4alXxUM=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:18:cd:db:2b:05:57:e9:cc:45:a5:37:12:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: May 12 07:01:06 2025 GMT
Not After : May 13 07:01:06 2025 GMT
Subject: CN=4c71d0a9d22e0866c1243132f73b10396b334788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:88:2d:44:a8:8d:6c:f0:d1:34:34:32:e3:
c4:7f:7a:00:62:ef:2c:2f:6b:e4:03:9b:4e:85:7b:
ee:b8:09:c2:a5:ec:f4:c9:56:6d:30:8e:35:db:e1:
cf:97:ab:33:9a:de:7f:f3:a3:3b:da:70:cd:4a:15:
cc:75:52:2e:47:f4:e1:5b:eb:36:7a:ca:b1:d3:67:
ea:27:5c:df:d2:06:8b:fc:d8:ae:35:30:8c:b8:7a:
8d:59:42:7a:73:a6:96:e9:74:a5:a7:a1:88:c8:fd:
9c:41:fd:c1:cb:9a:60:88:aa:b4:4f:a6:e6:ad:f8:
c8:b4:af:06:0a:b3:5f:08:82:32:d6:b3:69:80:98:
ee:d0:cf:fd:39:95:94:17:c0:fa:4f:5f:16:b4:c7:
eb:83:b7:2f:bf:cf:8a:64:1d:ba:ce:74:5f:ed:61:
25:1d:17:c8:da:bc:c5:df:34:e0:b3:d7:2f:62:eb:
29:a3:0d:ff:ed:f7:0b:28:ef:cf:a8:2a:5c:0b:d7:
78:0f:27:e9:9c:66:44:5b:72:e2:d0:e7:93:ef:87:
75:cb:a0:ba:3a:8d:40:a1:4e:a8:20:6d:97:89:ba:
b8:a3:7b:a9:6b:fc:3d:8f:60:77:a2:95:3a:45:8e:
c3:f4:72:ee:f8:b1:52:4d:3e:1e:32:81:b1:e4:4f:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:D0:A9:D2:2E:08:66:C1:24:31:32:F7:3B:10:39:6B:33:47:88
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9a:21:6c:db:e9:4f:01:11:73:f9:c2:cc:53:bd:4f:b2:cd:
89:f7:21:68:c3:05:ba:f5:46:8b:90:bb:0c:1c:b5:3f:6f:24:
88:42:04:dc:a1:f4:bc:d3:02:f1:f0:f0:e1:d1:d9:ce:83:87:
b4:55:3b:21:24:1c:2c:85:98:61:af:01:4a:54:6a:e1:4d:89:
8f:6c:d4:26:1f:66:72:25:39:4f:e6:11:cb:1f:06:00:97:ea:
cb:d7:3f:17:b4:07:a1:cd:57:9a:c2:c0:a5:a7:98:9d:aa:e1:
ad:60:a2:d6:fa:85:e3:ac:f9:6a:f7:22:51:53:b0:37:79:87:
04:97:5c:31:67:ce:db:b3:36:9f:a2:e3:66:19:3f:35:ae:48:
f3:43:7d:6b:ed:f1:be:de:d0:de:03:3a:07:bf:5e:60:a2:39:
4d:0b:e2:57:ed:68:3e:93:d2:ba:db:3a:37:98:a7:53:79:a1:
27:37:48:fd:df:84:19:2f:55:dd:0a:00:57:2c:e3:87:88:58:
81:bf:1e:2a:86:07:18:ee:2d:2b:70:68:b9:4c:ff:a4:9f:1c:
f4:c0:34:98:be:ee:65:18:ef:44:98:8f:25:dc:d1:90:9c:fa:
51:6f:8c:59:db:4d:6c:15:a8:63:b2:1a:f3:15:2a:2d:ce:8f:
7d:86:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:26 2025 by rpki-client