Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: j5z9Jk844VtjONfwIx1bwTr078E42cuanpRxbxL6juw=
Subject key identifier: 44:EF:E2:B1:8D:7D:4B:DB:7E:AC:9F:E8:83:E7:3D:4B:5F:F1:A9:08
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 0196B0D731B51A11F3BA631B94B2612B5C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1537
Signing time: Thu 08 May 2025 17:00:15 +0000
Manifest this update: Thu 08 May 2025 17:00:15 +0000
Manifest next update: Fri 09 May 2025 17:00:15 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: uRwZscTFf+83UEVCeTc0NgcKMYauDaQ+fUTT0X/MEbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:31:b5:1a:11:f3:ba:63:1b:94:b2:61:2b:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: May 8 17:00:15 2025 GMT
Not After : May 9 17:00:15 2025 GMT
Subject: CN=44efe2b18d7d4bdb7eac9fe883e73d4b5ff1a908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:ce:b9:e5:0f:58:11:38:8d:2e:a1:cb:9a:
e9:13:a9:78:03:c5:e9:ce:4c:7e:65:94:de:f8:5b:
54:b2:b8:aa:b1:7f:7e:d0:53:ea:c7:5f:21:f3:65:
9c:43:49:7e:d1:5d:47:47:15:b6:49:a5:38:38:a6:
70:f8:ef:48:5a:f1:13:8b:f3:76:d1:47:e4:a6:bd:
65:e4:aa:fb:15:ff:20:3b:45:6d:05:b1:9c:48:8e:
bf:2d:f2:60:fc:fd:6e:a0:0a:c3:9b:88:88:8b:6e:
70:da:56:47:ec:39:57:3f:75:1b:e8:ab:0c:fd:26:
02:ab:4b:e3:d2:d6:43:21:7a:e3:11:ff:4c:b4:4c:
05:70:78:93:eb:91:c3:f0:92:36:7d:5a:ca:37:95:
be:be:bb:3e:32:12:7c:35:58:fc:50:78:83:8a:67:
0a:f1:62:90:e4:0d:cd:13:23:f1:37:fa:4e:7d:0b:
d9:d0:6e:38:f2:e7:e4:bf:c5:e4:1c:1a:52:41:41:
2e:84:8c:7a:93:67:ca:00:eb:a1:4a:a9:16:33:57:
06:71:80:fb:c6:10:f1:fe:4e:b4:8e:4e:65:10:77:
ee:8c:c7:cd:4b:eb:5b:a5:b0:26:6a:22:7d:99:9d:
32:1e:0e:82:72:fa:06:28:d6:a1:fb:ba:69:35:1c:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:E2:B1:8D:7D:4B:DB:7E:AC:9F:E8:83:E7:3D:4B:5F:F1:A9:08
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:13:e5:51:01:d2:70:e3:5f:83:45:99:26:35:a0:9f:0a:
6b:78:ca:19:0e:3a:14:6a:76:61:71:9b:4f:59:44:7b:2f:ee:
d5:15:e0:4a:b9:2a:3c:61:d0:29:b2:80:19:22:a0:e8:3e:04:
c5:aa:7a:97:2b:c1:47:d3:3c:2c:de:a6:57:d4:34:a7:c8:c6:
56:74:49:a5:bb:43:16:bb:87:03:f9:1d:5c:e2:a1:41:81:52:
45:6f:f5:a9:37:8e:b9:a7:6a:a6:9c:a4:76:50:b9:10:1d:cd:
1b:88:9c:ab:ad:ef:82:05:21:7e:61:7d:8b:e4:61:a1:9e:ef:
2a:c3:13:cd:3a:8b:3f:da:73:c4:4c:83:29:65:d8:08:05:4a:
f2:b8:29:60:17:e6:bd:ba:e7:54:ab:e2:6b:fc:e0:f2:23:40:
0d:a1:de:35:f0:4a:eb:9f:8b:9c:75:ae:03:21:ed:32:7c:c1:
68:c8:46:b3:9c:d0:d2:e4:a2:64:6c:07:5f:16:79:8c:5b:d9:
d6:32:a7:f1:db:9a:90:af:90:f1:83:5a:b8:25:ba:cc:3a:4b:
30:55:0a:2b:da:77:11:47:81:50:5f:74:3f:56:4b:08:14:1d:
35:f3:4c:8f:63:93:6e:c8:82:4a:fc:29:cd:93:a3:32:70:e5:
c3:69:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:53:40 2025 by rpki-client