Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: c3dBaN+dt6Z5JLmDith0BUlXs13NulMMyE5nIJ1OeOw=
Subject key identifier: 8A:52:D4:A4:F1:61:C2:2A:48:D1:02:69:9D:7C:0D:74:45:24:8A:3F
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 0196C796BF8C1CA13064D5631972D12852DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0DA7
Signing time: Tue 13 May 2025 03:01:07 +0000
Manifest this update: Tue 13 May 2025 03:01:07 +0000
Manifest next update: Wed 14 May 2025 03:01:07 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: IzlCswnnhKHROaBvHN7EHwLEWPF4RzkRMkxBe2zWyRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:bf:8c:1c:a1:30:64:d5:63:19:72:d1:28:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: May 13 03:01:07 2025 GMT
Not After : May 14 03:01:07 2025 GMT
Subject: CN=8a52d4a4f161c22a48d102699d7c0d7445248a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:98:b1:7c:a2:ee:6a:d2:73:d5:6a:f0:a4:
d2:b7:b4:f3:bc:83:4f:46:c5:a7:01:ab:0b:17:78:
00:ce:14:d0:53:b3:e2:ac:e4:9d:6b:77:d7:29:20:
9f:75:a0:87:3d:e1:9d:5e:b8:79:cf:9e:f0:4c:85:
e1:d8:03:ad:82:16:d1:91:26:61:a7:6b:4e:e3:4d:
fb:d2:5b:d9:8a:29:9d:70:f4:44:8f:7c:ca:8c:1c:
79:2e:03:97:01:03:93:7a:8a:65:a6:05:f4:01:31:
e2:f8:76:d3:70:a9:aa:80:68:84:fa:9b:fb:02:08:
24:60:2e:80:ed:75:4b:af:07:c5:9d:cc:c5:6c:c0:
fa:37:8c:f0:9d:ac:5c:72:25:5e:a8:c8:39:5d:47:
06:97:0d:92:67:d3:a4:e7:01:fb:f8:25:3b:3b:35:
29:7a:b8:37:8b:3d:13:50:03:4a:b6:31:7f:a9:b8:
cb:ca:8c:7c:61:36:1e:54:35:d3:01:f7:dd:84:e9:
fd:17:c8:9e:d6:2f:bc:82:54:61:5c:0c:e8:f3:fd:
da:98:a4:fd:a2:57:57:34:92:88:ff:fb:b9:b3:bd:
37:11:0b:30:8b:33:3a:4f:64:50:5e:2a:fa:8a:2e:
56:27:0e:14:62:d6:4c:c5:a3:e3:e3:d4:97:e8:2d:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:D4:A4:F1:61:C2:2A:48:D1:02:69:9D:7C:0D:74:45:24:8A:3F
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:3e:14:97:f0:06:ce:09:e5:85:f7:3e:6a:f3:ef:31:f3:d3:
ea:d8:e7:d5:e0:51:2e:e4:27:0b:49:f3:52:73:f4:31:38:39:
f8:38:07:2f:9e:02:cd:f5:eb:f7:55:96:25:3e:aa:e6:2e:df:
5e:b1:46:9f:d5:d5:ed:5e:55:ed:8d:35:49:04:a5:2a:4b:b9:
94:25:a2:97:3a:f7:b5:69:55:70:ba:1b:52:a5:d6:f9:8e:d4:
f7:6e:fa:15:2b:55:25:d0:9c:6e:2f:41:1e:78:02:d5:ce:7d:
fb:58:d7:a9:46:82:f3:fc:bd:6a:ac:0a:73:1a:47:e1:12:a2:
9f:48:93:8f:78:d7:71:0c:f6:86:20:0d:ee:ff:2f:95:1f:fa:
af:2b:86:fc:f7:00:a4:8d:4c:97:92:93:92:a0:24:e6:19:a5:
4b:51:13:8e:80:21:2d:b7:b9:59:e0:67:97:44:48:6b:d9:cf:
c8:b2:c1:1b:73:49:d9:85:67:cd:2f:c9:28:b1:c4:d8:ca:29:
e3:f0:86:cb:1a:f7:11:9d:07:83:8a:ac:7b:13:1a:12:3f:07:
50:80:f0:40:fb:7b:95:04:62:c7:4e:71:4b:38:fa:a2:1c:e9:
c6:6b:a1:5c:61:fa:1f:9b:ed:6c:53:44:16:16:f5:40:56:ee:
8f:00:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:00:26 2025 by rpki-client