Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: yLuaM0UAFDBLdR0OXthEGy9fnAUoElO6rUmogI+UJ54=
Subject key identifier: 84:D6:58:36:8B:30:92:E5:70:BC:94:4A:D3:24:F4:EE:5B:0E:A8:0B
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 0196AC55D2FB748274D3D09408A18C5168AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 20:00:27 +0000
Manifest this update: Wed 07 May 2025 20:00:27 +0000
Manifest next update: Thu 08 May 2025 20:00:27 +0000
Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: pTII5wYGGsoU5bwrZbkv/x5fWwtPfRzCPMBQedEZvyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:d2:fb:74:82:74:d3:d0:94:08:a1:8c:51:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: May 7 20:00:27 2025 GMT
Not After : May 8 20:00:27 2025 GMT
Subject: CN=84d658368b3092e570bc944ad324f4ee5b0ea80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:e5:cf:3c:17:df:cc:cb:02:52:d6:40:10:
58:76:6f:35:68:08:33:4a:cf:df:82:08:64:23:30:
90:1b:be:96:99:ac:59:e6:30:17:21:3c:d6:e2:95:
32:cc:ad:8e:95:de:cf:e6:80:c5:bf:bd:32:fb:0a:
f9:76:c8:85:7e:d0:23:68:48:35:48:34:bc:c3:83:
4d:15:da:7d:32:98:a1:5c:00:36:56:91:ac:02:7b:
24:e1:5b:81:a4:b0:1b:ce:85:8a:11:b6:1c:ba:5f:
5c:a1:dd:93:f3:1d:b6:4f:35:77:6b:12:d0:40:ed:
bf:45:ba:d7:ba:ea:aa:a1:33:b6:59:f6:0e:47:67:
ec:dc:79:80:2c:a0:b2:df:bd:1f:b6:b8:5e:99:ed:
3f:33:29:89:36:95:94:b1:c5:19:c7:60:75:c8:e6:
71:e9:e6:89:8a:bf:c0:37:94:af:d3:13:ba:1b:a1:
80:fc:29:7b:6f:94:68:c0:31:d1:e2:2d:7a:4a:a3:
4e:35:09:51:20:5f:ad:8a:29:b1:03:6b:0c:23:a3:
d7:69:53:0b:41:a8:26:33:e6:e3:0b:b4:8f:10:84:
0a:be:01:f0:06:55:9b:19:a8:42:cb:50:22:de:cc:
d3:6d:6b:30:ae:df:ba:17:6c:0b:53:e7:db:0e:e3:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:58:36:8B:30:92:E5:70:BC:94:4A:D3:24:F4:EE:5B:0E:A8:0B
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:de:6a:09:08:ae:3c:6b:a1:72:23:9b:20:63:b0:f5:6b:b2:
98:92:fe:22:fd:11:fb:34:51:e1:93:da:f9:79:ae:7e:46:ba:
9d:3a:44:d2:68:7d:b3:60:f1:98:cb:1e:2c:f3:75:65:f2:a6:
96:6c:bc:e6:13:14:73:a0:65:cd:ae:cb:dc:28:0b:0f:af:58:
6a:66:67:75:48:51:28:3f:9b:97:0c:84:e8:0b:f3:2b:d3:b7:
45:59:52:d2:3b:44:94:13:3d:e9:89:31:2c:ed:c6:89:54:61:
55:3e:7e:e1:e9:a6:cd:b2:d3:54:44:a3:33:5b:3f:8a:26:95:
1a:93:ed:77:ee:47:8e:b8:d1:5e:bd:2c:8c:4a:cb:51:c4:48:
8b:26:97:cc:f8:4c:29:65:0b:e8:e6:0a:98:4d:60:09:90:17:
5e:68:f1:97:6d:77:d8:3a:45:41:ea:68:2e:62:d6:af:8f:12:
da:4f:17:61:e5:4e:64:ea:98:7e:74:da:6d:14:86:d1:b2:c2:
07:11:9e:46:d2:b3:0a:81:fe:77:9b:b0:86:fc:c5:d6:a0:d6:
f5:86:c0:5d:b6:33:c0:ed:89:20:4a:75:3e:e7:c6:95:01:80:
cd:a5:a6:26:52:af:12:b7:ae:93:f6:a8:92:52:ba:34:d5:c8:
b6:de:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:17:50 2025 by rpki-client