Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: smekNLCJ468/w0E7ypOHpIPqTphK3qN8w7yYbGrKHZE=
Subject key identifier: 64:4A:F7:BB:1A:D9:8D:AB:7B:E5:27:6E:23:F5:45:59:9C:16:06:92
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 0196A98BABCBB7C43DB76A63B7CC4BD94D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 10D2
Signing time: Wed 07 May 2025 07:00:25 +0000
Manifest this update: Wed 07 May 2025 07:00:25 +0000
Manifest next update: Thu 08 May 2025 07:00:25 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: 7ERwV8rnZNnV5zMmZde1jfjm/R26KIDz5QnkRsDhj1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:ab:cb:b7:c4:3d:b7:6a:63:b7:cc:4b:d9:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: May 7 07:00:25 2025 GMT
Not After : May 8 07:00:25 2025 GMT
Subject: CN=644af7bb1ad98dab7be5276e23f545599c160692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:89:f3:02:cd:57:fc:13:8b:d7:cd:8b:33:
23:23:4e:19:38:7f:e7:00:a5:4a:d2:33:f0:21:30:
c1:74:73:b5:15:b1:bc:65:45:93:b1:ee:c6:9a:38:
0a:fa:f0:34:2a:27:60:88:ca:ab:2d:36:a3:0a:bf:
e8:cf:01:05:e4:39:d2:04:08:a3:dd:e9:c4:4b:b9:
cc:6b:ac:e0:c5:13:c6:0b:b7:8d:80:4a:84:08:ed:
8d:73:a6:3d:46:c4:58:73:85:64:f2:f7:9d:c0:3b:
97:12:25:6e:7a:e3:14:3d:78:2a:39:2e:d2:73:52:
49:03:cf:91:f8:60:f0:21:27:1f:ca:b3:42:9b:3c:
10:56:ee:56:8b:14:3b:f8:91:a7:82:45:63:59:a8:
5a:5e:3c:00:d5:d3:98:ad:98:20:ae:25:2c:6a:92:
53:b4:bd:a7:6e:32:45:bc:9b:15:ba:d9:d9:84:46:
94:5e:54:3f:0f:f8:2b:96:d8:9f:e9:68:a0:6b:64:
d4:a9:6c:47:e6:72:1d:50:53:83:34:81:0a:09:98:
71:6c:ce:ec:2d:29:b4:91:13:13:bc:b3:98:29:ed:
79:b3:72:4b:cd:bd:ee:59:27:37:bf:43:ba:6c:85:
27:22:f5:1d:4b:7e:b6:43:0b:35:24:bb:80:b5:c8:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:F7:BB:1A:D9:8D:AB:7B:E5:27:6E:23:F5:45:59:9C:16:06:92
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:6e:ee:92:68:2d:e3:00:a2:59:1d:cb:79:d2:de:0e:6b:
07:78:12:43:de:ab:24:50:54:e0:67:0b:96:55:d2:b9:88:6c:
59:57:73:7b:f6:73:f1:c9:64:bd:aa:e2:27:a8:85:43:00:8a:
d6:b7:16:a3:65:05:ce:aa:4e:98:17:04:4c:e0:4a:b9:8d:d4:
41:34:84:13:7b:b1:76:04:cd:f4:c6:99:c5:29:00:fa:2d:de:
89:61:b3:8c:82:0f:52:2d:58:5c:7b:56:9f:ec:58:94:4e:d3:
25:aa:91:31:ca:24:47:4e:74:ac:9e:b4:59:31:73:3a:13:4b:
d5:13:46:50:12:1b:6d:b0:ff:12:68:20:b2:05:59:02:7b:8f:
27:c6:6a:a6:9e:cb:c2:8c:bb:c7:69:33:13:92:3f:00:1f:5d:
a4:6c:83:c1:9e:fb:98:ed:bb:ee:8c:85:cb:9f:59:a1:60:21:
a8:07:04:9f:33:1a:b9:1a:59:f9:83:06:41:40:d0:8b:f1:e3:
19:83:3a:a7:24:25:df:e0:2f:76:42:2c:3b:5a:73:4d:92:8c:
d1:35:2f:d9:03:26:d5:d6:88:11:87:e9:59:86:08:d8:79:27:
d4:9e:9f:29:bf:59:cb:e8:55:7c:50:8c:12:60:d4:00:4a:14:
ec:b0:1d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:45:01 2025 by rpki-client