Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: zgoQLblMZY0yZ6+yICn78Lzn33V/2OU0g/sZLwTm8wA=
Subject key identifier: A4:61:45:2A:21:78:B0:DD:F3:4A:7B:E1:91:EA:71:A8:1F:B2:45:02
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 0196BBFFD2F4FA4D5472BD19D94D43D35B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 1409
Signing time: Sat 10 May 2025 21:00:27 +0000
Manifest this update: Sat 10 May 2025 21:00:27 +0000
Manifest next update: Sun 11 May 2025 21:00:27 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: KTk43nVuAR+1n9X+f5pyT91TNvkg3g3H4oqNIahpXe4=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:d2:f4:fa:4d:54:72:bd:19:d9:4d:43:d3:5b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: May 10 21:00:27 2025 GMT
Not After : May 11 21:00:27 2025 GMT
Subject: CN=a461452a2178b0ddf34a7be191ea71a81fb24502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:80:c9:8d:f0:ee:84:70:58:d8:1c:ee:c3:
57:67:49:b5:42:f4:6c:24:84:b3:c1:e6:76:34:d5:
45:fd:f9:ec:84:12:0b:05:4b:d0:1a:91:30:9b:e0:
35:2c:32:97:26:75:49:a5:b5:1f:cb:80:72:1c:95:
1e:d7:26:51:75:c4:d5:7c:95:eb:17:2b:84:76:1d:
16:3b:d2:53:c3:b7:49:85:3f:ba:a1:9f:e6:93:51:
ac:c5:cc:63:c0:31:57:0f:8a:a7:a4:3d:6d:3f:1e:
b3:fb:37:84:8d:83:4c:0e:f1:a4:a2:75:77:02:43:
6f:31:6f:18:c4:53:cf:d1:6d:dd:47:19:c7:65:ff:
18:3b:10:5f:f8:bb:36:4c:75:7d:99:81:16:71:a4:
6e:35:0b:df:e6:c7:01:db:3d:c2:80:10:f3:4a:d3:
bc:05:46:c2:b6:4c:b6:37:48:48:9c:6f:b2:58:50:
73:d4:e2:95:1e:a3:e4:dc:0a:04:8f:d4:23:44:f5:
50:6b:98:70:6b:c1:00:c0:3a:a9:7d:ce:e0:ae:1a:
df:da:98:71:97:f2:6b:a6:8d:ba:17:20:f6:fa:dc:
7b:84:28:a3:44:da:8d:40:72:0d:45:69:ff:34:3b:
59:7e:00:0e:e6:c9:84:20:84:10:dd:37:5e:36:81:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:45:2A:21:78:B0:DD:F3:4A:7B:E1:91:EA:71:A8:1F:B2:45:02
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:b0:30:ad:b9:98:9f:13:c5:c5:ab:e5:a2:02:a9:69:6e:
2b:f8:5d:7a:ce:78:59:4f:fe:d7:5c:f9:8d:af:06:ac:ad:dc:
3c:5b:75:5d:99:d4:3a:05:a2:af:ac:a3:ec:42:35:d6:56:ef:
23:64:e0:ad:4b:3a:e8:6e:91:e9:6a:f9:e3:49:6a:43:53:0d:
7a:26:ca:31:b6:a9:97:c0:f1:b8:96:7a:62:b4:50:af:ed:80:
43:71:32:ec:e9:ab:eb:17:51:a0:b5:35:fc:58:79:d4:ad:72:
16:5a:40:c2:26:29:e2:21:b0:8d:4b:a6:eb:c0:0d:ab:37:c5:
2c:e6:77:76:00:74:66:0e:61:45:d7:9a:27:c8:fb:f9:f7:86:
c3:e4:f1:5e:d7:f9:f0:8b:49:97:c6:af:7d:18:be:54:cb:11:
4d:ac:6d:b9:3d:61:df:94:ac:9d:59:e2:84:c3:25:29:12:b5:
1d:aa:3a:96:bd:9e:f8:8b:5f:7f:0f:24:ea:e4:36:48:36:f7:
89:96:b7:10:49:b9:ca:12:75:c9:9a:71:fe:49:67:90:90:2c:
75:e3:64:c2:98:0f:0e:04:b0:26:dd:96:50:91:e7:21:7f:64:
db:88:52:41:e8:96:13:06:77:11:d1:97:84:d1:bb:e2:08:1b:
ec:0e:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:34:24 2025 by rpki-client