Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: JTTKc0O24pI0pMCgqQPjSbwGpqkBuQhHw9QL3ICPN7M=
Subject key identifier: 29:BB:55:97:EC:C5:69:4E:A0:F9:F1:2E:EB:04:38:81:21:CE:C5:13
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 0196CBE100F33484114DE1FC2808D60E5F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 23:00:42 +0000
Manifest this update: Tue 13 May 2025 23:00:42 +0000
Manifest next update: Wed 14 May 2025 23:00:42 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: pAGl9ZABDuNB9qaY+jfKzOEpH+CHxEcpBpJJstl6zII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:00:f3:34:84:11:4d:e1:fc:28:08:d6:0e:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: May 13 23:00:42 2025 GMT
Not After : May 14 23:00:42 2025 GMT
Subject: CN=29bb5597ecc5694ea0f9f12eeb04388121cec513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:3c:d4:9f:3b:36:69:c0:15:75:62:fb:44:
f1:74:a0:a9:f6:5c:e8:b7:99:1f:cb:1b:75:ef:1d:
ff:2b:cf:64:c8:69:26:7b:2a:51:d6:fc:e8:91:c7:
f3:d7:47:b3:29:2a:94:37:2f:b8:ab:4a:49:22:2b:
00:be:be:5c:bc:4e:11:fc:cd:f2:4c:53:17:c6:3b:
b4:6b:d8:0a:4a:92:a6:0b:f2:62:20:49:57:f0:8c:
a1:73:6c:01:3d:5a:6f:5f:74:b5:6b:b0:c5:f1:60:
06:d4:f6:5f:a2:f2:7b:f9:0b:28:d5:f7:26:16:2a:
79:12:9a:6c:3e:6e:1a:8c:52:9c:df:3f:60:eb:a0:
56:a4:37:6c:c6:41:6c:c9:d0:43:69:f3:1b:ad:e6:
d8:fe:a7:b1:36:5e:83:fa:c9:c3:fe:dc:2e:d3:61:
94:b9:26:18:74:ba:76:1a:b0:a4:04:b1:74:d7:eb:
99:b4:51:4b:6d:5b:00:aa:2c:a7:f0:97:c6:22:78:
76:04:a0:15:55:f4:a7:bd:1e:99:5f:4c:66:7d:4d:
b0:e5:2d:27:db:eb:0b:62:7e:35:6c:ac:85:fa:43:
85:8e:a4:37:a2:2d:6c:1a:c0:6e:cd:c4:a8:96:cf:
5a:5f:28:cd:82:d8:6b:a8:57:10:16:a2:ed:65:78:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:55:97:EC:C5:69:4E:A0:F9:F1:2E:EB:04:38:81:21:CE:C5:13
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a0:38:f6:8b:d3:5e:9a:4f:93:5d:01:51:82:d0:57:9c:9d:
3f:85:27:81:60:7d:87:aa:4b:f9:05:b0:42:11:6b:29:1c:4e:
16:48:f3:6c:87:9a:1c:52:a3:c3:ab:d0:cf:b3:f1:e8:72:52:
2e:69:6e:54:ac:b7:b1:1f:21:8e:03:2a:6a:40:87:4e:36:ca:
7e:34:ef:2b:2b:e7:c9:15:11:75:ca:13:53:f2:f8:8a:d2:20:
f3:0d:ee:3b:ce:32:a7:7e:7f:6f:55:f7:1b:95:d8:6d:8c:8f:
a1:e4:ed:a3:ab:6c:c0:8e:3d:69:ff:b1:13:8a:cb:ce:63:49:
94:bd:54:91:49:12:19:ae:ff:aa:a9:60:f7:f7:b0:36:47:3f:
15:1f:64:a2:64:2f:99:ec:01:35:61:2c:df:be:9f:58:1d:af:
c1:4b:ed:8a:18:90:18:37:7c:18:7d:d3:c5:f1:d7:c2:d9:73:
6f:21:92:7b:8d:8c:90:e8:e6:cf:74:65:9e:1d:79:3f:f8:42:
7c:16:84:3e:29:60:fb:8d:06:0d:1c:28:7c:47:57:84:85:9d:
7d:38:ee:e2:dd:5a:74:9d:c1:ba:5e:16:71:65:4a:5f:65:6e:
5a:fd:ef:70:ce:1d:d5:13:14:f9:09:a2:e7:6c:11:e7:0d:e0:
d6:ac:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:03:14 2025 by rpki-client