Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: efJ7zclSfHLrXQ+WiEGpyIQlW8m/H3tngDUwvKbXTl0=
Subject key identifier: 55:96:BB:0A:BD:C7:A3:38:C7:CE:62:ED:A1:D3:60:30:40:9E:AD:DD
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 01969FAD2078AD48145B157943555634E8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0BC3
Signing time: Mon 05 May 2025 09:00:45 +0000
Manifest this update: Mon 05 May 2025 09:00:45 +0000
Manifest next update: Tue 06 May 2025 09:00:45 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: oVrtSq2GKhEb0MzkdTG0TTG1NM+Y1EHkJpYKUgwIcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:20:78:ad:48:14:5b:15:79:43:55:56:34:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: May 5 09:00:45 2025 GMT
Not After : May 6 09:00:45 2025 GMT
Subject: CN=5596bb0abdc7a338c7ce62eda1d36030409eaddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:00:fb:71:c2:b0:92:cf:f7:da:af:0f:ee:
a2:e4:db:93:b5:92:8c:70:6a:c5:f6:b3:10:55:14:
b7:30:0e:c5:85:70:e4:35:70:b3:41:53:c5:2f:bb:
0c:68:a9:e0:c9:91:7e:ba:01:c0:05:da:4b:ff:06:
68:65:15:89:77:b9:8e:f3:e5:de:86:01:f2:8a:d6:
6e:85:d8:ce:92:ff:42:ee:ce:34:62:79:c1:f8:05:
5c:14:46:a4:81:60:e1:b2:c5:a8:7a:14:74:b2:a1:
54:f6:83:02:ef:f2:b5:69:33:35:0d:49:2b:5a:f2:
ca:95:1f:3f:f0:cc:4c:5f:3a:fa:12:72:cc:a7:70:
4f:09:8f:ba:b5:d4:52:4b:6f:65:9c:1c:35:93:bb:
3e:b1:90:e8:35:f6:8d:0d:6e:d5:10:5b:58:97:06:
3a:5a:7f:7e:7d:c3:99:1b:82:71:99:39:61:89:8c:
2f:d0:a2:55:aa:e3:b6:08:5d:be:ca:9b:e2:78:b0:
97:5c:7a:73:24:aa:0e:9d:00:1e:5f:af:7e:4e:c9:
68:e2:19:3e:87:6d:a0:3d:71:a1:e5:d1:03:ab:93:
2d:68:15:f0:8a:f2:59:23:d0:dd:0a:70:ae:75:b3:
12:83:e3:c4:0f:05:14:9a:35:2a:cd:dd:ae:c8:65:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:BB:0A:BD:C7:A3:38:C7:CE:62:ED:A1:D3:60:30:40:9E:AD:DD
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:34:d9:c2:62:0c:e4:e4:1c:58:9f:55:4c:89:de:e1:c4:
ac:c5:c1:83:fe:0a:1b:30:36:73:43:0e:59:69:c9:6a:55:20:
72:12:85:1d:b4:35:25:e2:9c:12:af:70:d5:bb:1e:79:b7:7c:
e9:bf:ba:5c:75:89:9c:fc:6d:66:bc:c4:87:b1:89:29:9f:16:
77:65:68:4b:b2:6e:4d:aa:30:8f:01:6f:70:05:a2:97:53:db:
0a:af:09:aa:71:c3:35:c9:98:59:1e:29:33:50:13:e8:49:06:
aa:0b:f7:e6:e5:33:11:d5:51:49:ae:3f:c9:56:63:82:76:97:
a4:b4:d9:75:49:2f:c7:eb:6c:08:e6:c7:9d:b6:da:1a:50:43:
57:75:c2:41:8f:b9:4d:d5:ea:c8:07:b4:34:13:71:ae:1e:48:
48:ab:40:7a:44:05:5b:47:0c:d2:73:9b:1a:7c:3c:f8:fe:46:
3d:fb:f6:04:35:37:de:ac:9e:b1:60:34:64:5c:47:06:7c:33:
9d:1a:71:5f:db:9f:33:6e:e9:69:a6:e3:ae:63:0c:56:46:89:
1b:32:25:61:5a:e0:99:dd:a3:4c:f7:35:c1:5d:d4:ec:55:86:
ea:ec:d9:02:e1:d2:9a:9c:d7:10:74:be:11:49:6d:be:28:57:
76:4a:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:40:16 2025 by rpki-client