Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: 8zza5099OJHze2fEVqFHOgO0aazZMu49Kfh+neE4TlY=
Subject key identifier: 94:16:67:71:77:50:6C:69:A9:6E:E0:0A:D8:07:F7:1C:04:CE:2B:D1
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0196B5C79BB73F34D2E3EE9CF50E2F1BF457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 16:01:19 +0000
Manifest this update: Fri 09 May 2025 16:01:19 +0000
Manifest next update: Sat 10 May 2025 16:01:19 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: FAQZPkuOTM6Hm2x0ZmLk71WpuuS0UjmNWE/OutZo9gs=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:9b:b7:3f:34:d2:e3:ee:9c:f5:0e:2f:1b:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: May 9 16:01:19 2025 GMT
Not After : May 10 16:01:19 2025 GMT
Subject: CN=9416677177506c69a96ee00ad807f71c04ce2bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:5c:66:83:6e:ba:0f:61:a6:50:e1:ad:c2:
10:d0:3a:54:61:cd:88:90:65:34:b2:6e:74:92:db:
30:f9:a0:5f:64:eb:d4:79:48:77:2a:ec:27:e9:30:
bb:e5:4a:e0:d5:8f:4b:df:6e:ee:57:a0:c7:4b:7b:
1f:cd:b9:73:ff:15:5b:41:fc:3e:92:b3:a1:61:94:
f0:38:47:d8:38:1e:31:6c:a6:45:d9:4b:e6:a3:8c:
af:9c:99:06:91:3b:fe:a1:ac:34:92:b3:a3:04:20:
7a:7d:33:50:dc:71:d0:66:da:c3:0a:49:83:36:d9:
de:a9:d7:48:30:e9:ec:43:26:47:eb:ef:19:cd:ee:
41:0e:5a:3b:ea:a9:55:db:b7:cf:e2:7d:ae:3a:7b:
26:e7:d6:f4:77:45:f6:61:c3:ba:85:9d:2f:cc:69:
91:f0:12:c9:9b:b4:a2:3c:6a:11:79:51:fd:71:2e:
81:4e:f2:2e:1d:0f:62:6e:2d:29:80:5d:18:c0:e1:
18:6f:39:93:03:a9:55:f8:bd:b5:ec:81:f0:04:18:
be:55:3d:68:6b:8e:b6:e2:9d:53:56:4d:49:c5:19:
29:77:60:29:ff:19:b2:3b:c5:88:7a:20:30:02:21:
04:fd:c7:ed:0a:fa:0f:88:ee:59:ce:19:ec:7d:28:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:16:67:71:77:50:6C:69:A9:6E:E0:0A:D8:07:F7:1C:04:CE:2B:D1
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b0:04:f8:47:73:50:83:4b:12:a4:b0:70:12:68:3d:c5:89:
e4:69:10:73:55:cd:85:df:e3:1b:7e:11:85:aa:0a:db:2f:16:
bc:59:96:cf:25:9f:95:1c:b5:0f:22:ae:4c:02:4d:29:8d:89:
1b:77:71:b1:4e:b8:69:90:5b:97:5d:cf:7f:b3:ec:7c:2d:97:
7d:b3:95:57:93:a1:d0:2e:10:1c:16:84:66:63:07:3a:e0:31:
ca:a7:1a:0c:35:07:93:41:b5:30:f5:27:5b:e3:5f:ed:42:b7:
0a:36:88:a3:57:ce:21:01:35:5f:7a:be:55:33:f5:d9:cf:5e:
18:5d:9a:ff:31:98:82:5d:9e:ee:9b:cd:a3:09:c1:f9:6b:51:
fb:e5:12:9f:e1:b0:dc:26:6f:4c:6c:ca:f8:04:4a:82:e8:15:
18:c4:4a:74:4b:6e:ad:be:be:1f:c4:e8:72:c2:1e:60:23:10:
20:b2:72:86:c0:79:c5:50:74:ce:5b:fa:f0:05:a9:ba:1c:da:
22:c4:d9:08:2f:1f:fb:7e:86:48:81:88:92:a7:f4:59:38:06:
2d:66:2e:b2:25:3c:0b:7c:fb:74:03:57:b2:68:57:16:f0:d4:
85:d8:49:8d:53:a2:94:ca:c3:8e:12:fb:b0:02:e4:23:fb:78:
94:a6:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:43:10 2025 by rpki-client