Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: U6FJ2a69DYdnjNc/EASfzsvGjqDFT4uemXUB8sEAid8=
Subject key identifier: DF:D7:EA:E4:08:7E:4F:C1:75:39:F9:56:EF:DF:AE:13:BD:11:59:02
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 0196B7474E076159099E3731DE867885F7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 12A2
Signing time: Fri 09 May 2025 23:00:25 +0000
Manifest this update: Fri 09 May 2025 23:00:25 +0000
Manifest next update: Sat 10 May 2025 23:00:25 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: +zxoyaEZ+iE0oEyQM/v3iP56wIpxad2KF0Bfic2CSpQ=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:4e:07:61:59:09:9e:37:31:de:86:78:85:f7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: May 9 23:00:25 2025 GMT
Not After : May 10 23:00:25 2025 GMT
Subject: CN=dfd7eae4087e4fc17539f956efdfae13bd115902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:44:bc:ed:54:ea:a1:8c:94:c4:21:f7:82:
40:ea:6d:f9:67:87:2a:bb:cc:84:1d:fc:52:84:89:
26:e1:15:ec:06:4d:9d:8c:ac:5d:4d:83:67:39:b6:
48:c1:56:96:43:82:af:5f:39:45:5b:ab:ea:52:ee:
c0:15:ab:b6:d4:e0:a1:85:da:22:23:f7:4a:00:55:
12:21:8e:21:28:20:45:12:98:60:1a:58:d0:ee:74:
5c:6c:db:01:3d:28:a3:28:31:ec:65:d5:7c:4f:45:
65:90:fe:18:9a:44:b0:cc:49:33:e5:21:2f:b2:47:
0e:99:b8:a2:ec:bf:9f:56:2e:b4:1f:13:84:53:b1:
8f:c1:17:e8:1a:da:66:c2:a5:91:e8:44:2c:2a:91:
fe:7a:eb:1b:a8:11:a8:9f:c3:62:63:ca:fc:30:a6:
ee:1b:14:2b:d3:27:2c:17:c9:e7:20:91:72:d5:cb:
41:fe:1b:6c:5d:65:62:da:47:ad:e1:2b:74:f2:cd:
60:8a:b1:1b:11:81:d8:d8:1b:62:ad:0b:e9:67:23:
1c:a7:82:3c:36:a6:5d:19:92:13:df:20:f4:cd:c5:
0f:90:61:22:89:1d:13:d3:8c:33:a7:98:45:90:26:
7b:0d:1c:ac:6e:e0:81:2b:af:14:36:45:a8:e0:0f:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:EA:E4:08:7E:4F:C1:75:39:F9:56:EF:DF:AE:13:BD:11:59:02
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:6c:ce:c8:66:3d:d9:9c:1b:0c:da:ab:2d:f1:93:98:17:
9d:b2:30:73:ed:66:cf:16:79:49:df:85:36:b4:15:e5:6d:62:
7b:09:e0:22:a8:85:2a:8b:2b:25:4a:c6:58:86:55:04:05:d4:
e2:8f:0b:3f:33:96:c5:72:63:4a:cc:94:d4:14:9a:77:8a:a3:
49:9f:ae:28:2c:5f:1b:bb:b8:b5:66:66:e4:5c:8c:dd:80:02:
44:d3:71:65:ea:95:79:3d:d3:1d:f2:13:d2:b8:63:de:b8:c6:
49:d1:fc:09:8d:c1:b7:20:7c:1d:95:c3:3a:97:8e:c4:53:e0:
84:cd:db:93:67:98:bf:50:95:5a:f3:6c:38:b6:1d:07:c7:21:
27:b5:11:ea:c0:87:88:70:d8:ab:6e:2d:82:27:c6:a7:53:37:
44:6d:07:fe:96:96:74:d1:22:6d:3a:70:3e:a3:c5:5f:4c:6a:
7a:fe:b4:05:40:1a:3a:1f:f2:d7:5f:3d:2a:71:0c:9b:12:e2:
ae:c5:f1:83:c8:f7:14:ae:3b:fe:92:27:0d:35:3a:27:2d:df:
f9:10:df:98:b9:3e:af:b3:5a:4b:92:70:e2:71:55:85:d5:ea:
c3:66:b3:60:ab:a4:c7:9f:3e:20:ae:32:50:13:2b:cf:c1:da:
e2:80:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:46:02 2025 by rpki-client