Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: 2HiRJslmGd2H1IDLMxXUyH7G/JrGX/iKF4uXBRgVTC8=
Subject key identifier: 9D:7C:1C:4C:4F:55:8C:79:16:4D:80:68:4D:47:C9:17:9F:63:28:84
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 0196797B506D9B8BB553B4F39715E13ED0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 23:00:46 +0000
Manifest this update: Sun 27 Apr 2025 23:00:46 +0000
Manifest next update: Mon 28 Apr 2025 23:00:46 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: JTJmz6aX+K60gObkanpMLOlRAcDhHoyvajuVVGN4uMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:50:6d:9b:8b:b5:53:b4:f3:97:15:e1:3e:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Apr 27 23:00:46 2025 GMT
Not After : Apr 28 23:00:46 2025 GMT
Subject: CN=9d7c1c4c4f558c79164d80684d47c9179f632884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:53:13:1c:26:bd:03:a4:75:ca:18:86:72:
4b:cd:15:24:e8:29:8d:ff:44:af:c5:1f:93:97:05:
74:7b:ab:c6:39:70:12:56:a9:1c:8a:16:a5:b0:6a:
89:7a:9b:de:c5:95:3c:27:ef:d3:f3:b7:00:dc:7d:
9f:ed:e6:71:8b:6d:be:4d:df:8b:4a:f1:34:57:cc:
54:11:f4:cc:5e:ff:78:40:2a:be:75:dd:9b:7b:87:
52:c3:98:a8:d2:92:ae:09:22:38:6b:88:94:1a:1c:
9c:88:23:3a:10:8b:06:65:21:a4:5f:90:43:01:06:
f3:d9:de:1c:13:a6:a0:e0:5a:90:d5:50:60:60:bd:
bf:bc:6a:52:29:25:fa:56:72:b8:34:39:00:7e:98:
64:6c:08:04:80:ec:de:cd:53:65:c3:b0:00:8b:38:
35:0a:86:76:f4:c3:c2:34:36:49:b0:f7:cc:cf:da:
e3:5c:12:8a:f7:70:2d:0f:cd:ab:7e:21:2c:1d:a2:
5f:c8:6e:10:ef:48:ce:80:e5:31:9a:eb:0e:9d:45:
4f:0d:d5:39:94:95:9f:e6:da:30:dd:ce:da:86:0d:
71:d1:72:28:67:c0:32:44:61:9c:1f:3c:39:66:10:
ac:7a:b8:d8:e8:0c:ce:2c:7f:c5:4b:ce:e1:52:0b:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:1C:4C:4F:55:8C:79:16:4D:80:68:4D:47:C9:17:9F:63:28:84
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:55:72:a8:47:85:54:5e:99:fd:12:2a:d7:e0:ba:98:21:b8:
cd:71:6a:2a:52:b4:e5:55:91:78:f8:d2:ab:45:36:59:e1:e6:
7c:19:0c:da:a7:6b:5a:e1:2c:d1:c7:fb:ad:ad:1f:89:e5:c2:
e4:9d:09:5a:1c:2f:4e:8b:37:6c:e7:8a:c9:bc:00:34:9d:48:
f7:65:53:cf:65:34:34:c6:d9:95:77:ac:fb:a2:20:db:ea:c2:
54:e9:b7:ce:ea:23:98:74:85:2f:fb:57:ce:70:39:30:a1:5c:
93:1d:ae:b0:6e:f4:99:1a:d6:44:01:74:14:25:11:ac:bc:fe:
56:bd:36:87:7d:45:6b:46:de:7c:b0:44:18:f5:6a:04:0b:11:
fc:b4:a0:72:73:84:83:51:2b:cc:9a:d4:35:e3:6a:ab:29:33:
d5:16:34:70:6e:3a:44:92:48:f9:ab:8c:9f:30:57:ce:29:63:
fd:52:ca:b2:79:c2:7f:b0:51:a8:a3:84:dd:3b:ce:cb:90:d4:
4b:5e:8e:1b:40:1e:97:3a:9a:57:81:d7:ed:fe:a2:fe:f3:5d:
5f:45:3f:e1:f6:c4:b7:e5:ba:54:70:3e:4c:97:0d:8a:5d:1e:
0c:97:8e:d9:83:d0:d5:aa:30:d6:ab:b0:92:a4:f7:77:9a:e3:
70:fa:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:14:29 2025 by rpki-client