Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: OnupGJXs95pYkUIqa87ftxQFCIexWUtYoSJDQ7TD5zQ=
Subject key identifier: E1:95:B9:EB:49:0D:62:AF:63:92:61:BA:1F:3E:9A:65:68:5E:E0:7A
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019673E71445B098DA8954135D2B632CE995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 099D
Signing time: Sat 26 Apr 2025 21:00:45 +0000
Manifest this update: Sat 26 Apr 2025 21:00:45 +0000
Manifest next update: Sun 27 Apr 2025 21:00:45 +0000
Files and hashes: 1: etKj8JxSADxAtwhWdtAcvp8APJo.roa (hash: hbDx1XXs3wCIknS0MzRqrwmZihS636bz/OW9FAqx/a8=)
2: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: bYXAQlYNKOz2SBrTz1cljyzI6z6pucmC68l2meixw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:14:45:b0:98:da:89:54:13:5d:2b:63:2c:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Apr 26 21:00:45 2025 GMT
Not After : Apr 27 21:00:45 2025 GMT
Subject: CN=e195b9eb490d62af639261ba1f3e9a65685ee07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:67:7b:55:8f:4f:4e:fa:2e:ca:64:33:f9:b8:
a8:0c:6c:ab:b7:c3:a5:d2:a7:44:a1:f6:7d:bf:a9:
00:a8:1f:23:c7:a6:4d:94:67:41:90:40:82:5a:93:
3d:26:b8:6f:04:32:13:cd:72:ca:18:76:45:c0:53:
e4:0a:13:3f:39:92:ad:3d:4a:85:fe:f8:22:58:00:
4d:63:b6:e5:29:0a:e4:cb:0c:33:5b:2f:7b:b9:3c:
05:00:4f:da:ea:1b:db:c5:57:5b:4c:b1:db:0b:5d:
9b:1d:72:e8:51:bb:f2:a7:8f:8b:c5:53:aa:c6:a3:
40:5b:55:b3:00:91:8a:d5:b8:51:e4:78:a5:57:a4:
dc:ed:b2:66:ab:60:2d:d0:71:a6:cb:90:eb:34:01:
fa:53:e2:0e:5a:0b:46:5b:b5:31:2b:f3:8d:9b:4f:
e1:35:11:d1:3b:b4:7b:91:ec:3e:b1:6f:e2:d3:77:
ab:5c:40:cb:57:f2:75:fe:db:74:71:39:6d:59:62:
28:08:29:04:09:c0:bd:4c:db:b2:57:49:65:8d:7f:
83:6e:27:76:7b:41:75:bf:61:77:5d:f3:df:7a:da:
d4:2c:5f:75:cd:32:4a:05:b9:12:72:e0:bc:c7:f2:
c4:cf:5f:e7:25:0d:b1:d2:d4:22:1b:79:8e:64:2b:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:B9:EB:49:0D:62:AF:63:92:61:BA:1F:3E:9A:65:68:5E:E0:7A
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:56:4e:96:64:b9:db:ca:47:30:8c:5a:67:d1:06:dd:48:
bf:ac:79:26:d9:f3:62:e3:bb:e0:38:8f:13:c9:8a:16:c4:a9:
4c:e0:ad:6b:a2:d6:38:70:30:05:a2:5d:89:e5:9c:e1:26:90:
9c:06:41:54:32:76:9d:13:29:68:57:a3:6b:a2:83:ce:ef:14:
ad:b4:75:18:95:8f:fe:5c:a7:99:d5:fb:42:43:36:b7:9b:a8:
be:82:24:08:a3:27:c5:ed:ce:97:74:74:06:77:0d:e4:5a:e8:
7e:eb:a0:7d:95:81:3b:63:90:89:e2:7e:57:dd:a4:b4:0d:28:
82:cb:a3:72:3a:d2:5c:ee:3f:64:74:a2:1a:06:e2:e9:94:0f:
ab:35:dd:22:25:d8:6c:f7:30:6f:6a:50:90:f7:26:bf:1c:0d:
2c:2f:c0:a2:e8:a5:0b:48:ee:5e:20:c1:64:fd:04:95:ec:ae:
71:70:99:5d:ba:ba:4e:dc:3e:3d:41:bb:9f:a4:6c:8a:de:6f:
39:ed:a6:ae:98:16:a9:fb:f8:9d:e0:e8:38:14:5b:eb:5b:c4:
8f:bc:00:27:0a:00:df:68:66:30:ca:ca:49:c6:f8:cb:a5:98:
32:58:ce:1c:45:a8:25:65:e9:38:0c:a8:e6:03:41:3d:47:3d:
23:fb:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:40 2025 by rpki-client