Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: 9i4uLdngxC/waJ+VBJ/9ldMkvmbaGYS/7HXIE/5uLKs=
Subject key identifier: DF:CE:8A:70:61:EB:8D:7C:1A:BD:F8:6A:45:55:78:B4:44:DE:1C:E5
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 0196854882FF4A32DC4CD379C257AE5D8ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 1129
Signing time: Wed 30 Apr 2025 06:00:43 +0000
Manifest this update: Wed 30 Apr 2025 06:00:43 +0000
Manifest next update: Thu 01 May 2025 06:00:43 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: HwZaeO6OoYU8eoRsZ7QGkFh1DD81IOjAIewcRi9rhts=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:82:ff:4a:32:dc:4c:d3:79:c2:57:ae:5d:8a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Apr 30 06:00:43 2025 GMT
Not After : May 1 06:00:43 2025 GMT
Subject: CN=dfce8a7061eb8d7c1abdf86a455578b444de1ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:53:7b:04:95:93:cd:56:1c:04:a8:2d:0c:
a6:b2:59:89:fa:cc:ef:47:ec:55:38:48:03:ba:e4:
1b:1e:e3:f1:2e:32:ef:9f:fb:5e:ea:1d:a1:73:09:
ae:08:6f:bc:ed:93:8d:1b:54:42:76:53:09:d3:a4:
f6:dc:de:a1:6e:b0:a3:7e:89:1b:34:23:71:05:62:
e4:00:02:88:0a:4d:e1:6f:32:ab:9e:fc:2b:55:64:
57:19:58:7f:bf:1c:eb:4f:9b:1d:5a:37:6f:fd:76:
fd:40:74:6e:f0:57:5b:2b:a1:35:f2:91:06:85:59:
76:fc:82:b4:70:93:40:b1:cd:79:01:1e:08:26:89:
8b:3f:97:c1:26:c3:c2:d1:4b:2c:11:26:7f:16:0c:
b5:22:fd:88:1b:dd:e3:85:10:82:6f:6e:0d:f4:b0:
ab:6d:22:1f:a9:b4:f3:80:5c:9a:d6:99:7d:f0:ed:
86:18:1c:7f:75:85:1b:6b:5b:22:27:70:72:5b:6d:
91:a4:41:e0:b0:fe:fe:a7:1c:54:4c:0f:0a:dd:0c:
ac:3e:17:56:d1:db:34:e0:b4:6a:8e:78:65:53:6f:
98:ad:2e:88:e9:ba:fc:61:6e:c9:5a:ed:a7:43:a3:
e0:98:87:e7:92:df:c9:20:e3:c5:1f:f2:d5:09:8d:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:8A:70:61:EB:8D:7C:1A:BD:F8:6A:45:55:78:B4:44:DE:1C:E5
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:6f:11:b6:cd:b8:88:6d:51:7c:e4:92:88:c2:51:12:be:
c6:4f:b3:68:83:b6:02:63:f0:f5:23:e3:d6:1e:7c:c9:50:f5:
93:f5:1c:ab:12:1e:3f:b2:95:e4:8b:ee:e1:fc:cf:ca:2e:0d:
8c:fd:eb:72:d8:20:0d:1c:31:ce:18:a4:2c:e9:cf:5b:b2:14:
52:f1:79:30:97:f7:59:91:22:56:c4:43:12:6b:94:59:c0:22:
73:16:23:db:8b:87:59:73:08:d7:1f:45:eb:9d:f0:0d:c3:58:
05:c5:39:88:51:72:1d:ab:e7:34:c4:df:52:ab:38:f4:5b:64:
a7:13:f7:4f:67:ce:bb:31:38:01:96:73:0c:ee:24:5a:0f:a8:
5a:99:9f:59:5a:07:92:ed:08:62:6e:ae:84:69:39:4b:76:d6:
53:4b:3f:32:4b:6d:32:5e:6b:2f:fa:f7:11:87:59:92:9d:b9:
bf:be:2a:aa:34:60:e4:a6:8c:0b:ac:70:53:56:1b:b5:68:30:
61:17:ab:66:9e:07:62:43:61:ad:3e:be:8c:be:8d:71:14:61:
3c:69:6b:e6:6f:ec:13:f6:4c:e5:8f:a6:69:1c:d6:89:6a:9b:
6d:f1:d2:56:29:cb:11:d8:4c:cf:59:dd:6f:3d:c3:76:17:ef:
89:16:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:54 2025 by rpki-client