Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: /H6wKuSTRVmVyJOykllg7UqfUaXimC2RBITCQlUvtEI=
Subject key identifier: 2A:C0:49:B9:76:7C:34:B9:D5:29:C1:7E:91:E5:EE:DC:70:14:0D:F5
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 0196722F87B7897D11EED7270281660710F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0BC4
Signing time: Sat 26 Apr 2025 13:00:39 +0000
Manifest this update: Sat 26 Apr 2025 13:00:39 +0000
Manifest next update: Sun 27 Apr 2025 13:00:39 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: qSFlmt51O7R+9lGpDkotewyHtuezf3JvygxaFbFbo3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:87:b7:89:7d:11:ee:d7:27:02:81:66:07:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Apr 26 13:00:39 2025 GMT
Not After : Apr 27 13:00:39 2025 GMT
Subject: CN=2ac049b9767c34b9d529c17e91e5eedc70140df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:0e:4f:fc:93:01:4c:85:d2:ed:f9:0a:eb:
00:b1:37:c0:f7:66:76:c4:a9:a1:77:c9:c4:b1:36:
09:01:48:2a:3f:11:35:54:90:54:bd:9d:1c:9c:5c:
c2:4e:f7:06:18:d4:9d:44:a9:fa:a0:a0:b6:b7:e1:
07:d0:d3:9f:be:b3:2c:1e:87:b0:97:a7:4a:e2:9f:
c5:9a:e8:17:e1:a6:22:dd:99:ee:dd:53:2a:1d:00:
cf:83:36:da:f0:ea:6d:79:a9:1f:07:a3:71:cf:2a:
c5:cc:b4:27:16:00:d1:68:78:e6:c9:2a:71:ea:9e:
93:98:1c:a5:46:6c:08:25:68:7b:0e:86:d0:6e:27:
09:77:52:12:89:75:1f:0c:a2:c2:e3:24:e6:02:9c:
8d:d6:72:63:b9:b6:02:e4:a3:17:d1:e9:57:de:e4:
cf:b1:79:41:2e:31:0c:2e:bc:08:3d:30:e1:a3:d8:
9a:a7:e2:6e:80:8c:9d:59:f6:9a:9c:f7:da:0f:d1:
a1:86:df:3a:5e:40:79:ad:be:e5:d0:3b:8f:95:1a:
4f:5d:f4:c1:af:55:18:f1:27:2e:26:f7:a6:42:be:
7e:1c:bd:00:54:6a:74:a9:00:76:80:5f:34:dd:d8:
75:ed:5e:77:b8:f4:36:a0:29:3b:1b:00:d3:d5:16:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:49:B9:76:7C:34:B9:D5:29:C1:7E:91:E5:EE:DC:70:14:0D:F5
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:53:ec:4d:5f:49:4f:04:2f:db:53:2c:a4:a7:ff:7b:62:
8f:01:bb:10:93:ca:c0:49:64:20:69:39:4a:a1:50:dd:63:a1:
30:72:b2:ca:55:f1:65:3f:a6:5e:04:b5:99:fc:5c:03:2f:9e:
f0:10:00:88:62:c2:d9:df:b5:03:9a:70:51:f7:ca:64:33:cb:
2b:27:2d:28:8b:ab:c8:07:4b:eb:27:84:b4:57:d2:7a:04:a2:
8e:46:67:ba:2a:a4:50:4f:39:e1:96:7f:8a:42:f0:aa:09:14:
3c:f2:33:fc:a4:4e:3b:04:62:dc:bc:79:58:d0:ce:1a:d4:49:
da:83:12:55:8d:a7:9a:61:28:cc:4c:5c:59:c4:7c:75:c3:df:
e2:84:6c:f7:2a:00:c1:4e:e4:55:e7:18:47:05:b0:72:36:d2:
d2:fd:6e:f3:0d:d6:e7:da:a4:4b:58:3f:02:53:75:32:2d:fa:
7c:f4:78:da:95:d3:50:c5:f6:da:96:74:8d:e2:36:c2:a9:fe:
e8:39:ad:17:d6:5a:4b:0d:8a:0f:ee:d3:e1:12:8f:96:20:68:
c9:e0:9c:d3:87:5b:67:42:0b:53:38:17:b0:52:5d:01:fe:52:
54:d8:3c:fc:c4:53:4e:c6:a2:d8:b2:4c:78:01:1d:97:bf:c2:
9e:10:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:55:01 2025 by rpki-client