Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: FAtqtmTH4yMHXekaknsEiDiJfewl+SdAIHEX5DToGcc=
Subject key identifier: 87:46:DD:8E:60:9B:A7:E9:44:21:83:8E:9C:AC:15:76:86:33:F3:8D
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 019675D521E061368E8722ECF33DAB3290C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0C9B
Signing time: Sun 27 Apr 2025 06:00:23 +0000
Manifest this update: Sun 27 Apr 2025 06:00:23 +0000
Manifest next update: Mon 28 Apr 2025 06:00:23 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: EEvo1QlGGTedXkcgdR7/uX6ZG5eLtNE5fPWVROL7s+4=)
2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:21:e0:61:36:8e:87:22:ec:f3:3d:ab:32:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Apr 27 06:00:23 2025 GMT
Not After : Apr 28 06:00:23 2025 GMT
Subject: CN=8746dd8e609ba7e94421838e9cac15768633f38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:52:42:1e:61:3c:2a:a9:84:95:17:be:0a:
7e:33:cf:d0:40:01:6c:3c:d2:e8:a8:2e:82:10:f3:
ea:af:91:4b:ab:c8:7d:6e:11:70:27:88:30:d8:05:
f7:b6:5d:04:ff:51:c8:fe:dc:41:56:9c:55:88:74:
56:ca:61:68:15:55:d1:ed:2d:7c:99:14:e9:ad:ea:
c5:84:ec:1e:a0:0c:01:87:44:e1:b4:31:4a:39:0c:
6f:88:d9:1b:6d:b0:34:80:7b:8f:18:b8:8f:2b:e3:
72:64:17:4f:f4:a8:86:24:4f:cc:b5:7a:23:c7:c9:
09:7d:d8:39:19:ce:2d:b0:19:0c:a5:0e:22:fb:16:
0d:c9:32:75:e2:0b:e9:4c:b3:4f:94:c5:b5:67:62:
94:49:be:e1:9e:d6:e2:34:b2:a2:78:db:e3:c8:d4:
45:14:5a:dd:ed:b2:ac:30:2f:e4:71:f9:64:3f:48:
b9:4c:cf:27:c2:05:6a:cd:d2:29:55:5b:93:28:c5:
00:d3:94:c4:44:96:ac:f7:91:0d:e1:cb:6e:4d:fc:
59:97:e5:55:fa:88:ff:cb:59:34:8d:0b:25:87:4d:
9c:f4:c0:21:3b:89:bf:d5:db:c0:ed:d3:64:6a:b9:
22:8e:b9:d9:d0:88:a9:d8:75:e7:78:4e:3d:0b:7a:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:DD:8E:60:9B:A7:E9:44:21:83:8E:9C:AC:15:76:86:33:F3:8D
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:5a:73:91:84:ae:dc:0a:f4:7d:bb:df:18:90:90:0f:fa:
d2:1c:ca:12:62:8b:d1:1c:f8:d5:73:8d:86:43:96:0c:af:d0:
83:c3:e6:42:a4:7f:e3:93:f5:d2:89:29:5a:27:f1:b3:17:5e:
f2:bc:b1:8a:a2:8a:2e:f3:6a:25:ec:a2:67:3c:b9:4d:29:d4:
63:6e:cf:b0:a4:83:51:71:df:96:2b:50:51:77:eb:c0:03:f4:
80:1e:e2:92:b0:49:90:04:89:46:be:1e:cf:09:b3:ef:cb:be:
2c:78:f0:16:90:75:f3:8a:34:0b:b4:34:ee:f2:88:f8:20:2f:
ac:d9:04:d9:46:1b:ef:60:8a:28:7f:02:f9:6e:a7:f3:d1:46:
1c:99:d9:48:1f:0e:ed:7d:3d:01:13:70:9c:bf:5e:4c:73:94:
e6:e5:e7:88:63:d9:09:93:e0:c1:ef:7c:41:97:10:e1:fb:3e:
6d:4e:2d:f8:81:c9:f4:c7:52:b2:47:2c:71:4e:f0:bc:b0:63:
9d:31:c1:8e:93:91:74:46:ba:4a:27:0e:45:db:2e:23:d7:10:
91:ec:21:cd:30:39:9a:eb:3a:22:6a:09:d5:6c:f5:71:11:bf:
99:00:bd:d4:a8:7c:02:ff:6a:29:47:07:3f:87:1b:5c:17:1a:
55:bd:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:23:58 2025 by rpki-client