Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: s22h6AXtFJvHaCJCLwRQQhcYnr+pPP06zzGZ3l+fens=
Subject key identifier: C5:5D:AE:7F:3E:01:C9:17:36:20:15:AF:6E:F0:FC:26:A1:2C:C8:11
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 019675674F0024710EB0C97B06B1858D8E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1216
Signing time: Sun 27 Apr 2025 04:00:26 +0000
Manifest this update: Sun 27 Apr 2025 04:00:26 +0000
Manifest next update: Mon 28 Apr 2025 04:00:26 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: 8qDXwkA2AjirMcuhhw2aqZnh0gl2XgHVv2opl6AqaQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:4f:00:24:71:0e:b0:c9:7b:06:b1:85:8d:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Apr 27 04:00:26 2025 GMT
Not After : Apr 28 04:00:26 2025 GMT
Subject: CN=c55dae7f3e01c917362015af6ef0fc26a12cc811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:93:86:16:88:d2:3d:54:96:99:0d:5d:c3:
75:4b:b2:13:9b:20:4c:41:0c:c8:e4:4b:aa:f8:c4:
08:02:bd:d1:ae:1a:cd:3a:78:ed:9f:3c:93:2e:f6:
bd:3b:d7:95:52:e7:ff:c0:19:53:70:49:f2:90:83:
ad:8d:5a:89:a1:29:f7:ea:44:de:87:3d:93:85:68:
fc:b7:68:54:4d:38:bb:47:70:43:cd:84:ad:42:64:
ac:7e:18:ef:04:da:3c:14:7e:94:8e:fd:88:86:91:
5f:d6:b1:5b:d6:15:a1:ff:1b:83:6d:dd:b8:ce:d7:
7a:b1:40:27:4d:48:02:a8:9c:7c:29:33:d1:92:2b:
07:ea:7b:3c:20:2e:cc:04:18:c0:f5:73:dd:a6:9b:
e4:1b:d8:ce:66:1c:bf:76:a5:9c:09:d5:77:51:70:
c8:fe:83:d2:b7:bc:1f:14:ce:d7:ff:50:ac:47:b7:
7f:6b:55:e5:d4:12:68:f6:0c:4e:60:77:16:e5:cc:
9f:7e:2e:51:17:87:39:dd:d0:82:d5:5c:78:00:48:
a4:53:cc:7c:ed:45:58:ec:ec:08:5b:fa:3c:10:c8:
f2:6c:a2:62:68:af:71:86:48:c9:95:04:08:98:c8:
26:8b:99:9d:95:ed:dd:79:4e:60:71:f5:0f:51:dd:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:AE:7F:3E:01:C9:17:36:20:15:AF:6E:F0:FC:26:A1:2C:C8:11
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:bc:e8:95:74:25:68:ec:7e:0e:f7:0f:1a:a8:fd:f1:06:
10:ec:25:26:79:c4:13:f3:eb:bd:31:86:25:80:1d:88:5b:ed:
59:8d:20:ff:0e:36:78:3e:e5:af:e9:a8:4d:44:36:52:46:d6:
34:a6:7b:38:bf:d7:c8:9f:c6:3d:02:d0:0e:b6:36:4b:a0:7e:
14:bd:1f:3e:3a:f5:53:0b:e8:2d:eb:cc:6a:af:26:e0:f7:dd:
90:cd:c1:f6:c4:af:11:c8:f6:f1:52:a7:77:7f:a6:aa:a4:39:
9c:d1:dd:31:4d:4e:d7:39:ad:09:b4:e9:3b:ed:ab:51:3a:f0:
d4:99:89:d7:39:3e:8f:a6:fb:26:67:f6:d9:8c:50:ad:0e:ac:
fc:6f:75:b7:a1:73:1c:c5:2f:59:f2:d5:3b:27:d8:61:bf:21:
f5:f9:9a:e2:dc:0a:86:d9:53:4d:15:8d:48:82:46:c0:4e:3e:
0a:ac:22:0e:36:00:58:9d:4c:1d:76:ab:21:ab:72:1b:0f:ef:
fd:1e:15:ad:d9:db:11:29:ce:9c:a8:ba:b9:20:32:ad:5f:8a:
27:bb:ef:90:fe:ff:ad:08:0d:b7:af:d3:c6:11:bd:8b:e3:5a:
22:0a:ce:38:9b:9b:98:ee:81:38:15:81:59:a3:18:e0:92:d6:
d5:cd:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:18 2025 by rpki-client