Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: 8F+mvTHQXLZgeHu94IB9Z3pdrIc/AlXYKXqAOTuhJV0=
Subject key identifier: E6:EB:E4:63:EE:BA:63:DE:40:BD:EE:09:0B:A9:A5:F8:2D:AE:9E:B9
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019674C2AB5568422DBE44F21228452AC868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:37 +0000
Manifest this update: Sun 27 Apr 2025 01:00:37 +0000
Manifest next update: Mon 28 Apr 2025 01:00:37 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: WkKxHD7hD9XvjnODGsuXhmzShStwqupdM3eDA/oveJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:ab:55:68:42:2d:be:44:f2:12:28:45:2a:c8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Apr 27 01:00:37 2025 GMT
Not After : Apr 28 01:00:37 2025 GMT
Subject: CN=e6ebe463eeba63de40bdee090ba9a5f82dae9eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:bd:52:c2:3d:49:0b:8a:28:0f:a4:24:f1:
51:de:0a:4d:a7:fd:e2:c2:be:ab:7d:84:b5:5a:76:
5f:40:49:f2:b7:b6:74:90:48:ec:8d:f1:f4:17:f3:
98:02:5f:21:52:91:cb:c8:f9:fc:88:2f:56:b2:1d:
d1:d3:4a:e4:94:65:fb:99:47:9a:7c:79:8e:02:37:
58:14:46:0b:86:40:37:df:b2:03:66:a3:39:51:df:
4c:95:3b:3e:78:d4:c1:c0:ad:b9:80:5a:13:40:08:
2f:4b:11:5d:c7:f3:88:39:d5:ac:c7:32:65:c6:26:
d7:2e:69:eb:51:97:ab:3e:14:45:27:45:a6:30:cc:
4f:23:21:91:9b:7a:c5:20:39:c4:08:3b:49:ce:2c:
cd:83:aa:4d:82:52:25:61:86:94:eb:05:9e:f0:d9:
b8:db:8c:74:1c:b0:1a:48:b8:55:09:3e:98:49:56:
d1:02:ec:aa:d6:ae:06:b9:1b:bf:7f:72:60:8f:03:
cf:65:c4:b0:a2:ce:e6:8a:5c:c8:8c:de:4c:e8:d2:
9e:47:c2:4d:f5:8a:03:f5:de:24:54:92:c5:18:92:
37:70:35:f1:89:d1:6e:35:fb:84:a6:75:7d:08:10:
c3:79:dd:f1:1e:c6:4c:f9:c6:1b:df:e0:b7:0c:fb:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EB:E4:63:EE:BA:63:DE:40:BD:EE:09:0B:A9:A5:F8:2D:AE:9E:B9
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:80:72:06:06:63:be:c6:dd:6d:36:72:cc:35:d6:4d:90:
65:88:6a:fc:6a:ac:33:1d:e8:3b:24:81:88:c8:fc:83:94:54:
9e:36:40:38:30:b7:54:b4:1c:de:db:e1:2c:f6:36:b4:41:f8:
1c:2b:80:99:9c:16:a2:b1:f2:eb:19:20:7c:21:29:42:06:f7:
bf:c6:9e:47:91:35:59:1a:d0:b6:50:eb:85:69:2f:a8:e6:c0:
10:cf:25:e2:46:5a:74:6a:e5:17:a1:75:2e:ff:49:cd:f3:9b:
3c:54:25:08:ec:16:dc:da:df:74:3a:00:9f:de:3b:c7:f7:d9:
a0:75:a2:88:d8:45:70:26:92:f3:12:09:53:08:e7:21:53:d8:
1a:e0:d6:af:a7:90:2b:39:e2:d0:4c:ca:0a:b1:9a:04:0e:4c:
9b:ad:4a:2b:c3:04:4a:ef:53:b6:a4:42:05:b9:92:28:83:be:
98:11:8e:1a:bd:b8:02:d9:49:79:ab:05:14:b8:aa:71:60:39:
3d:97:43:66:71:e0:52:28:78:39:9b:94:fc:ad:b3:0a:78:50:
23:10:d5:b7:82:58:1a:05:d8:04:3e:8a:c7:38:45:c1:09:c3:
84:4b:1d:c7:4e:c0:3e:f3:98:01:3b:4b:eb:3a:f1:1d:f5:4c:
d0:75:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:57 2025 by rpki-client