Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: JEkEt1L/4KpYHbw9iCsR/WCz6dT7a0ZSwpfawfyxxZ4=
Subject key identifier: 18:02:3D:65:01:1E:07:64:C9:A7:8A:89:A6:F5:E9:AB:9A:1D:A7:C4
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0196767A94CEE05AE5701D2E22D9ED9DCFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0CBD
Signing time: Sun 27 Apr 2025 09:01:06 +0000
Manifest this update: Sun 27 Apr 2025 09:01:06 +0000
Manifest next update: Mon 28 Apr 2025 09:01:06 +0000
Files and hashes: 1: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Z12dXmzqhq75uMnZOGN46vPYJf+iR+RU5oFZoxuNLWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:94:ce:e0:5a:e5:70:1d:2e:22:d9:ed:9d:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Apr 27 09:01:06 2025 GMT
Not After : Apr 28 09:01:06 2025 GMT
Subject: CN=18023d65011e0764c9a78a89a6f5e9ab9a1da7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:c1:bf:2d:c6:cf:1a:37:60:50:fd:f4:30:
d0:f7:be:f4:ca:52:8d:42:cb:68:e1:3c:8c:61:0e:
2b:11:f0:cc:4f:f3:8d:77:41:33:60:0f:7b:99:a2:
ac:20:3c:24:26:ee:24:fd:20:4f:e7:d8:32:be:26:
50:7d:88:6d:43:1c:db:7b:6f:90:66:11:fb:a3:fe:
e7:09:a2:84:48:70:d6:b1:b6:af:e4:cf:3d:7c:7d:
c0:db:b9:1c:a2:e6:83:0c:d3:f9:66:7c:4e:fc:60:
9f:dd:ff:b8:e1:98:5d:8d:d0:c5:24:fb:53:57:d0:
d2:a1:f4:83:dd:f0:1f:33:e6:10:52:1c:e4:7e:26:
77:2f:e5:ca:21:7f:42:a4:e2:bd:b8:be:67:76:dc:
40:84:ca:f0:11:f7:64:3d:f1:37:48:d8:1a:d6:de:
67:ed:c1:37:80:c2:ce:df:cb:ae:f6:3b:a2:2e:82:
75:12:ca:ca:86:a7:f9:c8:e0:e5:fa:fa:a5:b0:0c:
7c:02:ae:dc:86:a1:88:af:c4:d7:18:f8:9c:68:83:
95:39:9f:56:f2:71:12:ec:69:5b:ea:11:4c:c9:5d:
2e:39:64:1d:42:a3:8c:da:eb:b2:29:f5:78:2b:3b:
4f:38:22:96:3c:4c:33:d1:24:1a:3a:8c:81:f4:d4:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:3D:65:01:1E:07:64:C9:A7:8A:89:A6:F5:E9:AB:9A:1D:A7:C4
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0a:9b:e3:6b:6e:24:8f:04:c9:54:d5:c9:80:24:32:d7:72:
fe:7e:f7:ba:60:b6:b4:b6:1e:ed:a0:a0:00:c6:05:97:7f:e2:
8c:82:fa:b0:02:2a:35:69:94:d7:af:e3:53:3f:8a:77:54:c1:
38:92:93:d9:cc:1f:96:3d:94:c6:ce:65:32:eb:8d:62:1f:d1:
cd:15:25:16:db:46:9c:aa:64:cd:02:b1:0a:9f:6c:0d:06:ba:
e0:15:3f:2d:0b:3b:3f:fd:3a:fe:cd:dc:28:51:2c:fd:d5:35:
ba:f8:76:13:4e:10:1f:4e:72:13:a3:99:7e:44:3a:0f:e9:b9:
bb:5b:3a:53:3b:ff:0a:15:01:ad:85:f2:5b:02:a4:7f:84:80:
72:45:d2:28:56:77:76:75:33:45:2d:ff:be:d4:84:fc:79:4e:
cc:da:3e:de:33:d6:7d:2a:03:98:e8:42:d1:cd:a9:ea:7b:fd:
54:4b:2f:14:5d:7f:92:6a:05:64:f1:52:5f:2a:f7:61:b7:69:
0b:02:27:1f:2d:b9:b9:14:8b:0b:88:8b:70:df:83:66:19:4b:
c3:cc:41:f7:35:ac:ee:52:7d:c3:2f:69:f3:5b:ea:89:da:1b:
d5:b5:05:e5:c4:64:5c:20:ab:8d:2c:31:d0:3f:c3:6d:43:e7:
f2:fb:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:07 2025 by rpki-client