Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: 8hTZB7bnYsTwRI5cjIb87SqUZ1cE4FvdpFhrhG6iH1A=
Subject key identifier: 0B:95:28:2A:03:B2:66:C1:CD:C4:91:3C:8C:08:24:8A:C1:7A:7A:EC
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0196AAD51857E906556D61E68A367D7554E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 13:00:13 +0000
Manifest this update: Wed 07 May 2025 13:00:13 +0000
Manifest next update: Thu 08 May 2025 13:00:13 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: IwhyfKEjS9ZsUsrkuDANwWq0Of6qQCQFQzaLx+d8tXk=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:18:57:e9:06:55:6d:61:e6:8a:36:7d:75:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: May 7 13:00:13 2025 GMT
Not After : May 8 13:00:13 2025 GMT
Subject: CN=0b95282a03b266c1cdc4913c8c08248ac17a7aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:90:dc:21:94:a9:2c:d7:23:5d:8f:ae:00:
df:b8:f7:a4:2c:04:f2:26:30:94:49:8b:22:d3:3a:
a3:37:0d:12:b5:53:ed:7e:6d:63:6d:1c:10:44:13:
6c:d5:20:2b:b6:f2:d5:17:36:4d:15:e9:a3:df:bc:
da:b1:8d:66:9b:fc:40:bd:ef:fe:30:98:89:a3:e5:
e4:eb:e8:aa:35:8b:e1:9c:5c:dc:04:6c:69:f7:66:
0c:4c:4e:c3:aa:bd:b8:ef:00:8d:37:1c:2a:8a:89:
00:ef:1e:c9:b6:97:96:f4:74:db:84:b3:0c:77:7a:
53:17:92:cf:1c:46:7b:96:9f:3d:ba:66:9d:82:24:
a4:ff:d4:a1:a5:b1:55:f8:24:42:f4:33:4a:12:5d:
f5:fa:6e:27:eb:5b:a7:97:05:02:3f:fa:18:1f:d8:
7b:82:95:48:ae:2e:74:30:d9:b0:b7:c8:85:cf:60:
c7:4e:67:1f:26:a2:be:4d:a2:a7:49:30:72:a6:93:
8a:f8:8f:8e:b4:0a:b6:63:b9:ce:16:44:5f:63:84:
09:7b:37:5d:b5:c9:46:90:77:bb:a0:78:1b:3f:ab:
5e:1c:23:e2:cc:24:4f:2c:6d:42:f4:8e:f6:3c:61:
af:fa:c2:a4:d0:37:52:13:3e:1b:45:7b:46:34:d0:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:28:2A:03:B2:66:C1:CD:C4:91:3C:8C:08:24:8A:C1:7A:7A:EC
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:d8:8c:59:ac:1a:82:b2:9d:be:3c:1a:af:4a:ef:2d:8e:
25:c4:84:7f:1c:ab:3d:8f:4e:a7:4d:45:55:3a:58:4b:7c:a3:
36:e2:ee:d9:09:c6:82:be:17:6a:9b:33:a0:53:1c:46:c7:3d:
9e:0c:27:c3:99:97:43:54:00:37:94:17:de:e5:90:97:20:c6:
14:1a:58:62:80:9a:ee:90:ad:d2:f4:3f:6d:f8:ae:07:2f:2a:
85:19:0a:c2:92:65:e2:e6:9c:9f:fb:a4:20:30:4c:da:d5:49:
a6:bc:b7:04:b1:ae:d9:84:95:7a:de:d5:1f:f2:0b:00:8c:05:
94:f0:d9:90:5c:ed:ad:ea:78:d6:1f:a9:86:ff:c7:d0:03:b6:
a4:78:98:d2:1a:b7:29:70:fd:2b:39:2f:6f:a1:c8:f7:e8:56:
4b:0e:eb:72:e8:ac:00:a5:4c:39:df:68:a4:dc:5a:b6:79:fb:
35:9a:24:fc:f9:76:af:82:1f:0b:c5:03:5a:49:7f:34:27:b6:
a2:16:de:fe:30:99:86:4d:fb:f4:0f:9d:99:71:04:51:5e:ed:
af:8d:1b:14:9d:64:d1:6f:f4:9c:8e:ba:23:d8:df:f1:a0:70:
0a:b7:78:a2:49:39:7f:21:ba:bb:98:61:fd:f6:0d:d2:fb:b2:
08:c6:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:03:29 2025 by rpki-client