Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: KHhK4QgxO4tDT6+hz+GfK9ST2W73cZ1xLvmLDkJXNAE=
Subject key identifier: 3D:38:AB:A0:12:A0:13:ED:4C:47:E9:34:DC:A3:5B:B2:2B:F6:52:BD
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0196729D0C14FCC6BA2E998565E70E724D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0E3B
Signing time: Sat 26 Apr 2025 15:00:16 +0000
Manifest this update: Sat 26 Apr 2025 15:00:16 +0000
Manifest next update: Sun 27 Apr 2025 15:00:16 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: Yex6OWaQs5BC/qLpRf7qCXgYhcBVrNSyyGJ5JaxqQ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:0c:14:fc:c6:ba:2e:99:85:65:e7:0e:72:4d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Apr 26 15:00:16 2025 GMT
Not After : Apr 27 15:00:16 2025 GMT
Subject: CN=3d38aba012a013ed4c47e934dca35bb22bf652bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:4c:51:fc:36:92:cc:6b:c0:6b:33:69:1a:
07:a7:88:80:46:c8:2d:7f:51:42:2b:65:d4:92:21:
7b:81:85:69:4b:1c:42:fa:5b:e5:08:d3:04:5f:c2:
f1:2c:3c:d8:88:e6:c2:36:84:96:80:d4:fe:1c:62:
61:9f:47:bd:a8:75:e4:c8:9e:d4:a9:37:95:e4:e5:
6c:a7:a8:bd:ed:9a:ed:3f:86:55:e1:b0:7d:9e:a8:
d3:f0:e7:29:9c:e0:e6:5a:62:bd:aa:9c:93:aa:a6:
a7:5d:7a:85:02:f6:7f:f1:45:27:f5:3c:6f:2c:34:
0a:bc:92:56:cb:38:13:e3:11:1d:4e:b7:23:a9:35:
75:93:0b:3a:09:7f:46:f7:31:30:35:76:81:45:22:
07:6d:50:5e:ad:4b:b1:80:26:03:a8:00:71:e0:31:
51:64:a2:14:51:13:a4:42:53:d2:b3:5d:30:01:18:
79:19:ce:8a:9f:6a:57:5f:80:26:6a:6b:51:04:4e:
5c:e6:fe:64:39:6b:fa:13:aa:3e:ef:93:cb:a8:df:
2c:95:dd:49:d0:e0:e6:6c:04:1b:9b:56:b8:62:c7:
0d:d5:c6:e9:20:c7:e4:2d:ba:6c:b6:ae:18:a9:43:
3f:73:b2:b9:ae:2b:0c:65:bc:e8:6c:f7:1e:7e:3c:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:AB:A0:12:A0:13:ED:4C:47:E9:34:DC:A3:5B:B2:2B:F6:52:BD
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6c:f7:f6:49:2e:09:44:4c:3f:71:4f:23:7d:ea:1c:7c:2c:
ba:3c:4b:c7:03:4b:83:2e:f9:c2:fa:70:ec:79:e0:cb:ca:b8:
56:11:ee:9e:8f:3c:e6:07:5c:54:a5:6e:5b:45:33:37:13:68:
e4:82:8b:cd:52:25:e4:89:92:08:c7:75:18:8b:95:cb:28:90:
40:27:67:a1:e5:04:fe:b9:c6:72:d0:df:9f:83:6e:f3:a5:b3:
07:07:a0:73:6c:a4:43:c8:70:d5:38:81:aa:04:17:8a:c7:ab:
14:c2:42:6a:16:74:df:fe:1d:c5:1f:cf:93:98:5b:e9:af:52:
d2:b2:70:d6:95:f6:f1:0b:79:72:77:db:bf:c1:90:d1:df:5e:
8b:07:d6:b8:5a:6e:1f:09:61:bb:48:68:77:90:bd:83:3f:0f:
7f:32:d3:fc:33:d7:ad:7d:3f:37:6b:39:0d:24:f4:a5:62:53:
7d:3f:a9:f3:3d:3d:d3:55:87:d6:c3:fb:fd:5d:12:7b:ab:51:
fa:5b:03:8b:f1:f2:00:0e:f3:38:7a:c7:67:ff:cf:db:d5:61:
bc:cc:27:91:b7:c7:53:1b:77:60:89:62:ef:2a:63:90:ca:61:
b5:69:1e:9f:71:6f:20:26:49:a1:86:2a:d8:a6:44:fb:4f:9c:
61:b7:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:01:04 2025 by rpki-client