Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: e/uho/BHeacR3tQvixeAthKkRJ9GN317RTqwiHMirwU=
Subject key identifier: 0A:78:78:B1:F0:08:EF:66:88:CA:2C:A9:E2:87:30:38:7F:CA:A3:30
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019679E93DEB036EFD2A9588FD8EF782FF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0B7E
Signing time: Mon 28 Apr 2025 01:00:50 +0000
Manifest this update: Mon 28 Apr 2025 01:00:50 +0000
Manifest next update: Tue 29 Apr 2025 01:00:50 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: SiTT11b5CwJgvxkzH/Yjmnnl2A9G84ldMgauGqvdlx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:3d:eb:03:6e:fd:2a:95:88:fd:8e:f7:82:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Apr 28 01:00:50 2025 GMT
Not After : Apr 29 01:00:50 2025 GMT
Subject: CN=0a7878b1f008ef6688ca2ca9e28730387fcaa330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:7c:39:42:42:af:ed:6f:f6:81:ca:3c:16:
d4:71:fe:31:ed:71:dd:f9:ad:3c:31:ab:94:2f:9b:
f6:96:64:e5:7d:9b:bf:ff:3b:19:12:25:a6:d7:7c:
a9:8f:80:c5:49:cf:a8:f9:86:87:16:40:34:0a:e6:
6c:79:4d:67:b7:23:cc:6b:51:be:22:37:c8:97:47:
b3:3e:d6:01:e0:a0:00:6a:97:cd:71:b5:8f:99:39:
62:5b:ee:5e:fd:43:af:2d:3c:e9:e0:61:0c:61:80:
7d:cb:a1:0e:bb:b7:9a:9e:f1:bd:15:bd:e6:87:ae:
c5:bb:b8:ab:07:94:00:6c:af:1b:4b:fb:9b:bd:3d:
a5:fb:cb:31:4d:ff:c1:6e:4b:8f:7c:e6:5c:2f:42:
2d:8b:39:d9:0c:bd:85:ce:4c:a0:72:46:c8:f9:a8:
c0:1f:81:cc:fe:48:c9:20:c3:60:bb:dd:02:33:b2:
7f:b7:2c:fa:7e:b6:6f:28:85:c8:84:78:c8:52:cd:
a6:22:6e:d1:8e:d7:5f:3e:b9:2d:05:f5:c3:e1:42:
4f:f0:76:63:83:63:40:68:b1:52:3c:f3:15:68:0e:
f5:0f:f6:e7:23:5f:de:cb:35:29:6f:fb:a8:ed:f1:
2a:47:15:23:48:7f:60:b6:b9:04:70:16:8c:47:fb:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:78:B1:F0:08:EF:66:88:CA:2C:A9:E2:87:30:38:7F:CA:A3:30
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:1a:4d:5d:de:9f:83:e2:a1:47:d1:1e:2a:c8:10:6c:50:
6b:be:fe:37:65:da:f3:45:15:2b:8f:7f:f2:d1:a9:1e:b1:c4:
60:8a:e1:73:d7:99:57:f9:29:3a:85:ba:69:4d:c8:d4:c4:cf:
75:26:5e:c8:90:a3:54:59:a6:31:1e:5a:ab:ab:45:63:ee:fc:
2a:5d:85:28:b1:8a:41:b7:52:13:0c:89:9f:64:7b:e8:17:3a:
ea:d6:8d:02:5f:e3:f7:87:66:7c:74:bf:6e:80:65:e6:20:04:
52:ba:1a:bf:dd:cd:6d:ec:01:4c:d0:96:2c:ef:e0:b7:4d:65:
8b:aa:72:6b:9a:a6:36:74:8c:ee:b4:18:24:66:90:7e:42:cb:
37:74:9f:c8:ee:24:96:90:14:11:12:88:0c:6c:f8:62:fb:b8:
8d:73:79:b3:64:2c:69:7e:df:27:c1:ec:d0:92:17:21:7d:53:
3f:78:0a:03:fc:5b:ed:bf:99:28:e3:1b:c5:77:73:c0:7b:fd:
43:a8:70:2d:5c:a8:b4:c9:76:d5:32:b3:dc:06:2c:c6:e0:b7:
42:75:c1:e1:7e:f6:17:3c:2c:73:23:35:d1:aa:12:03:5a:63:
80:02:f7:71:3b:37:16:85:18:d5:15:3d:db:1d:d0:cc:48:8e:
a0:4f:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:52 2025 by rpki-client