Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: xEezJMxvJdb6D4kFJalcuOwu7VAmNznjtupe+l41LGU=
Subject key identifier: B3:AC:9C:AB:AE:48:FA:A0:F8:C4:7E:87:35:4F:91:1A:C9:38:9F:A7
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 019691F1E24BD1C5B765A531E0118A4CCDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 17:01:10 +0000
Manifest this update: Fri 02 May 2025 17:01:10 +0000
Manifest next update: Sat 03 May 2025 17:01:10 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: ex2dsRlCctMqIf6Sa67ClcO7/LGSblu1l9pUfldhWX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:e2:4b:d1:c5:b7:65:a5:31:e0:11:8a:4c:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: May 2 17:01:10 2025 GMT
Not After : May 3 17:01:10 2025 GMT
Subject: CN=b3ac9cabae48faa0f8c47e87354f911ac9389fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:f8:c9:b6:20:55:ac:b1:f0:95:74:92:4c:
97:0b:08:68:76:71:07:15:5e:3a:b3:a0:c2:e8:5a:
04:34:6e:6e:c6:14:df:6f:2a:3b:5a:b0:50:f1:7a:
f7:fc:29:da:08:4d:27:63:a1:35:b9:e8:e7:5a:62:
3e:f6:53:7b:ae:00:3a:9a:a2:78:28:dc:5c:6c:df:
02:9e:f8:5e:56:65:77:13:f5:02:c6:ee:88:5d:cf:
5e:4c:e4:91:53:54:83:02:03:e1:a7:f5:09:d3:ab:
6e:cc:5c:3c:90:cf:91:ef:24:00:4f:44:37:3c:c6:
ef:cf:38:38:86:58:f4:2e:b2:2c:13:3e:9b:5e:e6:
3c:f7:f8:62:c2:1c:19:b9:db:ae:ca:cb:2f:90:82:
66:e7:2b:62:64:ff:3d:fd:1b:cb:05:b7:2f:6e:f4:
72:ad:09:4b:0b:eb:e9:4a:8d:cf:04:cd:16:de:c3:
d1:91:09:48:b6:da:99:a0:a5:b4:a6:15:d3:2d:c3:
66:ec:be:4c:11:07:cc:ab:91:47:d5:bf:59:3c:66:
b7:d9:2a:a2:8a:85:08:ad:b7:5d:b3:5b:f7:e8:c3:
49:05:38:dd:09:dc:b2:11:6a:cd:45:b0:1f:6a:64:
8f:09:76:40:93:38:15:f1:4e:53:22:58:ad:48:3f:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:9C:AB:AE:48:FA:A0:F8:C4:7E:87:35:4F:91:1A:C9:38:9F:A7
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:6c:d9:11:82:83:a1:13:60:6d:c7:e6:4a:c5:fa:37:b6:
2d:5b:74:ac:88:3f:fe:ca:6b:f9:6d:1b:92:e6:68:96:e7:34:
c7:e3:c4:f5:14:10:0c:1f:c7:a9:38:eb:f7:02:c0:a2:4f:b8:
7a:e6:9f:21:90:db:65:cb:e2:a8:c6:fb:2f:0b:69:37:07:f8:
92:19:dc:1b:c1:bc:1d:58:af:4c:40:bd:50:8e:54:f6:f0:ca:
e3:10:16:80:fc:43:6c:c6:7c:30:7b:5f:fc:30:4a:80:3a:5a:
97:82:51:9a:a1:62:f5:14:02:2b:05:3a:56:d9:f0:70:40:fb:
cf:73:19:28:97:4a:6a:d0:71:2c:66:b0:ed:4d:3e:5d:26:33:
cb:a9:ab:3d:e8:64:c5:78:61:46:2f:a3:0e:84:63:65:e1:d1:
c7:01:63:40:89:d0:ee:de:be:1c:76:d3:b9:c4:75:b3:cb:bd:
c6:35:09:a2:d8:28:bb:e2:26:df:cf:98:49:a6:0a:e9:03:41:
64:69:08:50:30:68:e8:7b:2a:eb:fb:3e:50:93:32:d8:95:ba:
58:d1:f9:d1:ed:82:ac:36:09:7b:14:8a:a9:b2:76:f9:4f:33:
d9:f7:74:c7:8e:12:81:2f:64:2d:20:81:b1:eb:e1:e0:58:4d:
91:b0:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:52 2025 by rpki-client