Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: hGK4Qc9qP/H2Je/sv9qxR/oBfiLyc88n2S9hV4WdiYw=
Subject key identifier: D9:78:C2:CA:9F:94:0A:EB:1B:D4:EF:C1:88:B9:D0:32:F9:2F:01:E7
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 01968210EE4C9F44A8F4EF78E98865F25C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 078E
Signing time: Tue 29 Apr 2025 15:01:09 +0000
Manifest this update: Tue 29 Apr 2025 15:01:09 +0000
Manifest next update: Wed 30 Apr 2025 15:01:09 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: AHuJRY8XMNYaGl6ChI0sJ5NGmA7GVxr+kAC9+EHS/lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:ee:4c:9f:44:a8:f4:ef:78:e9:88:65:f2:5c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Apr 29 15:01:09 2025 GMT
Not After : Apr 30 15:01:09 2025 GMT
Subject: CN=d978c2ca9f940aeb1bd4efc188b9d032f92f01e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:bf:8a:cc:61:4b:14:0d:b4:0e:52:e6:da:
55:2c:65:0e:f7:34:9f:cc:8b:7c:7b:02:60:41:1c:
27:bc:11:b8:fb:3f:a8:86:c8:b6:1f:d2:84:5e:41:
85:b6:8d:c5:b0:46:50:d0:35:42:34:04:a2:62:e3:
ba:34:e9:49:d9:ec:4a:f4:06:65:ef:d0:81:09:20:
02:67:cd:85:6e:60:ff:76:50:db:94:69:b9:ba:0c:
75:a4:2a:4c:37:98:c7:f3:69:a7:6b:e3:fb:2f:2a:
ed:51:7d:f1:72:0c:61:fc:4d:59:a8:a9:30:d5:ba:
f8:19:71:27:d2:63:26:10:7c:b8:1e:fb:59:ce:4e:
f0:ba:0a:b3:b3:22:1f:86:77:48:98:0b:1e:b1:ba:
67:6c:88:2f:90:fa:27:16:55:d4:0c:87:a2:e9:a3:
a4:7d:0c:d2:b2:52:bc:22:ab:56:02:1f:ba:11:fa:
cb:ed:f7:2f:6c:d9:36:dc:13:07:4d:b7:f6:72:59:
3b:d5:a7:9a:3b:1f:0b:e0:9a:71:6c:cd:56:e1:fd:
f4:59:01:81:be:13:1a:36:16:95:22:ed:4d:1e:55:
f9:c3:28:74:c7:92:86:65:b9:68:14:6c:40:7e:dc:
df:e0:9f:4f:ed:46:32:34:66:9b:3e:32:9b:86:63:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:C2:CA:9F:94:0A:EB:1B:D4:EF:C1:88:B9:D0:32:F9:2F:01:E7
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:59:f5:e1:88:92:1c:a2:e3:72:25:a1:a2:77:ec:72:96:
42:82:87:52:f1:6f:da:02:27:94:98:00:1b:72:3d:88:f4:7b:
fd:d6:34:37:c7:8e:70:c5:11:77:41:27:e9:c1:49:6c:85:c6:
00:0b:7d:6d:7b:19:51:4f:0c:7b:ca:4a:8a:cd:c3:ad:f4:25:
57:eb:e6:eb:04:7b:24:8a:de:c2:c0:46:67:fa:0f:e7:41:62:
73:86:7a:a9:1a:08:af:f8:61:04:bf:81:9f:a2:5e:dd:75:e9:
2c:b3:49:18:be:a1:a7:0d:61:b2:e9:c5:80:fd:28:b1:5d:2c:
6f:34:60:01:5e:8c:99:7e:39:68:c8:53:60:86:62:8f:c8:7f:
8d:c1:24:20:ff:17:1d:4a:64:eb:8a:6c:b3:86:d3:1f:ba:e5:
09:c8:95:6a:98:5b:9c:1d:db:24:5b:3d:ec:61:7d:01:09:d5:
b2:97:2f:5f:29:50:54:1a:be:10:39:15:d2:6b:01:54:bc:d2:
4e:47:27:99:52:91:c4:ce:01:cd:81:c4:a9:b4:7f:2c:f8:f6:
44:39:03:35:3f:90:de:64:20:a4:67:9a:3d:fe:b1:7e:81:e9:
c9:73:1f:4d:4a:d7:30:a5:fb:6b:84:cb:51:13:ac:4e:a3:47:
af:7f:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:34:13 2025 by rpki-client