Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: YZg6rXvu0BNHd+Udnifw5trViZAfaq4AQr7Rxf2ENe4=
Subject key identifier: B9:29:80:81:05:1F:10:11:D2:55:4B:01:EE:84:56:F4:59:FB:E8:99
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019681348000CFC75517750278BF499C8E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0984
Signing time: Tue 29 Apr 2025 11:00:23 +0000
Manifest this update: Tue 29 Apr 2025 11:00:23 +0000
Manifest next update: Wed 30 Apr 2025 11:00:23 +0000
Files and hashes: 1: 9WfLA6QHajuACG9zKGXgXI_fnBU.roa (hash: aTvWSmVYrhk52fn4L1rzEuUOw3+xRp2a5jHVVtBFY4o=)
2: JY9LzlIgT9I57_KE7zrrGS7E8Qk.roa (hash: pG1i5yA4B+HIYkYc64ggfa0dVvkWYyImVKQY1Fkl/ng=)
3: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: W7Ub2lMguZBpBYOefSTj44WLhBbsZj03v8G+JjFcxcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:80:00:cf:c7:55:17:75:02:78:bf:49:9c:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Apr 29 11:00:23 2025 GMT
Not After : Apr 30 11:00:23 2025 GMT
Subject: CN=b9298081051f1011d2554b01ee8456f459fbe899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:89:ee:25:8e:10:7f:e3:38:24:b5:c8:49:
28:c1:e9:01:21:9d:25:62:8f:96:36:b7:e9:c2:38:
22:ae:9d:68:2a:8b:31:3e:64:22:4e:f0:81:57:70:
1c:da:00:30:6b:34:bd:3c:e5:60:97:47:30:6d:f6:
07:bb:0f:09:62:3c:df:6f:04:ca:e5:24:70:04:d0:
0d:b3:74:b6:28:a3:6f:f6:c4:fb:f7:9b:fd:0f:47:
fd:42:6d:de:f5:a9:8f:10:0a:fb:ba:15:4c:16:57:
f7:04:a2:b6:c0:86:44:d5:74:9c:94:20:22:bc:85:
ef:3b:9e:f8:ed:67:3d:39:ce:cb:89:8c:b3:aa:88:
a1:ed:08:45:b9:6a:ce:52:02:b0:a6:1c:54:c4:d8:
a5:9a:d3:17:e4:c1:85:49:e9:b3:0e:af:27:18:e9:
61:0b:a8:e7:c5:1a:a1:13:6e:65:db:53:3f:9f:2c:
af:ef:41:a0:b4:2b:3a:29:ee:58:9c:45:d2:2d:d7:
75:3c:7a:90:08:99:27:72:d0:c3:11:5f:33:04:0d:
cc:4a:c2:81:bd:34:de:14:1a:71:26:60:bd:fa:0a:
4d:98:d9:57:2b:ed:6d:35:93:49:f5:74:b4:c5:5a:
1b:84:67:c0:13:4f:3f:27:05:54:04:ee:09:08:03:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:80:81:05:1F:10:11:D2:55:4B:01:EE:84:56:F4:59:FB:E8:99
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:26:c3:a6:fc:a7:ba:c0:19:f8:1e:be:71:83:80:47:fd:
0d:b8:d0:a1:3e:d2:2f:f5:4d:ea:18:05:f0:30:1f:e3:96:0f:
22:f7:8c:40:94:68:4e:08:66:03:11:80:f8:62:a0:34:92:85:
a9:41:e7:32:01:e4:56:dc:89:d6:4d:52:02:1f:91:96:54:c8:
fd:c4:f7:af:ae:a8:c0:c8:09:44:1a:8d:cf:d8:c9:f5:8e:91:
f1:5a:2f:9b:fe:ee:f4:f2:8d:a3:1e:1b:1b:63:87:0e:aa:43:
4b:7e:0c:92:29:4b:37:b7:d8:80:aa:fd:0f:7e:8f:e8:71:49:
61:9c:1e:e4:54:73:a3:89:0b:54:aa:3e:58:55:d8:60:2b:04:
87:db:d0:b2:7b:96:40:e8:b7:f6:4d:30:bf:12:d4:db:98:f8:
96:b2:d5:b2:e0:9e:11:3e:0e:99:89:51:c6:92:29:12:e3:d2:
f6:9e:6e:79:80:d3:b0:a2:c5:14:3e:b5:bd:c0:9a:af:25:24:
4d:29:84:c6:b3:6a:0b:76:e2:d1:fb:53:bb:5e:5a:34:80:f0:
22:39:de:52:80:0a:6a:c5:3a:7b:e4:da:66:3b:c9:e2:1b:ea:
36:a8:75:0b:3c:6d:a1:00:53:23:2e:8e:0b:c2:f5:43:af:59:
1c:dc:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:30 2025 by rpki-client