Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: ieQp7aC1thk5wHXyoGcSfw+vBsSeavkjtJ5+ipdcslY=
Subject key identifier: 37:11:90:1D:90:FB:64:83:82:B2:1E:CA:FA:27:7D:97:71:D0:35:87
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01967567859D5AEC83AF3675A220533928C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 13BA
Signing time: Sun 27 Apr 2025 04:00:40 +0000
Manifest this update: Sun 27 Apr 2025 04:00:40 +0000
Manifest next update: Mon 28 Apr 2025 04:00:40 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: COYuCLpTelB7J+rFQ0bF2EdQoR4tGPS5XdgBolPUCxE=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:85:9d:5a:ec:83:af:36:75:a2:20:53:39:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Apr 27 04:00:40 2025 GMT
Not After : Apr 28 04:00:40 2025 GMT
Subject: CN=3711901d90fb648382b21ecafa277d9771d03587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:e4:1b:1a:ea:70:f8:86:e9:fe:5b:a6:95:
75:97:21:f1:39:9f:b7:99:8e:00:54:97:31:d8:c3:
3c:9b:d4:9e:3a:55:ce:28:86:38:ae:c7:4b:f4:3d:
01:22:14:5c:44:f2:bd:fd:4a:58:3d:1b:cb:52:3a:
62:1a:ee:4b:0f:42:f3:33:99:5f:01:24:d0:61:ad:
58:1d:66:eb:87:b8:65:98:ae:32:cd:e7:92:0d:ea:
cb:e0:2e:0e:0b:2d:25:7f:e5:ff:10:46:82:c1:5c:
4d:7a:35:5d:3e:c9:80:73:9e:e3:02:e7:1d:9e:10:
b3:16:66:57:c7:b6:0e:f0:28:24:61:7b:b1:d1:6a:
43:98:47:b2:d6:1d:e2:23:b2:94:19:eb:5e:d4:95:
25:0d:96:e3:e9:9e:d7:34:28:42:a0:e5:02:d7:2d:
84:2a:1d:d1:3a:7e:7c:5e:39:38:a5:3a:8c:ba:19:
14:d3:f4:a8:e8:05:f4:20:62:4f:bb:ac:57:f7:3b:
e3:14:3d:ed:82:08:0a:11:d6:e5:f0:7e:46:87:2c:
ce:24:0c:4b:72:f9:16:76:d7:0e:8a:58:47:60:28:
15:8d:72:50:fc:df:77:d5:6a:5e:ac:eb:d9:56:d3:
bb:72:2a:27:b8:b5:47:38:5c:54:e3:9a:07:1c:38:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:90:1D:90:FB:64:83:82:B2:1E:CA:FA:27:7D:97:71:D0:35:87
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:e3:cf:37:5d:7d:ea:41:aa:de:e5:96:75:61:43:00:9e:
b2:66:1a:93:6d:47:92:76:45:28:54:59:73:29:75:40:fe:b7:
45:b3:bd:42:fb:f6:fb:7d:49:f3:23:98:6f:4e:ee:1a:9d:37:
2a:d1:d2:ec:88:15:3e:e8:3c:8b:3d:a6:06:3c:f8:b4:7f:bb:
61:7d:5a:31:c1:4e:ad:1e:ed:7b:eb:dd:dd:f8:79:93:00:b4:
30:f7:f2:35:0d:13:81:86:b4:9f:d5:db:c1:ef:1f:0c:4b:68:
b6:c7:2b:d3:9d:99:53:c7:cf:c2:74:b2:20:5c:ea:f4:2c:ca:
bf:eb:cd:2e:63:8a:5c:9d:9b:97:fd:11:f6:38:2c:c6:a0:98:
bf:7a:2c:83:93:93:c9:8f:1b:3a:88:f8:3f:b2:f0:09:73:d6:
2e:c3:8f:17:da:14:a6:0b:ea:d9:92:0f:39:c3:9e:44:11:2a:
6e:b4:8e:b3:93:f9:8c:0f:1c:c3:c4:53:79:bd:29:73:0e:d5:
b7:2a:db:69:d2:d1:99:b9:83:10:be:57:35:08:8c:d7:37:94:
89:05:01:1d:9a:29:95:ad:d9:8d:ad:37:bd:72:1b:d1:29:e0:
95:d9:ca:12:79:08:87:7a:a1:a7:27:c7:64:36:e7:2a:99:70:
f3:64:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:12 2025 by rpki-client