Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: iz0vu+N61F1/i7V/Z6Up1nR9zqjyX5P+dG8Th4+9wc8=
Subject key identifier: 99:7A:8B:03:2B:B2:A7:12:08:E7:EA:04:18:1D:13:3F:86:BF:26:D3
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 01967FB4F69CF4AE72114E8C4C187AD79230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0121
Signing time: Tue 29 Apr 2025 04:01:28 +0000
Manifest this update: Tue 29 Apr 2025 04:01:28 +0000
Manifest next update: Wed 30 Apr 2025 04:01:28 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: aJnWyTprSddXjcBBall8UiX3peQg9AgVYjlzWAtEcFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:f6:9c:f4:ae:72:11:4e:8c:4c:18:7a:d7:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Apr 29 04:01:28 2025 GMT
Not After : Apr 30 04:01:28 2025 GMT
Subject: CN=997a8b032bb2a71208e7ea04181d133f86bf26d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:d0:0b:d5:f1:08:5a:d9:5f:8d:54:0d:69:
99:1c:01:db:ed:16:85:7d:17:20:34:ff:37:7e:6c:
0c:e2:03:0b:20:6c:79:d8:9d:2e:2f:c2:cd:78:ba:
91:aa:36:72:44:60:b8:57:71:a4:80:b6:a0:c3:a8:
72:97:94:ed:1c:72:8b:c3:49:f2:e5:15:33:14:0a:
dc:cf:dc:d8:58:ce:ba:ea:ec:1f:eb:cd:65:11:21:
db:80:5e:a5:b4:d3:5e:cd:99:0a:4c:32:f9:b5:e0:
c6:ff:c8:f8:fc:f0:01:6a:48:f9:20:7d:bc:47:21:
87:d2:9f:25:20:66:16:25:1c:54:fb:4b:0f:2e:f0:
75:db:d7:75:4b:91:59:dd:17:0e:a1:2f:42:1a:79:
87:a5:dc:87:f3:d0:c6:54:7b:31:c9:82:c1:75:29:
08:7b:cd:4f:f4:c8:cb:19:2d:32:3a:a9:fb:7c:02:
a8:98:1f:1a:2b:f0:05:3b:8e:cf:26:95:17:01:da:
70:6c:4c:28:7b:4c:c4:e1:71:f2:bb:c3:5d:6f:a0:
8f:ae:90:e3:ad:9e:43:61:da:9c:6d:db:f7:d4:5a:
82:53:35:08:42:7b:c8:1e:f4:55:4b:39:fc:ad:80:
e9:44:67:c4:d5:8b:f0:c2:d5:8e:1c:e2:b8:37:6d:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:8B:03:2B:B2:A7:12:08:E7:EA:04:18:1D:13:3F:86:BF:26:D3
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dc:a7:3a:ae:1c:f5:d4:44:02:3a:61:39:8f:f5:96:af:a4:
02:e5:80:dd:77:86:bb:94:69:20:13:0e:45:13:39:2d:63:16:
95:6c:84:8c:51:e8:ff:97:8b:64:34:e0:85:03:d8:08:75:80:
6b:e1:6e:a6:2b:cd:64:2f:72:ce:d9:b4:37:77:e3:a7:bc:3f:
ac:fa:e8:3d:d8:68:61:c2:00:b4:4d:7d:2b:df:c3:1a:b6:f4:
8e:3a:f8:b0:ae:50:3f:7c:d5:32:dc:44:88:2d:b6:d6:9e:1a:
bd:39:ce:16:1f:d0:c2:57:76:3f:3c:27:f4:18:be:7d:eb:53:
f0:cb:76:6d:08:2f:0e:b4:8d:1d:01:3c:7d:2a:fe:34:1d:99:
ba:44:ac:e1:83:1c:e4:ce:dc:d0:3f:43:c0:d7:c0:c2:f5:25:
77:3e:c1:09:62:f2:37:3d:b5:c5:6b:8d:5a:3c:eb:55:15:c8:
16:0e:dc:01:7e:b7:10:11:e8:55:41:39:93:7a:74:ef:2c:57:
7f:84:ee:49:21:fe:7d:0e:43:9f:a5:e2:5d:fa:a0:73:dc:c3:
1a:fb:07:64:1c:11:36:2d:42:8d:73:c2:5b:81:25:ed:84:41:
a7:26:60:bd:e1:34:71:cf:a6:86:ca:db:11:38:de:bf:3d:cd:
28:b6:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:15:27 2025 by rpki-client