Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: y+2oZ9ooFEIg5MckuK4r83yf3GAf9vykLaXzSmphLcc=
Subject key identifier: 8E:97:8A:23:89:C1:A1:78:76:A3:3E:C4:F3:B4:05:FD:54:B4:BF:C3
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 01967E340262B2C142A738E4FE701EF59BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 21:00:59 +0000
Manifest this update: Mon 28 Apr 2025 21:00:59 +0000
Manifest next update: Tue 29 Apr 2025 21:00:59 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: 9JbijgCd60DLMgIOyCd+1McyIk54F4jJPLq9JHlpOXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:02:62:b2:c1:42:a7:38:e4:fe:70:1e:f5:9b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Apr 28 21:00:59 2025 GMT
Not After : Apr 29 21:00:59 2025 GMT
Subject: CN=8e978a2389c1a17876a33ec4f3b405fd54b4bfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:8c:db:51:38:11:7b:bb:23:41:96:e5:5d:
86:ae:9f:f2:33:53:3a:e7:0e:d4:1e:68:0f:6a:5f:
e2:31:19:e0:61:26:35:0a:52:30:89:be:68:0c:26:
08:7c:7d:05:93:3f:bf:0f:66:97:cf:76:1e:5b:30:
84:84:88:d4:07:54:32:98:e5:d1:f6:27:8f:5d:19:
c0:e7:77:ba:62:73:0b:c6:64:6a:91:d2:d0:28:f2:
fc:48:cb:e2:38:83:a8:ce:d6:47:ba:1e:82:7a:a5:
22:54:5d:42:2d:1b:05:57:71:ba:93:bb:ab:4a:7d:
9b:b5:a7:09:1d:1c:73:ff:70:89:c2:8d:64:9d:2f:
e2:18:22:53:70:13:bf:87:6d:1f:f5:75:2e:cc:74:
8a:cd:40:78:e2:7b:db:84:b9:98:7c:c6:a0:61:2c:
d4:3a:28:14:5f:cd:06:a4:df:ba:e2:95:5d:c9:e8:
39:18:0e:90:69:89:0c:11:1e:25:b8:5a:3b:3c:74:
db:d8:34:5e:1e:cf:6b:ec:42:d1:b5:fc:30:f8:c3:
2c:39:52:f5:88:fe:4f:9e:e9:5d:b9:fc:72:0e:dd:
22:90:3e:4c:f0:9d:f9:2e:0b:e6:57:80:be:6b:81:
29:11:0d:82:1d:22:71:ba:ec:59:b6:2c:58:ee:58:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:8A:23:89:C1:A1:78:76:A3:3E:C4:F3:B4:05:FD:54:B4:BF:C3
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:d5:98:1b:a1:73:4f:8b:26:e7:6e:aa:18:f3:d6:91:c2:
57:ac:2d:42:b1:86:1c:9b:5b:b7:1a:b6:46:39:63:22:82:75:
9d:a5:e2:a0:46:ad:b6:f2:10:10:98:ce:4b:00:bb:c1:65:a4:
92:8a:32:4a:ec:7e:9b:19:a4:f6:48:2b:d9:ab:e3:56:77:3d:
73:4b:88:14:e3:38:86:eb:cd:f9:0c:5c:35:08:9c:32:5b:e8:
81:fb:d6:30:e6:85:85:fa:02:fa:fe:1a:cd:a5:22:25:47:06:
c8:e8:72:31:8f:85:0f:2c:2c:3f:4a:5b:e6:46:df:2e:27:fc:
a2:fd:2f:bf:90:fd:36:ea:ae:6b:a2:c9:a8:56:da:6e:7a:f0:
86:77:6d:87:2d:b9:06:31:14:88:a9:61:8c:83:43:64:ad:fb:
5b:f9:15:b5:d8:6d:15:74:07:10:39:48:09:91:95:14:de:72:
8e:29:78:83:70:f6:ca:2a:eb:75:be:87:3c:88:42:e1:6a:2f:
83:5b:5b:0e:b7:a3:14:64:0b:6b:e6:35:92:00:a3:3d:ad:63:
d2:62:38:79:73:e3:6f:bf:b7:7a:24:d6:d9:90:d2:dc:e5:a0:
3f:56:df:6c:42:02:91:85:86:0b:3a:ff:c7:57:b1:54:08:ed:
47:c9:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:43:28 2025 by rpki-client