Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File: iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier: Xym9EoqqcgmpZDDJXsXd9iQsUgrnnIiwNRUb7LHCk1w=
Subject key identifier: 70:9D:D5:3A:FC:41:01:20:B8:52:2D:FA:27:6D:C5:3E:26:3A:6B:0F
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 019675671B291985FD776431C1D57B697C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number: 040F
Signing time: Sun 27 Apr 2025 04:00:13 +0000
Manifest this update: Sun 27 Apr 2025 04:00:13 +0000
Manifest next update: Mon 28 Apr 2025 04:00:13 +0000
Files and hashes: 1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: UIBVY8Qvv6Bz2trwtLTacXL8u0RpaiWS30Nw99t8uek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:1b:29:19:85:fd:77:64:31:c1:d5:7b:69:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: Apr 27 04:00:13 2025 GMT
Not After : Apr 28 04:00:13 2025 GMT
Subject: CN=709dd53afc410120b8522dfa276dc53e263a6b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:e8:de:ca:16:0e:29:bf:f1:ba:92:58:9e:
1f:4d:c2:66:7f:e5:15:df:7a:c5:ca:1f:7a:d3:08:
e0:97:87:00:7b:44:4d:22:00:c3:a7:ca:36:81:53:
13:01:66:12:9a:bc:10:f0:33:39:9d:10:d2:1b:8f:
c0:ca:2e:7b:e6:24:4a:38:fb:93:ab:0c:42:ab:eb:
c6:3a:c2:19:07:7c:a7:e3:f5:4f:eb:10:8b:7c:09:
16:58:61:1c:a7:02:70:43:ea:af:d9:a7:8a:6a:22:
b2:5a:7b:76:66:e2:f0:24:4c:6c:d0:b5:fa:93:cf:
c6:09:03:9d:38:5c:46:ef:27:fa:f9:46:e1:2c:72:
a0:44:3d:27:45:c2:ed:82:e5:21:3e:2b:de:2a:c9:
57:88:00:77:e0:3b:21:7d:e5:88:30:00:a2:d7:35:
2b:06:aa:98:5f:11:84:4e:e5:7a:6d:46:ff:ed:a4:
95:76:00:2f:e9:df:f9:68:1a:02:0e:6e:dc:46:90:
db:64:2d:d6:65:b6:e4:a1:83:ba:fd:06:87:06:e0:
d2:5b:15:e1:ca:0d:7f:7a:d7:2e:84:c1:e7:67:4c:
94:28:d8:69:74:20:fa:2d:e1:0e:c7:2c:cf:4f:56:
66:1b:9f:5e:fa:d9:ba:48:80:80:c6:6e:07:de:b6:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:D5:3A:FC:41:01:20:B8:52:2D:FA:27:6D:C5:3E:26:3A:6B:0F
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:56:7b:7c:10:30:9c:c3:08:8b:2e:8a:66:bb:b8:bb:a0:74:
f9:e3:e9:df:bd:b7:2f:b7:57:02:a2:ab:64:83:37:42:80:a2:
d8:a5:fb:7c:59:81:0a:7d:2b:d5:ea:1b:4e:2b:b9:44:ab:5e:
82:90:44:a4:b6:91:c0:fd:58:1d:f5:2c:fe:9d:8f:9a:ec:30:
60:cf:b0:17:6f:ea:f0:7f:22:68:89:7a:99:87:3f:12:36:a3:
9c:d4:9a:ed:1c:e7:ab:15:36:f4:84:94:59:b2:f3:53:7b:48:
ef:7e:de:14:9d:8d:a2:8d:20:d4:b9:b1:ab:e1:88:f5:0f:7c:
64:c8:98:7e:c2:ca:70:8a:01:01:eb:97:d9:89:94:ac:f4:d3:
1d:17:1d:5a:8b:a3:6c:50:15:ba:1d:a5:64:40:ae:12:a4:fe:
c9:13:b2:27:a4:aa:6e:14:ce:ae:65:3c:01:f5:0c:80:af:49:
9f:d9:6c:a3:0c:44:f4:c3:5f:ec:62:46:d6:cf:66:96:0b:a9:
33:c4:7b:41:10:4d:bc:5b:99:bb:f0:d7:77:0c:10:0a:70:8d:
74:e6:2c:b4:0e:38:7f:8d:a8:cf:66:99:79:d0:bc:bc:bb:b2:
c6:2e:8e:76:80:ce:63:8e:be:64:8b:f7:33:df:fe:09:56:6f:
08:96:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:01 2025 by rpki-client