Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: Js0+0Nc0HyhbqRBlSEqKxo89KC3iMZuhv73KWT16LsU=
Subject key identifier: 62:AA:59:5B:18:DC:32:64:07:49:F7:D9:3D:8B:42:CA:71:C8:63:15
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019689250AC7E8E160FE2910DE796575F702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 064A
Signing time: Thu 01 May 2025 00:00:28 +0000
Manifest this update: Thu 01 May 2025 00:00:28 +0000
Manifest next update: Fri 02 May 2025 00:00:28 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: h+2BzN5O2fvfLLxsO73byYG90GVV4k86gEsSXTeGLGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:0a:c7:e8:e1:60:fe:29:10:de:79:65:75:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: May 1 00:00:28 2025 GMT
Not After : May 2 00:00:28 2025 GMT
Subject: CN=62aa595b18dc32640749f7d93d8b42ca71c86315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:91:a9:a5:a9:a5:5b:53:1d:f1:1f:ad:87:
9b:c7:92:04:d9:42:38:8d:96:6f:2c:c4:f6:04:46:
9e:5b:88:4e:96:86:9c:fc:7b:6f:5f:68:5d:c9:90:
93:8d:a0:8a:3f:eb:61:de:71:23:95:a8:11:79:a6:
a5:98:21:58:ba:50:ee:a3:7a:b5:54:e6:b8:be:91:
4e:39:37:46:55:58:9f:38:44:e6:df:91:13:a1:96:
04:3d:b2:08:e9:35:3a:23:65:e1:80:27:9f:89:1b:
52:48:81:cc:18:72:07:45:c5:c2:fe:39:e7:51:62:
9b:a0:b7:2b:cf:2c:59:6a:86:e9:c3:06:44:17:04:
28:73:71:27:18:f3:48:18:b2:86:5a:58:cc:0e:fd:
db:68:b2:19:a1:75:71:23:6b:f1:46:fa:a8:b1:3a:
00:4e:9e:cf:d5:09:1a:bc:2a:4f:12:75:fb:50:a1:
a1:ac:59:1c:37:52:f9:d3:d3:14:75:9f:ae:2f:2f:
39:2c:66:11:8b:3f:36:89:6b:86:f7:d4:b9:ff:de:
05:96:09:86:05:0d:a8:46:6f:72:e8:e2:f4:dc:aa:
25:d7:f9:03:1c:fa:9e:41:fa:02:f8:d1:01:ca:5d:
a5:e7:3f:ed:80:20:10:12:74:fe:de:ca:03:6a:66:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:59:5B:18:DC:32:64:07:49:F7:D9:3D:8B:42:CA:71:C8:63:15
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6c:11:46:3a:51:a4:b0:f2:69:0e:67:c0:de:bc:b1:d0:74:
49:a7:63:49:7a:68:f0:57:1e:9e:38:01:79:fa:8a:35:e2:8b:
3f:7a:72:7d:11:6c:1a:f9:6e:ce:b8:7d:e1:55:07:e0:c5:3f:
f2:30:68:b9:a1:96:8e:71:77:6f:d6:70:69:f5:48:67:ee:82:
21:5a:18:96:a0:fe:68:55:e8:98:93:57:3d:d7:7b:82:52:b4:
32:c7:87:77:2f:3c:1e:60:86:f2:4d:2c:53:ec:f6:2b:87:5c:
8d:59:dd:06:a3:da:87:b2:96:51:cd:f9:36:9e:91:72:fc:4b:
5b:dd:19:15:93:89:0e:18:88:be:9d:84:41:33:cf:89:ef:34:
3a:03:00:c6:f1:6b:a4:d8:3b:c9:1e:10:f0:94:57:9a:f9:4c:
09:d3:8f:d5:d2:a8:9c:29:e4:57:25:d4:a6:9b:da:99:de:05:
db:27:73:3e:f1:f0:7f:96:38:fd:fe:da:c8:c6:60:d1:35:50:
81:03:78:74:32:68:ce:b0:29:70:3a:ee:5b:ea:ae:0b:d1:c5:
b2:d7:ba:21:f4:b0:f9:74:54:f8:eb:29:32:93:65:b1:ed:52:
05:e1:31:c6:aa:1b:24:1f:cf:13:eb:7f:6f:ff:d2:78:dd:2d:
aa:ab:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:38:36 2025 by rpki-client