Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: okGByl1ab0SJjfRpokZwqyfBMR0vbXgG3hikpOeM/t0=
Subject key identifier: 2A:50:AA:17:FB:19:D4:9F:F0:E0:88:B2:8E:83:86:82:D4:62:20:D3
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019685B66DEA3307F18454F4ABBCFCB0A62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0C67
Signing time: Wed 30 Apr 2025 08:00:47 +0000
Manifest this update: Wed 30 Apr 2025 08:00:47 +0000
Manifest next update: Thu 01 May 2025 08:00:47 +0000
Files and hashes: 1: 36LgSmoTYXDGLabuVqpVL_HY_bo.roa (hash: jlUxcS1bmgVem5MV0QJTckeBjIjhWcwd8IXi6NlQXXM=)
2: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: 67BV5yPlXLMytqoKg5RvYk+qqdxcxIIMt6ha2ALzgDw=)
4: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
5: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:6d:ea:33:07:f1:84:54:f4:ab:bc:fc:b0:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 30 08:00:47 2025 GMT
Not After : May 1 08:00:47 2025 GMT
Subject: CN=2a50aa17fb19d49ff0e088b28e838682d46220d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:ff:8a:13:5a:fc:03:c8:17:f9:06:f9:97:
b0:3b:fc:7d:53:3a:5f:05:f2:2b:d1:58:0d:3b:00:
3d:40:57:00:5a:20:49:09:de:73:78:6b:60:10:56:
74:8a:60:8d:61:9c:89:77:7f:ad:dc:89:6e:a7:a5:
d1:e9:77:9e:6b:ea:66:3c:79:ec:a9:59:d3:6d:76:
96:7b:bb:37:0c:78:d8:98:c5:36:e2:de:83:d9:ed:
c2:98:8f:13:ca:bd:ce:8e:ac:42:4e:68:f9:02:1f:
0e:27:91:af:cf:d5:ec:28:d3:1e:3e:f0:6b:db:c1:
78:3c:6f:37:ca:64:b6:5f:71:46:a4:a7:89:bd:b4:
5c:50:88:fb:a6:ce:22:cc:71:fe:ca:22:7a:de:0d:
d1:ad:c3:a1:33:4b:e7:ba:01:12:87:4e:6a:93:83:
fc:ac:6d:32:4c:c5:2a:bd:7f:92:30:f8:c1:57:cb:
5c:99:5f:ca:da:1c:7d:85:fd:11:fa:04:13:db:02:
2e:48:33:32:0d:00:3a:3b:e3:ce:93:c9:75:36:a2:
78:64:f9:3a:a4:40:ce:56:eb:55:9a:5c:10:ba:7a:
94:84:7c:0b:d7:33:03:db:55:fc:8f:26:f0:7b:e9:
6b:7d:ba:2a:c7:e5:f3:6e:a1:92:38:d1:c6:5c:10:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:AA:17:FB:19:D4:9F:F0:E0:88:B2:8E:83:86:82:D4:62:20:D3
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fb:90:a2:25:a2:f0:c0:41:21:f2:34:57:3e:08:fa:fc:79:
d0:4d:fb:06:e2:71:65:ab:03:8f:3a:51:33:65:2a:0a:f7:7e:
aa:f9:a4:16:27:0c:b9:ff:fc:aa:b9:9b:9c:35:d4:67:3b:75:
98:e2:53:56:89:8b:0f:21:bd:63:61:19:e5:5e:bf:d5:4c:b8:
f5:87:05:15:92:37:7d:ae:89:4d:fe:2a:64:f3:92:89:ff:8a:
e7:a1:c9:c0:68:81:0f:ae:d8:24:23:25:a7:b9:b1:f5:37:90:
e8:2c:b7:c9:7a:42:40:83:2d:1b:d5:a9:bf:e9:17:04:1f:c5:
be:e0:4c:68:ad:ed:5f:75:1d:4b:4f:46:c8:2c:28:5a:f1:5a:
d0:34:b8:55:76:01:63:8b:75:a2:84:45:91:3f:55:c2:ab:5a:
e1:29:f1:4c:19:ef:c3:84:aa:b8:a5:ce:61:f0:b6:d2:31:1c:
a8:37:93:dc:87:df:84:fc:27:d7:dc:da:c3:71:b5:bc:5d:e0:
79:8c:88:1b:a4:06:12:7b:bc:69:08:08:9c:9b:73:cd:28:8f:
91:9a:1b:d7:ca:2b:36:11:7f:96:74:cc:f3:af:50:5d:04:1e:
f7:2e:31:a0:9d:35:3b:63:e7:9f:e1:26:7d:26:24:ee:b8:90:
c6:4d:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:53:38 2025 by rpki-client