Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: XAlApek7hHH2NS/98vi9apHAAf+SfwcjT7KxCgQ4mhs=
Subject key identifier: F9:36:56:51:0F:7D:11:8C:07:35:05:E8:6F:4E:44:4E:1F:D7:F9:55
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 0196A42EA35E3B588E19CEF43867B1401FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 06:00:41 +0000
Manifest this update: Tue 06 May 2025 06:00:41 +0000
Manifest next update: Wed 07 May 2025 06:00:41 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: jLb6mjfEIVyDy7nvg6g8siaUoc9pwKk/+gTv8e6J8co=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:a3:5e:3b:58:8e:19:ce:f4:38:67:b1:40:1f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: May 6 06:00:41 2025 GMT
Not After : May 7 06:00:41 2025 GMT
Subject: CN=f93656510f7d118c073505e86f4e444e1fd7f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:2d:54:59:c3:1e:7b:20:56:49:1d:56:ba:
e5:2e:1c:38:25:4c:ce:53:8e:da:43:ef:ed:20:90:
bc:32:fd:32:64:bc:3c:8b:a4:12:bd:52:57:16:82:
3d:a3:c0:11:32:ee:17:eb:23:fd:a8:df:ae:32:fa:
25:8e:bd:e2:b5:67:6a:9f:6e:20:a3:ec:c6:b5:49:
c6:f1:1b:4d:39:63:4d:f9:9d:a7:67:7a:14:3d:47:
75:7c:84:60:24:6d:76:d2:e8:da:4f:1f:21:d5:4a:
a5:9f:db:23:15:77:43:c5:5d:94:99:90:21:6b:d4:
86:f4:0f:a2:d2:40:85:58:79:7a:6d:80:33:de:cd:
1a:30:f7:0f:0e:ce:5f:80:0a:45:03:31:b7:f2:2b:
bd:b8:9b:ae:00:8b:b8:63:da:45:f3:72:04:64:07:
cc:59:05:c5:92:bd:42:0d:5a:b8:19:d1:92:2a:41:
ce:f8:fa:b1:dd:33:a4:6c:24:2d:a3:d3:e5:c4:bd:
2b:4b:7b:5a:27:f1:ca:5a:49:d1:fd:fd:28:37:8d:
ba:64:9e:c2:31:c1:90:dd:a4:42:43:ee:58:66:92:
1e:81:94:8f:dc:43:f6:4f:2f:49:97:cf:f4:62:04:
9e:ff:71:a7:4b:c6:0d:30:68:3e:59:a3:fb:03:4a:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:56:51:0F:7D:11:8C:07:35:05:E8:6F:4E:44:4E:1F:D7:F9:55
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:ac:96:3e:48:d5:21:26:b0:d6:0f:20:60:9e:a5:62:20:
9b:89:bb:86:65:0f:8b:5a:34:0b:2e:8f:83:ac:d6:f9:2f:a4:
d2:92:52:29:25:95:f5:20:91:2d:72:99:79:8c:be:f7:5f:d9:
ff:f8:7a:40:f5:51:b2:80:6f:c3:28:93:65:81:34:f1:63:d4:
b4:d1:50:58:31:f4:1f:21:f2:15:8a:aa:e2:5f:04:17:88:43:
40:b1:83:aa:83:a5:58:2c:7c:6d:ad:36:28:d4:f0:36:ac:71:
ef:99:55:58:27:86:e9:f6:5a:1d:44:e1:74:10:a7:3d:42:d9:
b1:a2:f5:df:80:81:07:d3:58:1f:02:46:fc:52:0e:c5:07:c1:
65:ad:47:74:b3:53:77:ac:56:d4:20:8e:2d:4b:e3:7b:d4:f1:
19:9c:eb:5f:7f:4f:7d:ce:c9:0d:ea:ec:1f:10:2b:ff:8d:22:
06:30:de:63:54:ae:80:b6:07:1f:f8:43:6b:27:1c:6d:68:20:
ba:97:c0:ea:54:98:31:bb:43:62:2c:13:a9:45:f2:8c:d7:33:
33:54:70:a9:2d:e3:a0:f0:9d:bf:2c:33:59:83:d0:24:0d:e1:
00:a5:d7:51:d9:4b:80:70:c1:4f:41:22:4e:90:d1:22:ec:64:
d4:78:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:34:38 2025 by rpki-client