Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: uIiTmnYnWW/GmypRXavzHGDlpHydptycsuwdLuqRXVs=
Subject key identifier: 72:D4:EC:6D:5B:EF:2B:62:D5:02:BA:F4:8D:45:AD:54:55:A3:A6:14
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 01968AA6001634164615BADA5E8775E3A370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 07:00:56 +0000
Manifest this update: Thu 01 May 2025 07:00:56 +0000
Manifest next update: Fri 02 May 2025 07:00:56 +0000
Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: TBoC1kuhYz2bog6FfZfZVdAyx5vIicKrNuUE7ajkP1M=)
3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:00:16:34:16:46:15:ba:da:5e:87:75:e3:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: May 1 07:00:56 2025 GMT
Not After : May 2 07:00:56 2025 GMT
Subject: CN=72d4ec6d5bef2b62d502baf48d45ad5455a3a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:91:0b:a4:4d:ef:d6:4d:59:d0:cd:69:9f:
b4:e7:ba:23:30:45:e9:90:b3:ff:f2:7e:f6:60:e8:
2a:8f:ef:ab:4f:c2:f9:da:1f:da:99:e0:1e:16:b2:
f8:f4:33:d5:fb:45:bc:22:11:eb:93:7d:67:2b:c1:
b2:03:a1:f0:73:eb:dd:f6:42:0d:93:83:04:8f:a3:
7d:3d:4d:6f:c6:cc:52:0a:88:b2:f7:6d:38:62:e1:
a9:7f:29:83:a3:6f:c4:42:1d:69:b7:99:29:61:45:
6f:c5:ce:af:ba:80:de:47:93:94:7a:75:5c:c1:41:
2a:f7:77:1e:eb:85:85:ad:aa:1c:08:41:30:95:d3:
79:f6:31:40:73:05:20:3f:34:38:f4:4c:c8:60:bd:
9d:09:75:e7:5b:ac:2f:48:93:b1:be:bb:df:16:08:
22:4c:a9:37:68:8e:e6:69:f5:35:68:e1:a9:6d:1c:
72:d5:d6:eb:4a:f8:98:a9:3d:b2:f0:42:62:53:03:
de:5c:28:99:53:69:f5:72:f0:cd:41:0e:a2:43:b1:
97:97:88:02:80:02:8f:0a:70:26:07:3c:b2:9a:8f:
be:8e:6b:63:60:01:16:d2:8b:63:b4:32:91:64:3c:
72:7f:aa:2e:09:43:cc:24:d7:5f:7a:6f:94:ab:fe:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:EC:6D:5B:EF:2B:62:D5:02:BA:F4:8D:45:AD:54:55:A3:A6:14
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:19:d4:f0:43:3b:88:d2:89:9e:0b:4b:5e:e6:9f:de:79:4d:
55:5d:b5:67:25:85:22:bd:7c:c6:65:95:49:63:71:cb:e4:02:
e7:da:f4:0d:5f:ed:af:61:16:4f:7b:6a:af:f1:31:bd:2b:eb:
fb:df:23:a3:15:96:b8:b3:3e:d8:42:96:92:64:e1:dd:39:da:
58:08:4b:f4:af:20:05:77:7e:3c:71:d2:6a:29:39:38:c4:54:
c2:da:c9:62:38:4f:b3:10:8b:62:f4:50:b4:f1:c3:09:04:39:
a8:86:e3:2d:e9:4b:e6:78:2a:e6:59:cf:11:1e:58:93:6b:e0:
2d:a3:0c:04:9f:4b:62:50:80:d1:d2:65:17:1f:3e:27:05:2e:
89:0e:c4:48:51:54:c3:40:96:16:57:10:90:04:6b:9b:76:95:
9f:17:7e:51:38:79:a8:61:64:ac:4e:8f:10:26:10:ca:9f:cd:
55:3d:75:8c:47:ad:60:5e:2f:6e:e0:a6:82:e6:54:06:ae:55:
e8:21:74:98:46:2c:18:e9:f2:73:a7:8f:81:40:7b:a5:38:7c:
7a:78:a2:b3:f3:f0:14:58:50:48:dd:2e:9b:58:38:c3:26:85:
f3:f6:81:83:b1:ad:39:ad:4c:a6:59:a3:19:be:ad:18:c8:24:
5a:1f:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:48:56 2025 by rpki-client