Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: qK9AZlGV+oFUPtJNKX5WD0dg/Xv8jx/g1/DmBA7wuxM=
Subject key identifier: 4E:8F:55:93:9B:75:A6:B3:93:21:B5:68:4B:15:B0:B1:DA:EB:64:6E
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 0196748B9F5D9612FAF6ECAFD1A0F48B2D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 00:00:29 +0000
Manifest this update: Sun 27 Apr 2025 00:00:29 +0000
Manifest next update: Mon 28 Apr 2025 00:00:29 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: iWR57cJb6ukeNj8m6KlSTDdyWlz1t6Ovif50wfai9jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:9f:5d:96:12:fa:f6:ec:af:d1:a0:f4:8b:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Apr 27 00:00:29 2025 GMT
Not After : Apr 28 00:00:29 2025 GMT
Subject: CN=4e8f55939b75a6b39321b5684b15b0b1daeb646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:91:b4:ab:86:ef:1b:3e:55:15:a8:a1:18:
f3:26:be:a0:6c:aa:ba:10:1a:74:88:7c:fd:2a:91:
40:50:1a:90:06:e1:56:a3:e5:3a:6f:5e:85:5b:ce:
5b:6a:a1:20:b4:4f:a4:77:1f:db:96:9c:7c:77:64:
af:d0:2e:58:7b:68:b3:f4:cb:3c:14:b3:69:51:27:
31:e6:ce:bd:82:b7:ac:53:a3:a1:6c:11:ed:77:7a:
ef:24:e1:a6:07:2a:06:f7:cf:ac:9b:d4:c9:89:b8:
88:79:f8:fe:ba:a6:aa:29:11:ef:e0:c4:71:0b:37:
29:4f:68:99:59:49:9c:f0:a4:27:b9:d2:4b:bc:9e:
03:ef:d4:b9:58:f4:3a:d9:0c:79:56:9a:e0:c6:19:
fa:14:74:64:d0:d5:14:b7:00:97:71:b6:e7:52:a7:
49:35:f1:0c:f0:f2:00:48:6d:f4:5e:9d:66:d6:70:
70:b4:b5:0f:42:65:cc:2c:b6:3b:a9:0f:29:6c:79:
1b:dc:78:36:de:df:96:57:db:50:9b:ee:ef:86:9f:
6c:31:3f:b2:87:59:f1:63:42:3e:2e:8b:6c:d4:48:
3b:c5:d4:91:fe:13:df:aa:11:45:e8:bd:bb:cf:4b:
c8:f1:af:14:f7:cd:ee:77:79:86:14:2b:ed:e7:39:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:55:93:9B:75:A6:B3:93:21:B5:68:4B:15:B0:B1:DA:EB:64:6E
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:65:35:95:bf:50:56:bc:30:a1:83:92:84:87:ed:b3:b3:68:
4e:89:79:c7:12:57:21:99:39:d8:34:87:50:db:47:15:f1:74:
86:c0:8b:62:bb:fe:0d:53:6f:80:f6:3e:e4:86:3c:7d:0d:ba:
ca:64:ed:cb:fe:c8:4e:07:a4:12:53:d8:b2:8b:c7:ef:49:43:
83:f9:3b:52:a0:96:ca:d8:5a:c5:bb:80:25:9d:fb:f2:25:83:
de:c9:01:f3:b3:7c:7b:08:e7:59:75:34:63:dd:e8:03:28:bc:
4d:f9:a7:75:b1:5a:ba:a2:46:a8:73:cc:07:e8:23:b4:3f:eb:
eb:0f:54:bb:3d:69:da:48:e8:d0:65:e3:f3:3a:04:78:98:91:
12:86:16:55:50:76:5d:e4:44:b8:f5:7b:3f:0b:c9:7a:7e:df:
02:11:75:d7:e0:05:8c:91:ef:d8:65:01:43:a6:b5:4b:18:10:
fc:30:67:07:e9:b9:15:99:d4:60:17:15:8b:3a:50:fb:01:8b:
e3:15:90:4d:c7:fe:22:28:3c:ab:e3:3b:3c:a1:10:14:8d:d3:
b3:6d:4c:c1:84:33:e6:48:bc:8d:3a:7e:38:b2:95:43:ac:74:
cf:df:85:5d:95:4d:a9:c7:dd:b8:4a:7c:84:91:c0:d8:32:54:
7f:7c:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:15:20 2025 by rpki-client