Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: rpHPSkXKBC+ri6rsPFFdu+J0k5BR3jyts7RKwGrSntg=
Subject key identifier: 66:90:5C:F0:60:96:39:7D:B4:FA:DA:C5:6A:9D:FB:DC:D7:98:D0:C7
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 01967A569E7BA16A18A038D07919F16A2E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 1F
Signing time: Mon 28 Apr 2025 03:00:19 +0000
Manifest this update: Mon 28 Apr 2025 03:00:19 +0000
Manifest next update: Tue 29 Apr 2025 03:00:19 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: Svz3u4XVPQRgNgjONglpKrhfJYXLYDboIHjjb1o4DEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:9e:7b:a1:6a:18:a0:38:d0:79:19:f1:6a:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Apr 28 03:00:19 2025 GMT
Not After : Apr 29 03:00:19 2025 GMT
Subject: CN=66905cf06096397db4fadac56a9dfbdcd798d0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:53:be:24:01:37:3b:9c:65:d5:7d:d7:ef:
23:17:89:09:69:b5:89:d3:60:d1:f7:8e:8d:f0:5d:
98:5d:c2:ec:75:77:61:56:cd:7b:d6:04:9b:4f:00:
37:e0:fe:1e:64:54:46:3f:5a:eb:dd:64:61:1d:51:
5d:3b:35:58:76:e9:a3:85:8b:38:3e:6b:32:04:61:
db:1a:ed:ab:b5:bb:1a:ea:0d:85:90:b2:4a:e8:0e:
52:f3:53:b1:f9:72:de:6a:5d:b5:33:50:c1:d4:2e:
3a:01:07:41:cf:bf:ce:b3:a9:9a:12:60:08:c2:38:
84:4f:84:ff:7b:1c:f0:4a:34:df:9d:a7:7e:00:90:
51:01:09:44:f5:e8:fd:62:7c:7c:ef:2e:30:c8:86:
9e:2b:bb:c1:eb:f0:a4:c0:5b:a7:fd:aa:30:fd:08:
15:e8:3f:33:51:6b:94:08:b6:34:58:7b:f1:2e:3d:
3e:57:00:cf:7c:ec:32:ef:82:34:ea:db:59:6c:c9:
91:4d:86:bd:ba:ea:9d:4a:4d:a9:2c:dd:c8:4d:cd:
e9:02:15:bc:26:f9:28:5c:0a:8f:a3:e0:db:60:d5:
b8:ca:58:7c:f4:60:e6:e9:e1:24:c6:5f:26:20:b6:
a7:02:e4:c1:45:7f:b7:46:63:27:66:d2:81:55:f6:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:5C:F0:60:96:39:7D:B4:FA:DA:C5:6A:9D:FB:DC:D7:98:D0:C7
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:9e:a5:ef:e2:64:64:9b:15:8d:f1:43:71:f2:c6:ba:2f:
45:be:9a:3e:77:58:50:a2:a1:02:2c:4c:da:88:ce:28:17:ce:
09:a4:8b:1d:65:94:d1:dc:40:a5:30:32:5d:3a:bd:60:53:b9:
eb:59:79:20:cf:4f:3e:96:e4:30:8e:2a:96:5d:c6:32:68:3a:
2a:fb:09:59:64:a1:49:21:c6:4b:0f:a9:54:b2:be:7f:44:32:
45:b6:15:42:b4:a3:ed:e2:ff:b4:9e:a7:55:a0:fa:f2:07:b8:
3f:e0:3b:c3:56:50:56:a6:f4:d5:9a:e1:fd:fc:20:8c:2f:66:
be:d9:49:62:92:c0:09:95:38:07:ff:a0:61:fb:59:e0:9e:97:
31:3c:85:5d:7d:81:26:8d:2d:19:13:31:1e:5d:72:62:af:12:
ed:c6:4d:c2:9e:c1:9c:61:96:25:42:7b:15:18:d5:95:4e:21:
c2:7f:32:72:e4:ff:f1:c1:b9:52:ad:48:52:3f:0e:a6:d2:68:
17:19:71:7c:5d:be:a4:f0:01:a9:05:9c:c2:f0:79:9b:fa:af:
7b:b1:f3:c3:2e:51:4f:d4:2e:c9:3c:db:af:d5:35:95:bf:8a:
a9:b5:56:a4:b5:6a:1f:74:45:f8:66:84:7b:22:f3:85:97:6e:
07:8b:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:12 2025 by rpki-client