Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: OUbS98huF5r/aC3fo2Gf02md9Vp6H+WWMEgiiVa4d40=
Subject key identifier: 93:36:CC:D4:8A:03:C8:E0:4F:79:EC:F7:D5:56:16:8D:0A:17:48:68
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 0196748B5C452E2FC25E9B631BC031A41372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 00:00:12 +0000
Manifest this update: Sun 27 Apr 2025 00:00:12 +0000
Manifest next update: Mon 28 Apr 2025 00:00:12 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: +piWraCFDR6ms57zshg02Rk/i7bZObQT+pCzqvtH5Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:5c:45:2e:2f:c2:5e:9b:63:1b:c0:31:a4:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Apr 27 00:00:12 2025 GMT
Not After : Apr 28 00:00:12 2025 GMT
Subject: CN=9336ccd48a03c8e04f79ecf7d556168d0a174868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:d4:79:f1:63:df:e8:b6:18:28:e0:1c:b0:
d1:b3:17:be:35:c8:77:e8:af:b9:a1:15:c8:64:ba:
14:b9:95:30:22:80:45:ec:12:a7:27:4a:b5:96:5d:
f7:9c:be:3c:80:c1:c3:47:45:ee:90:e6:a2:fb:a5:
54:1a:8f:ca:85:48:03:21:d1:42:d7:df:5c:e6:79:
37:83:75:ce:17:83:81:c7:28:19:8d:ce:76:11:63:
7f:e3:0c:72:0c:91:58:d1:57:b9:7f:51:2c:9a:7c:
42:8b:23:dd:61:5b:a9:88:9c:d9:a9:00:83:1f:5d:
45:a7:d9:84:f4:56:15:4b:df:c6:18:63:98:ef:93:
6a:cd:f7:6c:ab:95:6b:13:b3:30:dd:65:17:26:02:
6e:c0:ca:03:9a:e7:47:4f:e5:27:b5:8b:4b:af:2d:
d0:12:09:fe:b2:7b:f6:d7:cc:59:41:ad:5d:32:cf:
9d:41:04:19:2e:28:68:77:3c:5c:ae:ae:62:a7:4d:
da:e5:8d:04:91:66:d1:0e:e9:30:b7:19:fe:ed:ac:
b2:87:6a:f6:00:0e:9d:bc:c8:f8:f5:59:dc:87:db:
6f:d4:c7:3a:96:a7:84:8e:78:3d:69:15:6a:f1:c9:
18:f3:2d:99:76:0d:9c:72:4f:47:95:ad:eb:d9:ff:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:CC:D4:8A:03:C8:E0:4F:79:EC:F7:D5:56:16:8D:0A:17:48:68
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1e:48:27:55:fa:86:4a:b0:92:b7:92:3c:fb:78:04:7a:40:
95:79:12:c5:5e:2a:7d:77:ce:17:ea:4c:f7:58:94:f7:e0:a1:
70:dc:a3:41:96:0d:f7:e4:6d:7a:da:a8:b9:c2:79:0a:92:08:
48:6c:68:95:d0:ee:65:4e:8e:de:c7:e9:87:cb:d7:05:56:78:
6c:37:1b:a8:bc:c9:61:d7:c2:16:50:ee:4b:c6:4f:dc:d1:75:
73:e7:2d:80:55:74:0f:6d:65:80:c4:96:f7:ef:37:1a:42:cf:
78:98:e3:89:d0:cc:3c:d6:a1:55:e5:ab:c2:fd:4d:28:a1:ff:
5a:4f:38:7f:97:d4:b4:75:7e:2d:40:39:d1:95:51:6f:9d:8f:
41:b8:21:b9:01:c7:1c:b1:24:a5:21:31:99:a2:0f:3a:da:89:
4b:92:46:83:ca:1c:e7:60:ae:db:72:33:7f:37:40:a2:0e:8a:
91:79:43:c3:79:cf:45:af:40:b6:81:e2:b5:c5:7a:ba:96:c5:
de:ae:84:d9:a5:06:eb:e6:0e:0f:cf:e6:b0:73:e8:e4:6a:08:
b3:c1:dc:34:68:3c:f6:00:13:f4:a5:d1:82:23:dc:3a:5b:86:
80:88:93:d1:66:1e:d2:80:2f:8f:38:d0:6b:21:d2:af:ea:31:
87:37:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:44 2025 by rpki-client