Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File: iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier: aj1My/DG7iY5yHAx/Z6UTvCjwaYtnicOZQThaamsls8=
Subject key identifier: D2:43:35:B2:AA:3E:AF:16:A7:4C:CE:C4:37:E4:28:B4:04:1F:9A:82
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 019691165296C7DCE9706C98EAF0A12EC226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number: 1151
Signing time: Fri 02 May 2025 13:01:21 +0000
Manifest this update: Fri 02 May 2025 13:01:21 +0000
Manifest next update: Sat 03 May 2025 13:01:21 +0000
Files and hashes: 1: YR9oUfcPn7hi-EfIp0zPWNgdoLI.roa (hash: gZUlOd3rhYgj7y7iYiifqKrTqOs4vDy8o9fKugEnj2M=)
2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: /0slmpdj2tdBTzjvKSg3wiZ5GQNBxEeYkjSKMJ3elGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:52:96:c7:dc:e9:70:6c:98:ea:f0:a1:2e:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: May 2 13:01:21 2025 GMT
Not After : May 3 13:01:21 2025 GMT
Subject: CN=d24335b2aa3eaf16a74ccec437e428b4041f9a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:4a:dc:de:7f:03:9b:87:a3:22:81:92:c7:
69:17:c9:f4:9d:ed:9f:b8:9e:bb:6c:a0:6d:7b:32:
57:4a:f3:3b:e9:57:02:4e:f0:bd:6e:bb:42:1a:a9:
50:3a:15:f4:b8:f9:40:ae:89:ab:00:19:77:93:c2:
20:15:87:28:5b:60:35:98:a9:6b:66:82:41:c4:8b:
fb:57:1f:2e:63:5b:51:be:44:34:aa:ec:7c:4c:08:
ad:f5:53:6a:5d:fd:ae:ac:e8:a4:6b:d2:4e:74:d7:
a7:b5:a0:8d:17:19:24:55:cd:91:b2:6f:9c:91:15:
f4:cb:d0:a1:54:fe:b9:e2:3d:2f:a4:d9:ff:a8:c6:
75:2d:52:05:4b:4e:0d:32:c4:53:1d:2a:a9:9c:b2:
59:da:9c:0d:83:10:c9:6e:99:0e:bc:bd:83:f7:7f:
90:c9:64:03:ef:7e:98:85:89:54:f2:04:8b:3a:1b:
5b:f4:de:c3:1d:50:29:56:e6:46:db:bb:34:67:c3:
66:c1:0a:3d:91:11:e6:be:a0:f6:b6:70:c4:8f:09:
a4:ca:4c:54:f6:d8:af:a9:c1:0c:8c:49:ce:24:9b:
40:33:4d:1a:de:fc:ba:e3:87:a0:c6:1e:8b:54:6e:
36:87:56:93:a4:49:91:89:2a:5d:83:2c:fe:2e:0f:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:43:35:B2:AA:3E:AF:16:A7:4C:CE:C4:37:E4:28:B4:04:1F:9A:82
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e4:b6:c0:6e:6c:9f:a5:72:bb:15:ec:6a:3a:17:bf:41:77:
40:4e:49:b1:f3:b4:7a:4b:f1:9f:35:ab:89:8a:91:c4:0e:04:
68:d9:da:c8:96:b9:0f:41:03:47:10:d5:6a:39:d5:bf:96:fa:
86:3d:b8:98:87:60:da:fb:fa:18:57:84:e6:6e:ca:46:ca:d4:
9a:12:2c:5e:77:3b:3c:26:f4:e6:90:f0:13:cb:be:fb:8b:79:
ae:4a:f7:1a:4a:25:c2:94:5c:c0:fe:47:0a:20:b4:7f:ae:43:
dd:56:92:ef:5d:05:4b:2b:81:7b:9c:bd:f7:07:18:35:4b:7d:
18:cd:c1:ea:47:aa:1e:7a:dd:2f:1d:46:4e:f9:b5:5d:64:8c:
e2:f1:80:ba:25:59:ee:41:3b:4f:4c:2d:34:41:a6:40:ee:d6:
da:9e:6c:00:58:cb:5a:e7:2d:bb:9f:f1:53:f6:47:14:22:a8:
0c:fe:af:18:ed:ce:6e:45:2f:fc:c3:ee:13:32:3a:9f:13:d1:
a4:cd:ef:59:a4:e6:91:61:c8:84:87:ce:7f:1a:9b:72:34:fc:
15:41:79:91:78:a5:97:1f:33:2f:8d:d6:d9:1b:99:9a:b8:7d:
3b:5a:7a:16:46:f9:41:ec:98:01:53:6a:c9:a9:23:e5:87:f3:
cf:12:7f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRFlKWx9zpcGyY6vChLsImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjFmZmFkZTkzMGJkMWZkMmUxNzg4Y2ZmNDA3ZDlkMzQx
MzRlMTcwHhcNMjUwNTAyMTMwMTIxWhcNMjUwNTAzMTMwMTIxWjAzMTEwLwYDVQQD
EyhkMjQzMzViMmFhM2VhZjE2YTc0Y2NlYzQzN2U0MjhiNDA0MWY5YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AlK3N5/A5uHoyKBksdpF8n0ne2f
uJ67bKBtezJXSvM76VcCTvC9brtCGqlQOhX0uPlAromrABl3k8IgFYcoW2A1mKlr
ZoJBxIv7Vx8uY1tRvkQ0qux8TAit9VNqXf2urOika9JOdNentaCNFxkkVc2Rsm+c
kRX0y9ChVP654j0vpNn/qMZ1LVIFS04NMsRTHSqpnLJZ2pwNgxDJbpkOvL2D93+Q
yWQD736YhYlU8gSLOhtb9N7DHVApVuZG27s0Z8NmwQo9kRHmvqD2tnDEjwmkykxU
9tivqcEMjEnOJJtAM00a3vy644egxh6LVG42h1aTpEmRiSpdgyz+Lg9L0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJDNbKqPq8Wp0zOxDfkKLQEH5qCMB8GA1UdIwQY
MBaAFIsh/63pML0f0uF4jP9AfZ00E04XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQt
NDI1YzUxZDc4ODhiLzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85Y2UwZWItM2FiYS00YjM2LWI3YzQtNDI1YzUxZDc4ODhi
LzEvaXlIX3Jla3d2Ul9TNFhpTV8wQjluVFFUVGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeS2wG5s
n6VyuxXsajoXv0F3QE5JsfO0ekvxnzWriYqRxA4EaNnayJa5D0EDRxDVajnVv5b6
hj24mIdg2vv6GFeE5m7KRsrUmhIsXnc7PCb05pDwE8u++4t5rkr3GkolwpRcwP5H
CiC0f65D3VaS710FSyuBe5y99wcYNUt9GM3B6keqHnrdLx1GTvm1XWSM4vGAuiVZ
7kE7T0wtNEGmQO7W2p5sAFjLWuctu5/xU/ZHFCKoDP6vGO3ObkUv/MPuEzI6nxPR
pM3vWaTmkWHIhIfOfxqbcjT8FUF5kXillx8zL43W2RuZmrh9O1p6Fkb5QeyYAVNq
yakj5YfzzxJ/Hg==
-----END CERTIFICATE-----
Generated at Sat May 3 00:04:39 2025 by rpki-client