Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: EHFnzy+io4Hr39oJkGyfKHUlQk9P3DduC3dJ1Nk2mXc=
Subject key identifier: 19:45:75:17:DE:D7:CF:4A:CC:59:91:DF:66:8B:C5:82:02:F9:74:13
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0196737928952F8833C2ACFC05E2E418879E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 083A
Signing time: Sat 26 Apr 2025 19:00:42 +0000
Manifest this update: Sat 26 Apr 2025 19:00:42 +0000
Manifest next update: Sun 27 Apr 2025 19:00:42 +0000
Files and hashes: 1: 1x2QkjrjfmH7457XFfnRPIPsvrU.roa (hash: hdLqZqotCS5NMzBAHyICUCVoucf1opCMX8HxfI3Xt9w=)
2: 3z6lktI1lDr4VGsD9ynpgjzyaiA.roa (hash: cu4Dj3hdfbNVBv8hLW6UGz1FhflqYtjIYtw5ySC1Qpk=)
3: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=)
4: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=)
5: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: rfsWqkLEsXy+lF2TZdvwEkcTamPHM3FT0dVSU4nkKTU=)
6: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=)
7: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=)
8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:28:95:2f:88:33:c2:ac:fc:05:e2:e4:18:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Apr 26 19:00:42 2025 GMT
Not After : Apr 27 19:00:42 2025 GMT
Subject: CN=19457517ded7cf4acc5991df668bc58202f97413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:26:9d:da:16:95:bb:5d:8c:81:da:e1:75:
11:40:c2:0c:32:72:76:2f:6d:19:99:ec:b2:41:91:
18:00:65:18:64:ad:a4:0f:9c:1f:66:02:7c:9e:75:
1a:66:e0:ca:1a:eb:f1:01:12:98:8f:7b:3c:1a:62:
85:37:be:f0:fb:f2:31:0f:32:fa:6f:f8:8a:71:ab:
ef:f2:44:2f:cc:62:9f:fd:83:df:d1:84:18:8f:ed:
ce:90:cf:f6:79:ed:b9:b7:28:ba:a0:50:a4:02:29:
24:34:a8:0b:99:f2:da:3b:3c:3f:3b:6b:30:cb:26:
39:01:d6:a1:26:3c:5a:52:19:a6:33:80:7b:99:db:
45:bd:7c:04:b9:49:b5:d6:0b:48:30:bd:5e:9e:30:
cb:5a:67:97:57:60:46:3c:59:53:5a:43:79:88:51:
86:6c:e3:e7:f5:2f:0d:85:5b:f2:cf:63:84:5d:d0:
61:2a:a2:80:d4:9b:dc:5f:97:1b:b6:46:9b:cc:b8:
78:43:96:69:26:8e:ad:5c:4b:d2:91:06:ab:ac:40:
52:d4:56:2d:61:d5:93:79:75:ad:81:3d:a3:c1:cb:
2f:40:91:d8:73:b7:ca:2f:2e:eb:e4:c2:6f:8d:ae:
a9:43:70:e8:04:68:11:d8:fc:51:0f:0c:bd:7f:ee:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:75:17:DE:D7:CF:4A:CC:59:91:DF:66:8B:C5:82:02:F9:74:13
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:c1:b4:9b:0f:aa:f5:2d:fb:e3:d1:49:9f:75:9f:43:48:
3a:ba:d4:40:39:9c:0a:1a:c5:32:74:95:a1:4a:f0:02:da:13:
ff:22:c9:4c:fd:6e:0f:91:5d:d2:69:d3:59:b0:40:82:99:2d:
5a:1c:4f:76:17:dd:08:0a:66:77:d1:89:79:0f:52:7d:bb:a4:
c9:20:01:fa:ca:d4:6f:43:a2:4e:d2:37:b5:98:ab:a7:da:5d:
01:b0:92:42:64:12:b8:2b:1d:dd:e5:ba:95:57:d4:47:ac:29:
a0:43:28:29:ce:12:2e:bc:9e:d0:b7:0c:c7:6f:a3:d6:c3:b6:
1f:ad:32:3c:f0:2d:66:5e:4a:cc:84:f9:45:67:fd:18:5b:6b:
77:94:eb:12:cf:b7:4d:f9:57:47:7e:d6:85:80:7a:c8:7d:c6:
7e:24:65:c1:3a:79:fc:79:f1:20:89:57:5a:43:ec:cf:b0:22:
d6:ec:70:86:30:39:84:83:0f:9c:7c:df:b6:48:24:c6:8b:f0:
72:33:d4:a6:93:52:35:ac:3a:95:8c:5c:b7:e4:69:d5:d8:5e:
87:68:77:24:e6:a4:b8:ec:fa:80:0e:3d:02:d8:a8:e0:8b:aa:
2f:5f:c0:c8:4c:a0:36:ab:7c:b9:60:41:e1:4b:75:4d:27:f5:
d8:21:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:30 2025 by rpki-client