Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File: IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier: O70Xzf3l129ZhZrjnKJoGRWem7QCyWH31d+HlDY3s9U=
Subject key identifier: 72:77:B1:EE:73:E9:CE:32:6F:C0:BF:C8:EA:96:54:11:1D:FA:9C:8E
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 019676B10B875C7AFE0717754DEC7919E7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 10:00:36 +0000
Manifest this update: Sun 27 Apr 2025 10:00:36 +0000
Manifest next update: Mon 28 Apr 2025 10:00:36 +0000
Files and hashes: 1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: +rtS/XjWMx16XuZHf+AgtzoaXp7k4mUuUIy+TJZhJEw=)
2: gxfPyS5KakpFEwmfLQLrUMtzDuA.roa (hash: rxllc4raZ48lNaZN0VdX0i2mHb0wFctajLKxvoGGQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:0b:87:5c:7a:fe:07:17:75:4d:ec:79:19:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Apr 27 10:00:36 2025 GMT
Not After : Apr 28 10:00:36 2025 GMT
Subject: CN=7277b1ee73e9ce326fc0bfc8ea9654111dfa9c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:18:07:ef:cc:bf:28:30:4e:76:79:8b:89:
2c:f2:13:4b:95:f2:cf:57:f2:0a:32:3a:2e:20:69:
17:67:f5:ab:65:36:cf:35:56:29:94:71:cb:74:18:
fa:ac:b3:6b:92:5e:49:12:7c:2d:96:c0:35:b5:3c:
38:bd:6f:e0:86:13:e3:96:a4:aa:9a:92:a5:fc:00:
8f:6e:0f:65:95:b4:84:51:f7:55:a3:6f:56:66:3f:
b6:0a:8d:4c:07:1b:f4:01:9a:5c:c4:56:b5:5a:18:
17:ac:81:bd:d7:9b:df:04:75:5d:8f:ce:cd:b4:9f:
70:83:f6:a5:b6:a6:be:cf:15:c5:51:17:2a:2d:28:
5d:bb:3b:57:d9:1e:50:02:c2:9e:d4:fa:2f:f4:02:
31:53:31:91:e7:36:f3:82:f4:0c:95:10:b3:0d:87:
df:97:4b:01:59:6d:b3:51:22:ff:c9:eb:c1:08:6a:
92:1d:2b:d2:0e:5a:ff:0d:d1:2f:97:22:e3:9e:91:
9b:02:7c:c6:b1:04:d6:a5:12:81:47:e8:cd:3e:97:
8c:4b:3a:ba:a2:d8:ab:cd:16:9f:6f:71:f8:2c:85:
d9:f5:0a:a5:05:2d:9c:65:e0:8e:54:a1:01:e9:71:
c9:f6:96:53:15:45:a2:7b:32:63:bf:6d:4f:05:c9:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:B1:EE:73:E9:CE:32:6F:C0:BF:C8:EA:96:54:11:1D:FA:9C:8E
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:30:80:b8:f6:b3:56:d7:eb:5f:aa:f3:25:90:d2:e3:9a:
e2:92:db:ca:66:01:0e:05:6d:17:19:57:01:d8:11:df:83:9f:
53:51:4c:94:f4:5c:65:64:ff:c4:9c:f5:9f:d6:7c:1b:5d:73:
08:2a:42:9c:55:30:65:9e:69:2a:11:25:14:72:67:26:7c:3c:
98:1a:a8:eb:c1:31:05:18:7d:df:7f:28:e9:2f:59:f3:34:d9:
fe:e6:3e:24:c5:66:6c:27:ca:63:45:42:54:e0:bd:ba:c1:3b:
13:e5:c0:ae:b8:9c:ad:ca:2e:80:e7:6c:30:71:10:b0:65:4f:
f6:6c:45:3e:47:15:96:6a:30:52:d6:90:1e:11:d4:98:af:12:
ab:fe:b5:5a:ca:97:61:ab:16:5b:f2:e7:f6:6f:28:41:4f:a4:
1f:03:7a:26:ea:ca:be:1c:40:ba:16:04:9e:5c:ad:c6:40:95:
71:23:f1:a2:fa:ce:7c:29:b9:13:8a:09:ed:0c:0f:7e:f5:17:
d4:14:2f:5e:72:2e:4c:41:d3:15:8f:d5:65:d6:f5:4f:b9:42:
b4:14:65:73:e0:69:1a:cc:24:0e:63:b9:c8:96:e5:87:e9:d1:
01:19:3c:9f:ec:29:2c:c1:22:2f:58:4d:69:9a:32:ca:10:00:
87:58:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:22 2025 by rpki-client