Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: kgIJyoih5ljXNbp+zdwEfLA4xM6qg6CyvK8/QDhA1H8=
Subject key identifier: FA:0E:5D:A1:22:F9:63:E6:F3:7D:B7:D0:96:76:6D:40:38:61:89:AD
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 01968B1369338BB3BD1F8BB5C62248DB9AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 151F
Signing time: Thu 01 May 2025 09:00:27 +0000
Manifest this update: Thu 01 May 2025 09:00:27 +0000
Manifest next update: Fri 02 May 2025 09:00:27 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: RyxU1zuyypxtXHzyJoUbxMo0+q9VTrbgXnnpzSxTgHI=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:69:33:8b:b3:bd:1f:8b:b5:c6:22:48:db:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: May 1 09:00:27 2025 GMT
Not After : May 2 09:00:27 2025 GMT
Subject: CN=fa0e5da122f963e6f37db7d096766d40386189ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:92:9c:1f:43:d2:fa:16:7b:d4:1f:d8:24:
f9:4e:85:b6:88:b0:16:64:cd:73:29:f7:55:01:fa:
02:14:e6:e5:0f:91:b1:5d:db:0d:22:93:e3:29:a8:
bb:f6:89:24:16:af:f1:73:c7:9a:27:2a:68:0f:2f:
a8:49:24:69:45:89:94:79:32:c1:d4:6e:0c:ed:b4:
76:bf:50:b7:7e:06:df:e3:8a:65:92:40:8f:19:fe:
54:01:3a:8e:7a:76:3b:34:78:28:6f:06:80:07:35:
81:18:cd:99:95:43:5c:90:e9:f4:6f:34:4e:5a:db:
21:4c:e1:cf:17:4c:41:f7:96:c2:2a:d2:0b:86:21:
1a:ea:b0:11:7a:b6:a2:c3:10:f9:13:f0:f5:18:f6:
b3:3a:b0:cb:23:ed:eb:71:de:07:56:f0:18:7e:f0:
e2:7d:1c:f0:44:40:a6:14:ab:80:ac:20:aa:d7:37:
8a:3c:b8:44:64:72:3f:15:38:ae:21:d2:ad:49:28:
38:42:d9:eb:23:88:c2:08:c4:07:a6:d7:9f:a3:ac:
2a:e8:0f:5e:d1:26:af:c6:07:d4:55:a2:75:d9:12:
95:cf:7d:1c:71:8a:b2:e1:dd:33:9f:69:e9:8c:51:
1c:09:82:d9:ec:83:13:f1:6a:34:bb:dc:67:fa:11:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:5D:A1:22:F9:63:E6:F3:7D:B7:D0:96:76:6D:40:38:61:89:AD
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:80:1d:33:0d:6d:16:a3:91:89:39:ac:3b:5f:79:94:e1:fe:
95:bd:58:40:61:43:23:ac:10:17:8c:89:e9:e8:83:a8:ed:61:
eb:85:e3:c7:26:f7:cd:60:86:dc:da:aa:94:3c:ff:16:5a:73:
49:a6:ba:6e:c2:2f:4e:f9:c9:67:2f:ad:4f:a4:5b:a7:ca:df:
a0:3c:8d:fc:bc:4f:64:59:06:77:eb:24:a7:e0:39:f8:d6:cc:
67:c6:db:b0:8b:69:ed:41:ef:31:ed:52:b3:1d:da:ae:2f:ff:
65:34:f7:03:bd:06:85:6d:13:b6:cf:3c:ce:ff:9b:14:c1:c6:
b2:21:75:b1:05:cc:53:5c:4d:2e:89:9f:2e:3b:90:13:5d:3a:
da:fa:4a:b7:e1:ab:91:62:4a:c6:06:61:2a:9e:4b:fb:3c:94:
34:72:ab:f6:b6:40:b1:53:32:36:40:94:01:7b:16:56:31:1c:
8c:f9:2c:2c:20:a0:50:b3:07:51:4a:20:a7:07:30:6f:bf:50:
57:a1:1f:23:58:31:c0:77:c1:49:8b:d6:26:40:28:75:ed:ef:
6f:52:fb:7d:8c:bf:88:05:9b:e8:19:15:51:78:54:4a:a9:1e:
19:b4:85:ba:27:b2:af:ce:b3:0f:48:14:51:72:6e:ec:57:19:
21:87:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:07:41 2025 by rpki-client