Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File: iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier: FzF+IjiyvKPZ3aYSL9yyUHVN8GiMIvqqvxLPjqK6dfA=
Subject key identifier: 40:77:63:EC:AA:46:A5:27:BD:98:73:91:9D:D2:E6:4B:06:DE:22:D0
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 0196759EBFD5271639A9B506683E8EC73943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:01:00 +0000
Manifest this update: Sun 27 Apr 2025 05:01:00 +0000
Manifest next update: Mon 28 Apr 2025 05:01:00 +0000
Files and hashes: 1: 1-dqt2rN6d4zMTr30hL21uHD8mgs.roa (hash: 9J3OxeItEP/tcUsxKEYBHkcY9sk3+Jl9zYiOLoIv6HY=)
2: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (hash: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=)
3: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: 24W/W3Yh74EZg1oX1kqM1F7c3omzWRYNdz7SGFi2Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:bf:d5:27:16:39:a9:b5:06:68:3e:8e:c7:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Apr 27 05:01:00 2025 GMT
Not After : Apr 28 05:01:00 2025 GMT
Subject: CN=407763ecaa46a527bd9873919dd2e64b06de22d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:7b:9e:d9:41:08:db:bc:41:87:da:4c:ac:
78:65:f2:36:a8:cb:a1:43:30:19:a8:aa:2b:d7:33:
fb:ae:ad:3d:8b:5e:e4:4e:6f:f7:0e:57:25:b2:8b:
f9:84:b8:7b:7f:99:8b:40:1f:c9:77:f3:07:70:ef:
79:78:5f:49:17:9f:15:d5:f8:8c:df:24:45:96:52:
87:61:f7:ce:94:3a:92:66:f6:29:71:54:3c:a2:57:
17:34:b7:6a:4e:11:a6:26:78:4d:a4:0a:cf:3f:11:
fc:cf:5f:92:5d:51:96:83:17:57:5c:58:c6:75:f5:
ab:c2:55:31:8b:aa:46:e2:be:2e:3c:c1:40:d7:6d:
9d:79:fb:2c:ec:da:cc:39:1a:8d:c5:4a:25:79:77:
84:17:28:27:cf:e6:dd:42:18:8f:2c:be:03:2c:15:
68:7b:d6:c3:7c:ad:26:0d:48:67:18:fd:25:e5:b4:
d4:29:c9:e3:53:c8:f3:d0:45:0d:21:78:52:d3:1d:
94:61:e6:91:ac:a7:ab:ee:d7:ed:f9:d1:cf:99:f9:
de:6e:0c:1b:43:96:b5:c4:52:c3:6d:1c:57:7a:4d:
57:0f:b2:90:61:45:04:d8:aa:bc:4e:e7:19:aa:61:
4b:15:ae:85:f8:34:69:d1:20:c6:64:70:f0:84:e9:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:63:EC:AA:46:A5:27:BD:98:73:91:9D:D2:E6:4B:06:DE:22:D0
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:81:8d:cb:72:4b:c8:f7:f2:f8:4a:f5:80:f8:df:e2:fe:
cf:c8:3f:56:c2:30:66:c4:9f:f3:38:b1:4f:f5:c3:56:a0:9f:
ef:42:bd:b6:84:45:aa:ad:4e:96:50:47:af:c4:18:67:11:d1:
b8:ac:6e:18:8a:08:12:85:bb:f7:04:e9:19:cb:3e:de:a2:b3:
60:42:9c:cc:49:03:08:28:1a:f9:e8:b1:9d:e3:39:aa:ed:f6:
ee:5d:70:57:3f:6d:0e:28:30:03:6f:69:09:d3:05:7c:22:42:
39:25:0d:87:38:cd:57:53:79:dc:be:ea:9e:06:e6:b9:e9:62:
35:16:21:64:6e:a0:a9:bb:a6:c6:c0:02:9d:c6:47:5f:ec:ec:
d1:9f:00:71:1f:60:58:ad:75:72:20:57:1c:72:56:56:66:c4:
06:95:51:55:2b:d7:1d:13:47:92:31:f7:b1:b3:3d:88:3f:9a:
89:b7:a8:d3:89:10:09:85:bb:63:e2:70:57:8a:f0:08:e0:09:
04:96:7e:53:0e:b0:00:75:65:e0:32:84:1a:f0:c7:9d:5d:69:
9b:7e:8c:55:2c:78:2a:06:c0:39:e8:2a:cb:89:34:48:de:2a:
71:c5:5f:6b:76:9d:3b:97:1e:a6:c0:43:ef:e2:23:fb:19:d0:
a5:5b:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:15 2025 by rpki-client