Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: K0fAdgcJnP2gCjhM9I5RPqUqm1+/BEt22OWU/919ov0=
Subject key identifier: 83:D5:2E:E6:DA:C6:B4:D1:22:59:87:FB:84:59:2A:0E:98:A0:C6:6D
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 0196839164474FFB0D01929E6F448AE9455C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 0506
Signing time: Tue 29 Apr 2025 22:01:05 +0000
Manifest this update: Tue 29 Apr 2025 22:01:05 +0000
Manifest next update: Wed 30 Apr 2025 22:01:05 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: ro+PeRqZs4WX9IuXuN7XcI/HFh3JvS+raBGi20niFfM=)
2: ZXtK8i0ZkTBxTFkF4gT8SCIZTmw.roa (hash: KikSjMlfZMQPJYB8hmRvlc00FrgqM6UWZDTUG/QEicY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:64:47:4f:fb:0d:01:92:9e:6f:44:8a:e9:45:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Apr 29 22:01:05 2025 GMT
Not After : Apr 30 22:01:05 2025 GMT
Subject: CN=83d52ee6dac6b4d1225987fb84592a0e98a0c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:45:65:6b:7a:67:eb:00:a4:da:81:09:ce:d7:
6f:c6:97:e9:82:8b:bb:3c:13:dd:00:0a:72:93:bb:
fe:9f:19:d0:f9:e5:29:a0:46:f2:74:40:85:be:e8:
eb:4f:62:e7:97:b4:19:45:5e:35:c4:0b:80:73:7b:
be:fa:11:43:8c:9c:91:ca:bd:d2:40:98:0c:f2:c4:
1b:9e:30:a9:c0:de:fb:c1:c6:df:7c:5a:c2:3a:b0:
4d:9c:82:ea:63:d4:97:e6:38:de:53:64:f9:be:3c:
68:e2:a2:75:b3:f5:8a:ec:90:bf:7f:90:b1:aa:ab:
75:76:bc:a8:01:71:a7:55:eb:9d:75:de:4d:88:3a:
2d:f4:58:be:c1:be:4d:dc:9e:27:00:11:b1:5c:7d:
aa:26:90:92:e8:db:52:1b:99:9c:aa:c3:ad:e7:cd:
35:09:cd:b4:99:12:f8:01:1e:dc:58:43:fb:78:99:
7c:ad:65:6b:d2:c2:2a:18:7c:b6:53:f9:0e:58:b2:
77:00:13:2c:d8:07:5e:63:d6:4f:72:c3:49:4c:8f:
71:f6:9f:2a:04:92:e4:d2:31:4d:c7:b7:66:19:91:
38:13:da:53:31:f7:67:87:41:7e:29:fe:71:92:b7:
c2:90:97:e4:03:7a:77:89:00:7e:a0:6d:ef:5d:71:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:2E:E6:DA:C6:B4:D1:22:59:87:FB:84:59:2A:0E:98:A0:C6:6D
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a0:bb:25:b5:5d:62:99:dd:00:80:f7:9d:ce:51:6a:b6:b1:
0f:b7:86:f2:f1:ce:92:39:a2:fa:f4:19:15:6a:1b:63:5e:3c:
d4:bc:1b:aa:76:23:db:ea:d3:7a:e9:5b:22:66:60:d7:43:8a:
6c:b5:95:a0:46:a5:25:79:a0:3f:ef:4f:c4:c1:6e:21:04:97:
c7:a7:61:8d:90:e7:e5:36:08:a1:c7:2e:a7:75:07:66:9b:01:
1d:e1:53:bc:2b:db:34:ab:dc:18:b5:1d:77:5c:b7:ca:72:46:
aa:2e:88:f4:89:87:16:d7:90:56:fd:71:13:67:74:c9:67:a0:
04:b1:cc:23:20:8b:16:12:67:d3:04:30:9a:b6:63:59:8e:e5:
f6:40:5c:3f:8b:5e:2d:62:a5:49:a9:ee:42:a7:9d:50:1e:dd:
7f:bc:8e:ce:8c:9a:7e:07:16:74:74:84:ba:c7:df:8b:31:ff:
5c:a2:98:e8:df:cc:a7:f5:50:73:98:0a:71:1c:87:bb:d8:59:
ad:13:bb:7c:8c:d7:b1:82:fb:3f:5f:e4:1d:44:ae:07:b4:f8:
b7:0c:85:1c:a4:c4:31:8b:4b:18:49:59:c5:74:3b:06:9f:55:
72:04:f1:7d:ac:b4:f6:03:9f:8e:7e:93:ad:ce:a3:24:df:02:
8f:44:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:45:33 2025 by rpki-client