Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier: x8EJkclJHIn1eByPUKzW+5siUPzKFk5GLElJyA4NvTY=
Subject key identifier: FD:3B:2D:6F:BA:C3:65:33:A8:0F:84:1E:C3:A7:08:8B:D7:74:0C:BF
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 019674C249F3077C9AE278F6362EEDDF1CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number: 90
Signing time: Sun 27 Apr 2025 01:00:12 +0000
Manifest this update: Sun 27 Apr 2025 01:00:12 +0000
Manifest next update: Mon 28 Apr 2025 01:00:12 +0000
Files and hashes: 1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: YAjCqZ0vww4q6aZWZPg6YpX7VzxpEY7R1InfSLzcrkI=)
2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:49:f3:07:7c:9a:e2:78:f6:36:2e:ed:df:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Apr 27 01:00:12 2025 GMT
Not After : Apr 28 01:00:12 2025 GMT
Subject: CN=fd3b2d6fbac36533a80f841ec3a7088bd7740cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:24:e8:9f:67:7b:bb:a1:1e:ec:b3:21:5e:
45:93:91:bd:83:d8:0f:7b:c9:27:16:a6:05:82:c1:
77:c2:c7:da:06:de:07:78:53:68:03:35:fc:5b:8d:
c4:b5:47:cf:0f:26:47:d0:47:ed:3a:96:dd:c5:a5:
2e:b0:8d:a7:45:31:c0:40:61:ec:e3:02:55:a6:32:
f1:18:c6:93:04:0a:bf:44:9e:ef:15:e4:99:98:8a:
95:c2:c8:5e:1d:ff:e7:fe:11:fa:18:b4:11:0e:a3:
bf:55:09:aa:82:17:98:7f:eb:5c:fa:44:81:98:69:
bd:b2:da:d9:a8:6a:1a:8b:84:fa:d9:15:81:a0:15:
34:0b:96:b5:0d:77:57:5f:90:0d:0f:92:78:6f:6c:
75:c9:4e:cf:2a:4f:1f:4f:48:4a:e2:12:4a:7d:6d:
db:dd:0a:73:e5:05:87:65:3a:52:5c:af:2f:ca:cd:
24:08:bd:48:ce:7e:7d:c3:65:66:eb:8a:c7:6f:70:
23:26:1a:e7:37:e0:3c:f1:c0:04:1e:e4:5b:31:3b:
0a:b7:f3:6f:3e:c9:d2:d2:92:6d:4b:5c:55:d0:05:
32:76:d6:44:84:3a:e9:66:6f:16:48:ab:6e:60:a1:
18:6e:30:c0:99:49:0a:1b:09:4f:55:4d:bc:e0:b9:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3B:2D:6F:BA:C3:65:33:A8:0F:84:1E:C3:A7:08:8B:D7:74:0C:BF
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:98:cb:c8:a7:1e:66:da:c4:8d:23:ac:a3:0a:83:75:60:77:
ad:73:0e:5c:6e:da:05:f8:ba:14:79:fe:39:49:bd:ef:4e:15:
77:60:e1:51:02:fd:3a:35:27:cd:f2:c8:b2:94:0e:e2:f4:9d:
8d:14:fa:7c:9b:b8:70:b2:32:8e:9e:ac:06:d7:3d:11:81:43:
7d:2c:c4:02:94:77:ca:e4:1b:fb:76:a6:49:9c:80:60:95:f1:
7e:b1:df:39:ee:d0:ec:33:ef:ee:e7:22:60:41:8e:e2:fb:33:
39:17:e7:e0:d0:f6:61:8f:2f:16:6c:d3:a0:a1:25:ba:59:03:
40:8e:ea:c8:99:77:3e:dc:00:40:cb:86:c0:9d:8a:43:66:7a:
0d:f1:39:35:fd:c3:e4:db:5b:40:74:40:a9:0c:54:8d:d0:8d:
7d:19:f0:58:f9:99:38:6c:2e:7a:8d:ba:d1:d4:8a:31:d3:71:
f4:e0:f9:17:42:ba:73:46:c7:32:47:e6:8a:1c:56:4e:b1:d0:
57:20:d3:c6:e2:ba:11:a9:c2:e6:fd:af:93:34:d7:91:6a:2f:
31:f5:6f:50:27:ba:03:c5:b4:6b:3c:16:ee:82:0c:9a:2c:35:
36:44:4f:20:c4:3a:6b:1e:8d:d6:4e:1f:14:4a:be:b2:b2:c5:
a3:b9:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:03 2025 by rpki-client