Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: uzYu40lzk/hVYiRgCLKcObt2HorsRWzPpVjzYaKKqo8=
Subject key identifier: 64:4C:0E:3D:C1:DF:4B:26:D2:8C:49:FE:07:BD:04:06:00:E6:70:79
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 01967153955C7CB99076D0DD6D6638D4386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 14A0
Signing time: Sat 26 Apr 2025 09:00:25 +0000
Manifest this update: Sat 26 Apr 2025 09:00:25 +0000
Manifest next update: Sun 27 Apr 2025 09:00:25 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: UAF2nuMIZfgw4jVVG2yNf3EFmJdd4TIP/VUSIybnZ2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:95:5c:7c:b9:90:76:d0:dd:6d:66:38:d4:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Apr 26 09:00:25 2025 GMT
Not After : Apr 27 09:00:25 2025 GMT
Subject: CN=644c0e3dc1df4b26d28c49fe07bd040600e67079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:cb:74:ba:dc:ce:19:c8:56:b6:16:4b:d7:
7b:9e:6b:0a:d4:8c:d0:d4:85:c0:e1:7a:37:a6:06:
4a:96:5e:f6:e8:1b:77:62:2a:7e:d6:62:52:91:1f:
d2:22:91:e2:ec:6d:60:fb:03:dc:21:2b:0a:ab:b1:
80:4c:c4:83:77:91:c5:ad:09:da:b0:c3:2e:64:44:
7e:69:2c:25:bc:6f:d0:bb:94:0f:79:76:6c:da:0b:
43:0d:0a:c5:8e:f1:9e:7b:33:2f:23:2a:90:23:e0:
b9:7f:19:68:5a:d9:93:1c:1a:86:a5:51:fd:22:91:
b8:fd:32:8e:66:3c:98:95:4e:69:cf:e6:0a:c5:f4:
5a:7b:91:3f:4c:c7:01:85:db:62:31:8d:df:a5:90:
c9:28:6c:82:3c:8c:2f:ec:96:c0:ef:3f:d4:01:86:
9a:0d:ac:21:a5:ca:f4:f6:24:9f:9e:e1:ec:8f:05:
27:09:92:60:7a:07:5b:ff:b9:6f:f7:f4:60:14:66:
23:a8:d6:f3:9a:da:74:0c:3f:fc:ab:27:c3:ad:ff:
a0:4a:ca:02:5c:e2:6b:d6:ee:82:5b:52:3c:63:88:
e1:08:49:bf:ec:4b:51:5c:67:75:ac:bd:df:0e:4d:
12:e7:f0:35:e0:a3:3e:c6:47:2f:ed:2d:e0:ba:96:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:0E:3D:C1:DF:4B:26:D2:8C:49:FE:07:BD:04:06:00:E6:70:79
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:bc:62:c8:2b:44:06:cc:41:bd:d4:d3:c3:21:9b:17:d1:
c6:4f:18:95:8b:33:ef:7c:f5:39:00:3e:89:b8:51:3d:59:2d:
11:a0:77:ec:7b:ca:9c:e9:4e:ba:dd:f1:50:9c:ec:a8:e3:32:
18:c5:d1:43:12:0d:c3:fc:b3:b4:8d:4a:8c:54:e6:8a:c6:8c:
90:46:4a:39:fb:63:14:21:c0:2e:4a:78:c6:5f:0a:56:1d:13:
a5:41:cb:25:c5:71:d9:7a:fd:9f:d8:24:7a:2c:d4:bc:2c:68:
3c:59:c5:62:29:a9:79:c2:d6:54:0e:d7:5f:03:97:28:05:07:
ba:9b:c3:2b:c9:e9:c1:e1:f2:3a:ab:16:58:db:0d:aa:e7:7e:
c3:d2:70:87:8f:ef:a0:f1:1f:a3:5b:78:48:d7:93:0b:d3:d5:
7f:fa:83:eb:f1:0e:47:12:b9:e3:ab:12:79:3d:b2:fb:8a:11:
f9:70:e9:48:e8:a3:b7:99:d5:f6:12:19:d7:a1:59:e7:ad:f1:
98:18:1c:81:c5:59:40:80:28:96:b8:a2:ef:b4:b1:4f:c1:74:
bf:e0:d5:b9:cd:f9:fc:02:f1:7e:d5:56:f5:46:c0:73:d1:0a:
95:92:d4:9e:32:98:ec:22:cf:c2:6a:5c:70:49:12:ba:ce:5f:
3a:96:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:16 2025 by rpki-client