Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: bWs57lShswnRiIeezqVdYLzrqmL96wchZDV2hZNHRaw=
Subject key identifier: 97:6C:3B:A6:96:EB:96:E7:CB:5D:58:70:44:EC:AB:1E:28:11:EB:35
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 0196748C12A2E6E62DDDCB020D3E8A501576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 047C
Signing time: Sun 27 Apr 2025 00:00:58 +0000
Manifest this update: Sun 27 Apr 2025 00:00:58 +0000
Manifest next update: Mon 28 Apr 2025 00:00:58 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: qlYcFDXM1gOvUG9s1MM8BWY7mqzbcGuzFZOXSLloll4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:12:a2:e6:e6:2d:dd:cb:02:0d:3e:8a:50:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Apr 27 00:00:58 2025 GMT
Not After : Apr 28 00:00:58 2025 GMT
Subject: CN=976c3ba696eb96e7cb5d587044ecab1e2811eb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:95:20:82:48:4f:d2:02:2f:88:d0:e3:bc:
12:df:0d:91:e0:26:a4:c7:ce:95:75:92:86:8f:59:
52:bf:80:08:3d:4e:5d:0f:d1:03:18:b5:41:64:e0:
3d:84:92:92:a8:fd:6c:37:7f:81:e1:b6:71:88:8f:
ae:f3:58:ea:d3:45:ff:d7:c6:a6:60:f1:59:56:f2:
dc:0b:27:36:70:f4:5c:79:be:cc:9c:8e:b0:05:36:
9a:ce:d6:ef:e1:22:5f:34:f0:0f:f8:43:26:0a:98:
1d:74:de:af:72:17:35:e8:72:8a:bf:56:17:11:94:
c4:86:d5:94:72:b0:27:69:d6:0c:41:75:a8:7f:48:
14:de:d7:5a:7e:8a:12:87:7d:c2:d3:00:90:13:39:
f4:ce:b0:2b:f0:10:1c:68:bc:83:05:4a:96:4a:3d:
ad:60:48:ac:fc:a0:3d:82:82:3e:56:7d:3e:92:7f:
6a:38:e7:d1:71:1e:b1:57:ea:c7:ab:ef:e6:79:c6:
d1:29:69:57:0b:10:72:b2:b5:36:d9:07:92:fd:34:
41:36:05:7d:73:48:8a:72:f6:13:6c:30:7f:fb:f3:
df:1b:9b:84:c0:5c:2b:b5:c5:06:f4:17:e2:d6:90:
f7:11:94:34:8c:ce:b2:5f:ba:39:50:9a:42:61:73:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:3B:A6:96:EB:96:E7:CB:5D:58:70:44:EC:AB:1E:28:11:EB:35
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:b9:e6:4b:98:e7:fb:87:a1:27:b2:36:cc:72:bf:ac:b8:
a9:8d:df:21:80:8c:44:8d:26:6c:02:6a:ef:04:0a:fe:96:78:
ca:ac:ea:b9:ea:a4:7e:4b:2a:6c:61:06:8a:53:a0:26:27:6c:
be:5b:19:f3:6f:78:dd:fc:7c:32:65:18:ad:8a:97:8c:3d:ee:
66:50:8e:cb:b3:46:f1:e0:ef:ed:2c:50:af:07:7f:6c:98:46:
e9:14:ef:2d:49:cc:eb:90:d5:8c:12:32:cb:f1:34:b0:32:25:
38:f4:08:09:25:be:c2:9c:0c:c4:56:4f:e8:db:c8:d0:c4:b7:
d3:e2:b1:c0:6c:d0:63:f0:bc:70:0d:7c:51:06:a2:66:2c:a6:
d2:55:65:b7:89:42:bc:0f:f4:29:a5:87:96:fd:f8:c6:c0:73:
3b:e4:f0:8c:06:72:19:55:53:42:72:fd:a5:23:ef:f1:17:51:
0e:92:33:c7:65:e0:03:52:9c:44:2b:1b:e7:81:2c:3a:6f:59:
09:70:eb:ba:c4:e1:d4:a4:c2:39:bd:97:de:94:0d:80:65:20:
64:89:02:77:74:10:c1:7d:3b:7b:4d:8f:11:a3:ff:83:92:67:
d5:1d:e5:6c:18:1c:93:e2:7c:eb:35:d6:59:ae:02:44:19:20:
c8:70:e4:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jBKi5uYt3csCDT6KUBV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj
MTgxYWUwHhcNMjUwNDI3MDAwMDU4WhcNMjUwNDI4MDAwMDU4WjAzMTEwLwYDVQQD
Eyg5NzZjM2JhNjk2ZWI5NmU3Y2I1ZDU4NzA0NGVjYWIxZTI4MTFlYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgyVIIJIT9ICL4jQ47wS3w2R4Cak
x86VdZKGj1lSv4AIPU5dD9EDGLVBZOA9hJKSqP1sN3+B4bZxiI+u81jq00X/18am
YPFZVvLcCyc2cPRceb7MnI6wBTaaztbv4SJfNPAP+EMmCpgddN6vchc16HKKv1YX
EZTEhtWUcrAnadYMQXWof0gU3tdafooSh33C0wCQEzn0zrAr8BAcaLyDBUqWSj2t
YEis/KA9goI+Vn0+kn9qOOfRcR6xV+rHq+/mecbRKWlXCxBysrU22QeS/TRBNgV9
c0iKcvYTbDB/+/PfG5uEwFwrtcUG9Bfi1pD3EZQ0jM6yX7o5UJpCYXPNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdsO6aW65bny11YcETsqx4oEes1MB8GA1UdIwQY
MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt
OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3
LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg655kuY
5/uHoSeyNsxyv6y4qY3fIYCMRI0mbAJq7wQK/pZ4yqzqueqkfksqbGEGilOgJids
vlsZ82943fx8MmUYrYqXjD3uZlCOy7NG8eDv7SxQrwd/bJhG6RTvLUnM65DVjBIy
y/E0sDIlOPQICSW+wpwMxFZP6NvI0MS30+KxwGzQY/C8cA18UQaiZiym0lVlt4lC
vA/0KaWHlv34xsBzO+TwjAZyGVVTQnL9pSPv8RdRDpIzx2XgA1KcRCsb54EsOm9Z
CXDrusTh1KTCOb2X3pQNgGUgZIkCd3QQwX07e02PEaP/g5Jn1R3lbBgck+J86zXW
Wa4CRBkgyHDk4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:36 2025 by rpki-client