Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: s9e24qLg836fWSTo7PtoPdqcVMooIByR7B6+iJbGt1Q=
Subject key identifier: 54:78:7B:12:7E:7C:DE:D6:84:8F:FC:A1:65:E6:02:FF:6A:F9:70:E8
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0196760D25F2F787D437FA7E9E146648F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0BE0
Signing time: Sun 27 Apr 2025 07:01:35 +0000
Manifest this update: Sun 27 Apr 2025 07:01:35 +0000
Manifest next update: Mon 28 Apr 2025 07:01:35 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: IS8+mD7bpWT3RIJtoh5riiY3FiKrYy2otlTjqui7D9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:25:f2:f7:87:d4:37:fa:7e:9e:14:66:48:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Apr 27 07:01:35 2025 GMT
Not After : Apr 28 07:01:35 2025 GMT
Subject: CN=54787b127e7cded6848ffca165e602ff6af970e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:c4:25:23:a3:da:af:85:1c:21:01:b1:f0:
22:78:e3:79:d7:3c:93:f0:c8:1c:1f:de:d9:46:8c:
88:f9:dc:3e:fa:0e:c1:ea:f3:ae:50:b2:c8:0c:e3:
46:9e:9d:fa:86:44:a6:68:ff:cd:2f:9a:12:d4:c0:
23:3a:b3:3f:34:17:2d:2d:35:a0:05:1e:85:cd:db:
60:55:74:c4:db:3b:97:1a:cd:32:67:e8:b7:c1:90:
ff:45:da:d3:50:ca:64:7c:29:65:c1:5d:7a:f1:b2:
fd:6e:63:df:f2:6e:7f:3f:4d:b1:16:eb:d2:78:d7:
f8:58:25:4d:64:7e:73:6d:e2:3f:60:6f:8c:c7:a2:
d1:f7:aa:14:0f:f5:51:94:4a:e4:df:d0:7a:03:23:
fb:5e:3b:bb:ed:c1:4c:10:0f:1f:8f:e7:86:9c:25:
6f:db:62:dc:ec:33:f7:22:2b:d1:aa:4e:ee:18:ab:
65:99:9d:44:c3:6a:16:cf:f5:bf:ee:c0:73:e0:52:
f8:52:e2:c7:50:5a:07:23:95:40:29:38:b6:ff:15:
c4:70:58:58:9e:c5:45:12:5d:d3:62:e8:c5:8f:37:
30:21:72:91:a0:6a:ce:f1:8f:c9:9f:34:47:5e:98:
a2:dc:fe:93:b1:02:cc:bd:72:e2:3e:d9:f9:b8:30:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:78:7B:12:7E:7C:DE:D6:84:8F:FC:A1:65:E6:02:FF:6A:F9:70:E8
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:de:83:36:93:09:ca:a5:48:ca:4d:6c:a2:c6:6e:e0:91:
b2:da:cc:50:c8:30:fd:ff:6a:f3:db:a7:f7:c1:ba:f7:50:30:
6b:e3:4d:57:ab:46:cf:9b:43:89:c7:a0:0f:4c:d7:5b:12:45:
1b:0d:d6:58:f7:37:08:4b:50:f9:5b:7c:70:a4:12:ed:60:ae:
78:ec:70:30:81:f2:7a:77:5c:0b:7c:c1:8c:24:10:59:72:fe:
92:22:f9:2c:64:4b:9c:89:b6:3f:ec:68:e3:7d:f8:c8:8b:31:
8e:95:fc:01:64:75:76:ee:74:5a:f7:be:5b:53:01:91:24:64:
9c:f2:a6:39:d4:90:5f:23:80:f4:90:2f:0d:a1:0d:77:73:99:
91:6f:4a:8f:d9:8d:a7:74:13:1f:19:2b:82:e6:de:5c:cc:0f:
6a:46:97:cf:21:14:aa:fa:bb:32:55:53:06:3f:6f:b4:75:c4:
55:0c:84:9d:de:8b:4f:59:65:46:41:93:bf:43:ae:57:73:81:
71:b4:45:bc:e8:64:84:a1:7d:24:21:18:02:5d:31:d8:97:80:
9b:04:dc:b5:47:83:bc:84:e4:0d:da:40:0b:57:d1:fc:0a:73:
ec:70:c0:49:bc:03:08:0d:d5:37:16:1c:23:9a:5c:83:c7:fb:
75:ce:5a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:31 2025 by rpki-client