Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: i3JunQ2Ek29GdHvT3QQrX0S7sHJwAGQ9y/3+2/eryc4=
Subject key identifier: 62:0B:B0:37:B4:17:67:DF:13:2A:D2:C8:CF:F3:9F:3A:68:DC:56:BA
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 01967EA15DDC61C9BF99BF77F00F192687BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 08AD
Signing time: Mon 28 Apr 2025 23:00:26 +0000
Manifest this update: Mon 28 Apr 2025 23:00:26 +0000
Manifest next update: Tue 29 Apr 2025 23:00:26 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: wpnte1LHy8Hm+xyTr6deE0GAuNjKxuJcgkVzcU/lNuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:5d:dc:61:c9:bf:99:bf:77:f0:0f:19:26:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Apr 28 23:00:26 2025 GMT
Not After : Apr 29 23:00:26 2025 GMT
Subject: CN=620bb037b41767df132ad2c8cff39f3a68dc56ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:6a:ee:57:01:3a:36:04:8c:44:3f:02:7b:
4b:2e:19:1a:50:55:75:d4:72:25:cc:e8:37:c9:1a:
72:da:cb:6d:fe:bb:97:11:05:c8:a2:12:cf:62:87:
21:e3:66:cd:af:24:32:89:21:22:b1:70:b0:1f:3d:
1a:c6:40:26:8b:b5:c1:2a:49:03:eb:28:23:f4:00:
53:b8:d0:22:14:99:4f:f3:07:42:35:de:77:03:87:
4d:ec:70:e1:f2:3a:8a:ee:c7:3f:b0:3b:dc:11:76:
3a:6e:ba:e8:3f:a0:4c:87:9b:06:38:b7:f8:25:8e:
fb:05:48:61:da:ac:3d:b3:4e:c7:fe:da:0c:e9:37:
aa:27:14:8d:16:7e:5d:a8:83:0b:34:3a:93:54:77:
7e:2f:99:9a:13:48:e7:27:3a:be:8e:3c:38:c4:3c:
0a:29:8e:ff:d8:6e:89:6c:23:ac:02:04:df:3d:a9:
58:be:55:28:76:49:69:cc:cd:95:eb:dd:a8:70:6b:
e6:1b:5a:79:ff:84:ad:cb:9b:c5:40:0b:5c:21:0f:
45:e4:d4:e9:fe:db:93:13:92:cb:29:64:42:4f:6f:
a0:9a:6f:47:f7:42:f2:08:44:c6:1f:f0:aa:d7:65:
eb:fd:bd:29:d6:58:f4:44:f2:12:cd:60:11:bf:64:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:B0:37:B4:17:67:DF:13:2A:D2:C8:CF:F3:9F:3A:68:DC:56:BA
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:b8:28:24:cd:a1:ce:9a:a0:d7:c3:eb:4f:7d:20:f1:16:
3a:4b:d2:92:2c:37:9e:dc:a0:9a:7e:6d:91:da:7d:ba:a5:de:
24:4e:55:f9:44:07:7f:c6:e5:d0:77:0c:b6:dc:48:be:ee:2d:
46:1a:72:a6:38:35:93:d5:db:a1:ee:2b:70:44:91:00:88:a8:
d4:ca:e0:a0:f7:28:6f:62:5c:11:cc:0e:e2:18:39:61:62:d7:
44:34:c5:64:e3:0e:a3:25:79:bc:f7:25:3b:6b:60:0f:ba:64:
5e:8a:96:56:bc:eb:52:92:af:d2:b1:bf:88:d1:a2:46:0a:73:
52:80:f9:00:1f:be:11:47:72:eb:3c:cb:77:1b:a3:98:70:5d:
02:3f:1f:4e:41:12:50:f0:37:35:60:41:52:27:02:88:d1:ae:
ff:7f:0d:4b:94:e4:59:52:17:0d:2c:35:a4:aa:4e:1a:85:34:
cb:80:9c:e2:ea:7d:67:9d:fa:62:7f:d6:cd:72:c0:a4:a0:24:
1b:b8:bc:a0:48:eb:34:7f:8e:4f:63:74:0c:50:ac:ac:14:18:
ac:12:9b:55:9b:1f:7e:88:38:62:73:fa:91:37:c4:b6:d8:45:
0c:35:a9:d0:f2:98:70:e3:6b:12:5c:db:72:45:d0:98:00:9f:
fe:1d:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:49 2025 by rpki-client