Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: le8HvQKOU5O2JIvUdehpuvd8o4hCg3scf2l3rqLSTZE=
Subject key identifier: 89:8B:A5:70:7D:91:6E:8E:D7:CD:DF:FA:73:C4:67:4E:D4:0A:61:C3
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 01967B32F134B022D999CAC4BD7DD9BBE5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 14A4
Signing time: Mon 28 Apr 2025 07:00:58 +0000
Manifest this update: Mon 28 Apr 2025 07:00:58 +0000
Manifest next update: Tue 29 Apr 2025 07:00:58 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: HCwYNnI7+NUUA9BjSvh5nQKxlKHz0WLt2bER6jDogg4=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:f1:34:b0:22:d9:99:ca:c4:bd:7d:d9:bb:e5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Apr 28 07:00:58 2025 GMT
Not After : Apr 29 07:00:58 2025 GMT
Subject: CN=898ba5707d916e8ed7cddffa73c4674ed40a61c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:20:a7:80:e3:ca:2b:c7:36:01:82:6f:5e:
4c:c7:af:d1:ba:c2:ef:43:7a:c6:21:f9:9e:87:c8:
af:83:2d:5e:9c:11:3a:02:a0:05:97:6f:38:44:1c:
60:d1:a9:9e:6b:21:d9:2f:c1:ec:76:ee:aa:0e:6e:
d3:2d:2e:91:e4:c3:35:8b:d3:7c:12:45:db:fb:44:
f3:23:20:ae:28:d9:76:16:15:10:cb:3b:6f:29:8d:
04:55:a4:d5:92:80:76:51:64:a6:49:f7:c9:c5:18:
6c:ab:10:21:ec:69:e6:59:cd:1b:af:a6:c6:f8:4f:
39:9f:30:89:6a:9d:12:c8:1c:09:80:68:2f:4a:14:
15:34:65:e1:e3:fb:b6:ae:fc:a6:4f:10:3e:89:f3:
99:32:f3:f7:bd:c6:ff:50:3d:56:a8:89:c3:7f:90:
37:d8:1c:d1:0e:ea:b4:14:46:37:8a:29:e1:f8:01:
5f:05:ac:1c:05:36:a5:c4:0a:9e:c0:8b:21:f0:e2:
4a:ab:2e:51:9d:d4:79:4c:d6:2a:30:87:b6:c6:a9:
d2:1e:7e:af:2b:d0:25:d4:6d:62:54:4d:83:d7:69:
96:47:c6:3f:85:ec:dd:55:41:cb:e7:48:0f:ed:64:
8f:14:42:4a:ae:d2:20:e5:33:53:d1:c9:d0:96:02:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:A5:70:7D:91:6E:8E:D7:CD:DF:FA:73:C4:67:4E:D4:0A:61:C3
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:0c:6b:54:29:36:48:e7:78:28:d2:9c:df:b0:ab:ae:ba:e0:
65:a8:dc:49:e7:93:ac:59:7d:48:69:90:46:8d:6f:2e:6b:83:
37:e2:ad:9c:bc:bd:21:a0:47:77:32:ba:a5:3e:66:12:c3:12:
b8:17:39:e6:d4:17:ec:88:5b:67:85:cc:68:9b:04:ac:e0:df:
ca:48:b9:ff:67:27:8e:63:f5:c9:2f:7d:85:11:59:d3:1b:e2:
5b:ea:59:01:63:1a:ea:1e:80:ca:36:8c:c0:ec:45:c5:7b:ef:
40:2d:02:fd:5a:f1:5c:b2:13:4f:df:d3:93:91:4d:0f:0a:25:
09:38:82:1a:5b:3e:f3:5a:73:a7:70:74:6e:c4:94:b5:e0:68:
ed:27:ff:72:db:eb:6a:37:38:6f:34:c0:bc:d0:81:23:eb:55:
82:4a:ce:39:54:fc:13:9b:4b:5e:f8:ce:e8:82:de:1a:1a:ee:
54:c3:cd:fe:b2:b5:db:7c:3d:7b:83:03:e5:1c:c4:92:92:30:
eb:3d:95:87:23:00:e5:5e:59:ba:7c:be:56:04:1f:b5:52:53:
ec:ee:f7:e2:93:80:db:cc:42:e6:8e:b2:6e:f0:c4:86:ce:35:
00:25:02:d7:11:39:3d:ec:94:91:4d:d3:6a:de:8b:e6:dd:c3:
5e:54:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:21 2025 by rpki-client