Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: 6u6b9sr1VzH2RRP/DIDcwH/pZTjECq9EOvZUPaorU20=
Subject key identifier: C7:3E:2F:F0:CC:98:54:8E:51:E3:AA:77:06:07:67:23:CB:99:A0:76
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 01967C44F2689666D5787F7BCE8EE2E360CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 13E8
Signing time: Mon 28 Apr 2025 12:00:15 +0000
Manifest this update: Mon 28 Apr 2025 12:00:15 +0000
Manifest next update: Tue 29 Apr 2025 12:00:15 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: TFNuAg1HyMjWN4sVcHO6x7QEwK0MI/cI46NLvZA5EEQ=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:f2:68:96:66:d5:78:7f:7b:ce:8e:e2:e3:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Apr 28 12:00:15 2025 GMT
Not After : Apr 29 12:00:15 2025 GMT
Subject: CN=c73e2ff0cc98548e51e3aa7706076723cb99a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:d1:be:cb:0e:63:c0:3f:d1:4c:4b:69:1f:
7b:1a:e8:eb:40:c7:b2:96:0b:54:07:77:ae:2c:d9:
29:af:d5:eb:c2:36:8d:22:41:c6:13:10:c7:a9:bf:
8b:63:e1:c8:84:9d:5c:c1:6a:bd:53:2d:83:ec:d3:
45:79:7c:81:69:36:12:a9:e5:b9:e8:a4:0c:6a:9f:
92:73:a8:36:8e:09:44:fd:59:b3:90:06:10:5c:7d:
89:3e:be:d8:47:f2:4c:d0:b6:df:e3:46:9e:40:6c:
cd:75:69:05:21:45:a4:29:27:b5:da:9d:79:30:01:
a9:6b:c3:75:09:6c:0f:d7:ff:bd:18:32:b9:99:96:
f0:a3:97:01:c7:30:d8:59:45:f2:16:31:12:29:cf:
88:40:d4:2c:74:0e:6c:44:83:bf:0d:f7:9c:a6:df:
3b:93:5a:54:02:35:e4:78:ef:3b:b5:2d:81:4c:68:
2d:9e:c2:9e:ce:80:38:64:55:e8:7a:24:31:e8:5c:
47:75:03:d6:ad:90:aa:ce:d0:c0:ad:91:ca:3d:2e:
2a:6b:a6:e8:bf:9b:28:a5:e9:fe:56:b5:b7:81:9f:
05:75:8f:5e:b8:e3:d2:d1:51:44:f1:50:eb:dd:92:
91:2e:c3:ac:d2:05:b3:b1:c2:65:db:93:fe:14:01:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:2F:F0:CC:98:54:8E:51:E3:AA:77:06:07:67:23:CB:99:A0:76
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3e:67:be:b2:e1:b5:a2:3d:c8:72:4f:b5:e5:07:5e:9d:aa:
9d:0e:e8:56:50:c5:e3:db:6e:e4:ff:d4:64:f9:9d:25:4d:54:
81:e1:91:5b:e3:27:f6:10:11:5e:a5:1f:94:14:92:32:26:e8:
02:22:e0:38:96:0b:32:50:b4:75:50:03:c7:0b:b3:5b:6b:44:
76:b0:6c:48:b6:db:0a:e3:f9:fb:b7:a7:3e:4b:23:9f:9e:b9:
2b:a1:43:aa:5e:6a:3d:be:13:51:b4:a4:52:ad:86:df:51:af:
62:59:61:76:33:bf:b9:28:56:ba:08:82:37:4f:2f:a7:0f:18:
0e:80:ef:f9:86:76:a0:18:8f:39:85:09:d1:9d:42:45:b7:c2:
b3:d4:0c:48:47:96:5d:e0:bb:02:e8:57:8e:0c:d6:b9:16:92:
c1:15:c6:09:29:a4:f6:34:d9:97:f2:0f:91:7c:8f:3f:0b:d2:
7f:b0:f9:23:e0:fb:20:d0:d2:9c:4e:53:c5:58:71:5f:0d:2e:
58:f5:e9:2c:20:03:cb:b6:71:78:2d:7e:1e:6b:cc:b9:12:0a:
9c:c8:74:f1:8c:e2:50:61:c2:77:81:31:8f:3d:86:2c:e6:4c:
79:c5:4d:d3:d5:69:b8:d2:03:21:8d:8f:88:ca:d5:97:35:63:
0e:94:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:07:06 2025 by rpki-client