Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: BuXxcQQ1JLUvsBvv3en5PCEpYSF/sBd9zpblQ47OC4A=
Subject key identifier: 61:17:33:8D:35:D0:ED:75:45:B5:6C:F7:87:6D:E9:D3:2A:38:09:E6
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 01968E14850401325335E63E0FF347D57B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 23:00:31 +0000
Manifest this update: Thu 01 May 2025 23:00:31 +0000
Manifest next update: Fri 02 May 2025 23:00:31 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: QFFQUHst0O1pZQsHsIP94am6pCHw/lHkR9IsMenhktg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:85:04:01:32:53:35:e6:3e:0f:f3:47:d5:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: May 1 23:00:31 2025 GMT
Not After : May 2 23:00:31 2025 GMT
Subject: CN=6117338d35d0ed7545b56cf7876de9d32a3809e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:b5:78:63:e6:08:f7:f8:eb:37:da:81:3f:
8e:1a:33:15:d6:e2:e0:eb:34:98:0a:19:a3:16:05:
89:9d:00:18:91:e0:33:74:97:a1:89:f2:47:5e:c9:
d1:b9:47:e6:49:84:86:9a:1b:c0:3d:cb:c3:54:c5:
ea:5c:a6:fc:f3:36:f7:0a:cc:90:64:8b:5a:f3:92:
3a:7f:df:60:f0:94:3c:4c:3a:38:ae:e8:98:27:7e:
0e:72:cc:8e:18:28:40:ed:92:98:85:92:d4:aa:ea:
60:ad:72:fd:cf:bc:a6:aa:39:be:d0:18:7f:d8:42:
9e:d2:f3:5a:0e:5f:da:0d:10:1f:be:8d:67:c3:46:
6a:92:1e:f9:65:08:c0:76:5d:82:c7:ee:c3:55:6c:
d4:28:3e:e7:0c:2c:bd:3c:0f:0f:72:43:8b:a2:26:
8a:4c:5b:45:fb:37:89:33:87:3d:85:ac:d0:5e:b0:
38:1b:56:59:db:d8:ac:a9:19:d1:a5:e7:0a:b3:00:
2c:94:7d:e3:e0:10:ff:c8:c2:79:86:65:2c:be:40:
72:e7:7a:c3:a3:a1:23:88:a6:c2:03:ce:24:5f:65:
cd:7a:45:27:9f:25:f2:56:27:4a:b9:d4:00:84:09:
da:20:3c:96:e4:1f:8a:08:79:5f:c9:e1:52:ea:56:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:33:8D:35:D0:ED:75:45:B5:6C:F7:87:6D:E9:D3:2A:38:09:E6
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:f9:d5:e6:11:eb:73:c8:7b:87:73:bd:81:5a:70:25:ed:
6f:46:2e:50:be:6a:0b:9b:57:32:24:84:a3:dd:7b:f7:f1:c2:
33:af:25:77:b5:5e:57:1d:b2:0e:df:56:14:b2:20:3d:09:e9:
e0:87:61:8d:4c:b4:7b:9c:a7:c1:69:2f:4b:0d:c5:eb:3b:6b:
45:d9:72:1b:cc:a8:a8:e9:d3:58:10:19:e8:a6:cd:8a:ff:6f:
cf:29:4b:38:84:15:c0:cb:5c:18:c5:24:e5:3c:66:c9:13:9f:
7e:74:06:a1:e4:a0:ce:70:15:40:49:30:f8:c5:90:b4:ba:da:
48:75:ab:ea:d3:34:ae:77:59:a7:eb:5e:a1:bc:87:f6:51:38:
96:f7:76:1c:26:3b:4d:69:6a:f2:ff:fa:4c:cd:39:82:99:a6:
9b:ab:68:43:a3:e3:cc:f1:a3:0f:f8:2f:d5:c1:47:6f:aa:46:
92:c8:7c:63:bb:e0:c7:ac:13:ae:c3:0f:a4:f4:42:41:6c:0b:
06:40:4e:03:2f:c2:d2:63:a4:5a:aa:3c:73:79:bf:ce:59:7b:
80:cb:9f:46:ae:2f:42:7f:e0:76:46:c7:83:db:b7:d3:8a:55:
3b:b6:e8:2e:47:30:d3:c4:36:d1:d8:ba:6d:ae:c5:c5:c9:4d:
16:0e:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:59:06 2025 by rpki-client