Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: sgRicQvnO829PGLgJrfYWTGnbHc4QtgQDFSzj/A20vk=
Subject key identifier: 79:2D:E5:63:96:03:D7:D0:9C:5D:D1:73:0C:7A:20:E8:CE:08:6E:BC
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 01968058D9D52BD8F6DBBFC870F8E5E3F25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0A3D
Signing time: Tue 29 Apr 2025 07:00:28 +0000
Manifest this update: Tue 29 Apr 2025 07:00:28 +0000
Manifest next update: Wed 30 Apr 2025 07:00:28 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: PnIjhYNmIZ/UCm/VVOxs7+qkAQBN7qLvO5JUBy4WdYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:d9:d5:2b:d8:f6:db:bf:c8:70:f8:e5:e3:f2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Apr 29 07:00:28 2025 GMT
Not After : Apr 30 07:00:28 2025 GMT
Subject: CN=792de5639603d7d09c5dd1730c7a20e8ce086ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:c3:ed:6f:16:b6:60:6e:c0:86:83:85:3c:
a5:31:da:3a:9f:0e:af:fe:f6:98:10:c2:5a:40:3c:
fb:ba:97:d8:eb:9b:0f:52:76:b6:ce:51:ab:cf:50:
27:da:c3:5b:c8:10:5c:86:95:c8:e1:7a:0a:bc:f3:
85:38:3d:7f:ed:81:10:2d:34:df:51:70:34:e3:35:
9c:d7:27:ab:da:b3:4f:8f:08:a9:68:82:6f:c0:7b:
80:08:87:df:c9:e2:f9:22:d4:aa:fe:e3:64:38:76:
05:a0:5c:c5:60:09:0e:79:28:02:7e:b5:d4:5b:01:
08:92:88:b7:4e:fd:d2:21:54:47:f4:63:1a:b3:df:
df:2b:f2:27:3e:ca:aa:60:a8:c5:10:32:6e:75:9b:
ba:93:9c:9b:9f:81:19:c9:e6:ad:ee:25:ad:29:52:
d8:ec:2d:97:ef:9a:73:24:38:d5:99:fa:29:64:ed:
39:c3:a0:00:90:7c:3d:3b:6c:60:4a:bd:58:f2:cb:
1a:1d:93:36:d8:88:28:0c:7f:ae:fe:42:ac:13:e4:
3a:0e:10:0a:d4:db:fe:13:e2:bc:24:dc:df:f7:07:
aa:34:46:6e:4e:b5:36:37:11:a1:04:f0:07:62:69:
67:03:e1:45:c5:6e:02:98:27:8c:56:ac:fc:9d:4b:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:E5:63:96:03:D7:D0:9C:5D:D1:73:0C:7A:20:E8:CE:08:6E:BC
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:77:71:6b:55:3b:ae:74:7f:17:cc:3b:b7:2a:f6:e8:4b:e0:
d5:1b:fd:07:73:7a:81:71:82:af:95:8f:dc:4a:12:fb:51:c7:
f7:88:5b:96:58:89:58:e5:66:2a:f5:e1:b1:7b:0b:16:41:fc:
77:31:04:14:94:89:7e:12:7c:39:73:56:9a:84:69:74:6f:73:
a8:4f:60:00:32:a8:45:f6:27:52:13:aa:15:35:8e:1b:19:b6:
19:a5:99:ad:71:02:78:05:aa:37:b0:94:fb:06:8c:4b:7f:96:
b8:af:7d:9a:28:6e:7e:4a:46:77:09:9e:fe:80:a9:f7:4b:37:
ef:59:30:33:f1:5d:86:68:64:f8:4e:ac:56:c5:57:59:a0:8e:
31:7b:23:8a:65:39:89:65:7b:da:74:a3:3f:d5:2c:c4:e9:d3:
7b:e4:51:3f:e7:35:8d:73:d2:55:68:b4:6b:4b:ce:f0:d5:ca:
d2:26:f0:fb:d0:9e:47:2a:57:fe:5b:cc:ed:3f:11:d9:5f:6b:
58:c7:4d:23:25:81:3a:3a:a9:45:b0:ce:b4:d5:71:8a:f3:18:
d7:f9:c2:8a:6d:08:f9:77:cd:1f:39:35:23:53:36:50:d9:67:
4f:2f:3a:9b:af:b3:36:da:38:f1:83:4d:32:46:fa:e5:f9:5b:
db:d5:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:51:56 2025 by rpki-client