Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: 0A0B0UynhpskIh54H8ZGDaWZTphiSaD8IhwwI2LjNhc=
Subject key identifier: A0:79:E0:49:56:60:53:23:80:AD:4A:D9:30:AC:D9:CC:ED:D1:13:56
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01967AC51EF2992A7075056E2A9F6EDDF769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 085A
Signing time: Mon 28 Apr 2025 05:01:00 +0000
Manifest this update: Mon 28 Apr 2025 05:01:00 +0000
Manifest next update: Tue 29 Apr 2025 05:01:00 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 5ZYC3vfDtq4ruHjKRTjyPHGfD8c8970NQKsjbAf9KDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:1e:f2:99:2a:70:75:05:6e:2a:9f:6e:dd:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Apr 28 05:01:00 2025 GMT
Not After : Apr 29 05:01:00 2025 GMT
Subject: CN=a079e0495660532380ad4ad930acd9ccedd11356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:50:84:8e:3e:43:b4:6f:5c:b1:47:34:b3:
b1:1b:6e:b5:c5:17:78:81:bd:05:4c:bd:a6:f8:19:
21:81:8f:a1:7b:17:4c:6c:07:a7:1b:ab:79:4c:78:
36:c8:5e:e3:76:8f:8b:4d:3c:f1:9d:5e:a0:44:bb:
f4:ac:e1:5f:eb:da:bc:98:11:0b:cc:59:47:c4:e1:
18:77:80:0e:1d:48:d7:14:92:bb:52:40:c1:73:af:
81:b8:cd:2f:7f:78:03:1e:31:62:3b:c8:03:bc:92:
b1:cf:74:4b:d2:e8:06:dd:8e:8b:3b:6e:40:2e:f0:
91:7c:65:25:fb:e8:00:a6:bd:ff:9f:84:6a:93:01:
aa:ed:37:e0:60:d5:c6:26:52:45:a9:de:0c:18:1a:
8b:99:9d:38:90:25:8c:2a:fd:75:f7:5b:3b:43:8e:
10:17:bf:0c:e5:b3:d9:3e:fd:59:11:49:95:9b:3c:
41:eb:9d:67:14:9b:0d:68:3c:d5:20:ec:25:fc:8a:
62:09:e3:b2:a1:57:d6:31:95:5e:b1:30:8b:7d:6d:
d3:63:c3:b1:d0:7d:bc:ef:cc:e0:c5:56:13:52:7d:
52:37:b7:6c:d1:f1:e0:26:49:55:ae:7c:92:a9:68:
ca:a9:b4:e3:54:b4:19:ca:19:1e:11:ad:76:8b:b5:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:79:E0:49:56:60:53:23:80:AD:4A:D9:30:AC:D9:CC:ED:D1:13:56
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4f:83:2f:57:1e:5e:5b:7c:17:cf:e7:f0:3b:bc:17:cb:a9:
9c:1c:47:7b:28:53:f4:98:40:7e:b9:21:64:eb:b9:53:63:62:
20:5d:1a:e4:88:be:b3:be:e1:ea:42:3a:af:d2:63:5e:95:46:
8b:29:bd:69:fa:8f:e5:35:ce:b4:9b:32:97:52:c9:f4:e6:06:
0b:c6:b6:1a:c8:86:fd:67:a4:73:7b:01:9d:0d:09:ad:1c:69:
35:75:d7:51:83:29:1a:70:16:e0:6d:90:55:c7:a8:a9:a6:82:
55:08:38:65:83:0d:7e:5e:ad:bb:eb:06:41:7a:73:30:db:1b:
c5:7e:d1:b2:76:15:7b:a1:89:b4:02:18:3b:21:77:46:c1:c7:
d7:28:96:4a:77:89:73:d4:09:a0:eb:0b:59:9e:c5:e6:62:e3:
d5:8f:0f:b7:a3:8d:e3:a7:df:c4:97:d1:32:eb:39:23:46:87:
cc:b1:94:75:0b:57:ce:bc:4d:cc:ce:76:8e:61:93:99:bc:c6:
43:02:90:1c:8f:58:b6:b7:57:40:cf:43:d7:3c:65:1e:33:f4:
d2:06:99:38:bb:7a:fa:eb:d5:e9:a6:e0:c7:b0:62:7f:20:e4:
b4:60:0a:ca:fb:03:b8:f8:0f:d5:9b:81:0b:84:bb:76:06:eb:
79:4f:10:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xR7ymSpwdQVuKp9u3fdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTMwYzk5YWM3YWE0MDg2YzcxNzU3MTE0YTQxNjNmODAw
OTAxNDIwHhcNMjUwNDI4MDUwMTAwWhcNMjUwNDI5MDUwMTAwWjAzMTEwLwYDVQQD
EyhhMDc5ZTA0OTU2NjA1MzIzODBhZDRhZDkzMGFjZDljY2VkZDExMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H5QhI4+Q7RvXLFHNLOxG261xRd4
gb0FTL2m+BkhgY+hexdMbAenG6t5THg2yF7jdo+LTTzxnV6gRLv0rOFf69q8mBEL
zFlHxOEYd4AOHUjXFJK7UkDBc6+BuM0vf3gDHjFiO8gDvJKxz3RL0ugG3Y6LO25A
LvCRfGUl++gApr3/n4RqkwGq7TfgYNXGJlJFqd4MGBqLmZ04kCWMKv1191s7Q44Q
F78M5bPZPv1ZEUmVmzxB651nFJsNaDzVIOwl/IpiCeOyoVfWMZVesTCLfW3TY8Ox
0H2878zgxVYTUn1SN7ds0fHgJklVrnySqWjKqbTjVLQZyhkeEa12i7UPMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB54ElWYFMjgK1K2TCs2czt0RNWMB8GA1UdIwQY
MBaAFCMTDJmseqQIbHF1cRSkFj+ACQFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQt
OGU4ZDViM2U1NTg2LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81YzNhZTYtMjkzNC00NzllLThjMmQtOGU4ZDViM2U1NTg2
LzEvSXhNTW1heDZwQWhzY1hWeEZLUVdQNEFKQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE+DL1ce
Xlt8F8/n8Du8F8upnBxHeyhT9JhAfrkhZOu5U2NiIF0a5Ii+s77h6kI6r9JjXpVG
iym9afqP5TXOtJsyl1LJ9OYGC8a2GsiG/Wekc3sBnQ0JrRxpNXXXUYMpGnAW4G2Q
VceoqaaCVQg4ZYMNfl6tu+sGQXpzMNsbxX7RsnYVe6GJtAIYOyF3RsHH1yiWSneJ
c9QJoOsLWZ7F5mLj1Y8Pt6ON46ffxJfRMus5I0aHzLGUdQtXzrxNzM52jmGTmbzG
QwKQHI9YtrdXQM9D1zxlHjP00gaZOLt6+uvV6abgx7BifyDktGAKyvsDuPgP1ZuB
C4S7dgbreU8QWw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:18 2025 by rpki-client