Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: Yv9A8eEhbZdQiTb7C4Fee5nQqJkj9B0O+P7VeohLSAk=
Subject key identifier: 78:8B:2A:E9:0D:20:9E:CE:55:F5:37:60:2B:A7:C0:72:2D:17:08:47
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 01968691F40C146C23486D2CAE73EA7A88EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 0F13
Signing time: Wed 30 Apr 2025 12:00:34 +0000
Manifest this update: Wed 30 Apr 2025 12:00:34 +0000
Manifest next update: Thu 01 May 2025 12:00:34 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: /CJJ7jb4eU5B8IQ1IlHJB7tVTK9qeF8SIlroqAORF6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:f4:0c:14:6c:23:48:6d:2c:ae:73:ea:7a:88:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Apr 30 12:00:34 2025 GMT
Not After : May 1 12:00:34 2025 GMT
Subject: CN=788b2ae90d209ece55f537602ba7c0722d170847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:17:31:53:43:2e:67:f6:33:a1:72:f3:4f:
6d:87:a9:61:a2:32:e2:3e:cb:79:04:16:ff:7c:87:
a5:cb:bc:91:3f:7d:24:d0:4b:82:d8:5e:db:4a:a9:
61:7b:ec:aa:d0:4d:08:3b:7a:29:7c:53:f7:9a:2d:
70:6e:97:72:0f:ba:f7:71:c2:1d:aa:00:34:d8:37:
74:4d:13:61:76:b9:b3:5d:42:b3:ed:fb:3c:45:1f:
ee:d5:09:3a:1f:e7:5d:dd:23:34:35:af:7e:42:45:
f9:c1:31:c8:6f:7e:bf:be:f5:85:fe:92:de:d0:1d:
4d:af:39:7e:0b:cd:23:6d:4f:f5:9e:49:25:24:e8:
40:b9:02:4e:38:20:a0:2b:f5:67:31:a0:be:4f:c5:
06:1a:8c:8f:3f:b3:e3:0b:9c:4a:aa:a3:14:f7:97:
bf:75:96:ee:8d:52:42:80:f8:18:ef:7a:a7:87:1d:
3e:90:a1:c4:d3:63:a8:1b:9b:d5:7c:1f:bc:fd:6d:
3a:04:a3:47:9d:03:5d:55:bb:18:71:c7:ce:04:0d:
5b:47:aa:23:9e:eb:f4:d6:d6:a6:65:ad:32:5b:fe:
fb:06:e8:09:48:1f:a8:58:3b:28:d5:a5:7e:d8:90:
9f:33:fd:d0:b1:a1:76:58:7e:d9:3d:ce:63:24:5e:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8B:2A:E9:0D:20:9E:CE:55:F5:37:60:2B:A7:C0:72:2D:17:08:47
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f1:31:31:cf:bf:87:65:38:29:d8:37:0a:09:0f:0f:0d:5c:
cd:29:9b:c2:93:a2:f1:ef:6b:a8:46:66:8f:bb:0e:05:59:5b:
26:60:03:7c:04:dc:80:79:99:9c:89:f5:99:c0:9f:5f:4f:13:
03:ed:83:7e:31:0b:ca:62:67:73:87:83:f9:1f:c6:55:15:cd:
31:c0:b7:38:a8:8e:13:fe:de:f0:5c:b4:42:f2:57:d7:64:da:
9d:60:f6:f1:46:96:45:6c:e0:18:49:3d:6b:a4:94:81:65:95:
f1:83:49:0b:3a:b5:90:1d:53:c4:3a:d0:a5:e0:28:7d:a6:66:
bd:cf:90:67:33:0f:77:7f:eb:15:c2:24:f4:d9:f3:0d:22:9b:
7d:2d:00:e9:f5:9c:53:95:ab:ef:de:16:7f:aa:43:69:e6:13:
98:37:82:21:e9:a7:73:1c:53:30:6d:cb:6d:16:60:d3:b7:25:
ff:b5:ed:9f:a5:46:d0:04:e5:7c:a0:bf:b1:48:8e:98:bc:10:
ab:b4:55:42:1f:fe:b8:93:ce:78:a9:ab:de:7a:ed:b5:fe:96:
ff:b8:be:2a:36:22:9f:4c:b3:fc:1a:82:6c:5f:da:ae:71:78:
40:96:5a:01:10:48:ee:77:7e:1a:04:d7:19:7c:fe:01:6a:3a:
9c:66:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:52 2025 by rpki-client