Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: mNosAXvLyGhXx5GA5d+uxRspDc48MY6aZB/x4L8qhnA=
Subject key identifier: D3:62:26:8F:9D:6E:8C:87:49:78:AF:C4:0E:B3:5F:E6:71:87:9D:E0
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019673AFE35E3F570C8F65AE03BA284D22E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 127F
Signing time: Sat 26 Apr 2025 20:00:28 +0000
Manifest this update: Sat 26 Apr 2025 20:00:28 +0000
Manifest next update: Sun 27 Apr 2025 20:00:28 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: L0ZySPoAJdKlQEcbTIpYax9tM36ngS9bGCYAHJZ5QKk=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:e3:5e:3f:57:0c:8f:65:ae:03:ba:28:4d:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Apr 26 20:00:28 2025 GMT
Not After : Apr 27 20:00:28 2025 GMT
Subject: CN=d362268f9d6e8c874978afc40eb35fe671879de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:b9:7e:61:01:59:47:c2:36:81:ef:95:c3:
18:04:e0:1a:c4:8f:2b:02:1a:99:13:30:84:39:96:
a8:3f:ba:c2:fe:4a:c6:7f:a5:63:d5:cd:24:51:b8:
41:21:e8:77:df:7b:93:bb:50:a4:c0:f3:32:e9:4f:
f1:da:5e:78:a1:90:01:a7:ee:b8:2c:45:2a:0e:85:
e5:6f:bb:da:36:dd:ff:0e:c4:f4:ac:84:a7:ad:e2:
4b:14:f6:be:d3:b0:a4:5d:af:a5:86:ee:ff:67:03:
69:92:b5:9e:a1:3e:53:a1:84:b4:32:81:c3:ae:78:
5e:a6:25:3a:12:2f:3d:2f:8c:3a:0e:81:6b:2a:ab:
47:f5:3f:be:3f:06:bb:96:9b:6c:20:25:af:41:66:
2b:a2:d2:07:f3:7e:ad:68:5f:d2:ee:c3:3e:9c:57:
e5:e3:5d:bd:cc:d8:6f:79:37:64:9e:3a:27:07:c6:
13:7e:43:05:1c:08:c2:05:f8:c1:a8:8b:20:76:8b:
0c:e8:dd:ca:3c:06:3d:c1:c5:a3:22:05:e1:df:24:
34:c4:8e:f4:ef:13:e8:5a:fa:4e:4f:66:3e:e1:80:
42:6a:8f:f3:c9:b3:d2:89:c1:29:85:1a:43:2e:5e:
bd:99:7c:62:e8:96:ad:7d:f9:b0:6f:52:b8:8c:48:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:26:8F:9D:6E:8C:87:49:78:AF:C4:0E:B3:5F:E6:71:87:9D:E0
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:49:ed:9f:37:8f:f3:86:7f:97:77:8f:51:17:c3:ea:fd:8b:
48:55:2e:1e:f7:2d:dc:f1:c2:f6:c6:e0:34:2d:d3:86:d0:3e:
73:26:0c:7d:2a:de:84:4d:08:64:65:59:f6:85:39:ca:a4:d3:
13:47:5c:7d:7c:99:58:0b:02:bd:04:17:16:8e:28:db:54:d8:
06:fc:cf:6d:1d:9f:08:e6:8a:5d:cb:71:45:e5:e6:d4:fb:b1:
93:bd:49:ec:77:69:3c:ba:ab:85:18:9d:3e:2c:40:0d:31:3f:
c0:e8:7e:e4:a9:85:7f:c9:8e:fd:c1:67:44:b4:9d:9c:22:b9:
2e:ed:e5:70:59:c0:5e:6b:db:7f:74:f9:f8:91:27:5d:c7:a2:
52:f6:20:bd:64:35:52:8e:8b:1d:06:de:fb:58:87:09:15:7e:
b3:91:c6:01:f2:7f:00:f3:83:d0:40:2e:00:a3:41:61:38:c5:
ba:80:42:de:9c:ee:27:13:c6:06:03:7e:39:02:23:1d:a2:06:
87:f4:d3:59:29:18:0f:2a:ee:43:69:aa:67:ae:dd:b8:56:a9:
d7:c1:b9:f3:c5:c5:e2:71:8f:45:bf:03:b6:e3:55:a4:76:da:
0f:18:ed:43:d4:bf:1c:7d:bb:0d:70:b0:a3:d4:21:98:e3:fa:
ee:f2:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:46 2025 by rpki-client