
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: Rtw7tIqir6IaiK+ql4cutrNY3QYoBU2FM0nucSu++Oc=
Subject key identifier: A6:72:FD:C9:42:23:E6:73:77:85:45:74:3B:C7:9F:F5:0F:24:BA:3E
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 01965F4D9009AD5B26BF157568B06678E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 019E
Signing time: Tue 22 Apr 2025 21:00:40 +0000
Manifest this update: Tue 22 Apr 2025 21:00:40 +0000
Manifest next update: Wed 23 Apr 2025 21:00:40 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: 8by45JcGR5Zk3RDrhBIgrKAZRkdk5goCKBwhfol5ueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:90:09:ad:5b:26:bf:15:75:68:b0:66:78:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Apr 22 21:00:40 2025 GMT
Not After : Apr 23 21:00:40 2025 GMT
Subject: CN=a672fdc94223e673778545743bc79ff50f24ba3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:d9:0e:5f:e1:ac:ad:92:d4:af:ff:a8:87:
65:53:80:69:10:26:cb:16:b8:79:15:76:06:35:31:
32:1d:2b:8d:96:db:b5:93:69:66:6c:11:66:9a:0d:
d5:9b:ca:6b:fd:d7:ca:e1:4e:2f:f1:1d:06:c7:42:
49:b5:d4:e8:a5:38:36:2c:4f:75:9a:a9:de:94:5e:
d2:8b:a4:59:82:e1:0a:d4:39:79:e2:24:0c:d3:ae:
9a:f7:2a:6d:34:a3:a0:93:fe:a4:83:15:ac:0f:b2:
e6:18:b9:8e:9c:d6:0a:50:37:b0:5e:9f:0c:78:31:
b7:84:97:85:48:38:e9:d9:dd:50:21:19:24:8e:86:
cd:a7:ba:cc:c3:79:6d:1e:10:71:66:33:29:a2:22:
8e:59:0a:af:be:2d:36:bf:68:8c:56:17:87:53:b3:
c3:44:a9:b3:68:fc:68:0d:97:ad:fc:07:48:fb:45:
75:a2:96:9e:af:ba:78:00:26:31:b0:24:da:54:05:
ad:5c:22:a3:d9:dd:1d:87:42:8c:ea:43:8b:27:98:
c5:12:44:c1:63:37:c2:4c:3b:87:30:f1:e2:b7:ce:
c3:3d:68:e5:19:05:29:83:8d:c6:16:f5:b9:a9:84:
b4:8d:1e:b8:b1:fe:d7:af:cd:ce:33:05:93:c0:71:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:FD:C9:42:23:E6:73:77:85:45:74:3B:C7:9F:F5:0F:24:BA:3E
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:23:e1:9c:0c:5f:7a:b4:d8:5d:6e:8e:12:0e:69:9f:96:ae:
16:9b:5f:de:43:4f:bb:00:ca:ed:e0:a1:5c:f6:e3:4b:44:85:
d7:7e:06:a3:a5:e4:23:31:8c:d3:ce:67:94:44:c7:ec:9a:9b:
f7:eb:d5:c5:d3:cf:f4:e8:4b:3b:60:17:79:17:f4:ec:e2:e1:
b3:53:a1:5b:f1:7e:be:d7:d5:c9:6e:8b:44:01:63:68:0f:83:
08:57:39:c6:a5:d5:e7:f8:f7:1c:9b:02:ea:08:e0:9e:5b:fc:
84:0e:e6:41:22:ee:58:58:9c:ae:05:85:b6:25:ce:5e:79:77:
86:d3:22:18:73:6d:c6:25:56:91:75:a2:d0:c5:59:d5:26:1d:
c7:b4:ac:1d:8d:54:32:44:10:5d:7a:f9:5f:f7:09:ee:86:7d:
c3:73:43:0e:ce:6b:bd:1b:da:c4:c3:77:45:58:2e:64:c6:8e:
d7:15:58:24:8c:da:be:8b:7d:09:ff:70:fe:c8:f0:71:a0:c6:
11:64:3b:0b:27:59:a0:4f:42:34:a3:da:f5:42:51:60:d2:41:
e2:15:0a:57:97:d2:86:c4:3d:bd:fd:02:88:49:31:97:34:33:
c0:ce:e9:c6:0e:ce:ec:f7:78:72:ae:1d:01:36:67:9c:31:2f:
d7:4a:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:46:26 2025 by rpki-client