Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: 2pJxYdFNrPXSE0+LKfJo+DM6ysoUykLFDUfkg0ZeQV8=
Subject key identifier: D0:21:26:93:AE:26:89:71:8F:50:A6:4C:AB:78:7D:FB:F9:F9:44:E0
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019655DC9E0562FD8F0371959B579DDB78E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1202
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: LvZkpkQmOorcXoBulPlB+3regVzBZ5iMGKMVjeXYk7M=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9e:05:62:fd:8f:03:71:95:9b:57:9d:db:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=d0212693ae2689718f50a64cab787dfbf9f944e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:a3:d3:6a:af:91:02:ce:69:16:ff:23:ad:
42:23:08:aa:4c:06:2d:86:b4:7f:16:ce:fa:1e:e1:
e6:10:4f:56:b1:d0:55:98:8a:93:63:6d:e1:d4:f4:
3f:10:b3:a2:97:c6:5d:4b:70:75:25:6d:63:da:0b:
ef:a5:5b:29:89:a8:01:1b:81:b4:01:ba:d6:8d:4b:
e4:ba:a0:b9:f1:96:73:6e:65:2b:e9:3c:28:75:02:
ba:ef:eb:24:b1:b1:6b:6d:6b:ae:9a:38:56:02:71:
a1:c8:ec:3a:4a:0e:25:40:7f:be:60:09:5f:06:c0:
a7:8e:02:3e:71:f1:c4:8f:00:a1:43:de:2a:b9:31:
c3:f4:41:fc:70:04:7c:fb:1e:db:0d:21:d9:c1:0f:
70:45:9d:d4:cc:22:d1:21:a8:90:ef:e5:9b:92:4f:
9d:ce:37:00:ae:93:f9:7c:1d:6e:be:85:0e:23:82:
49:e7:69:fe:53:d9:23:13:88:4f:60:94:86:20:fb:
4c:d1:d7:b2:6e:81:39:b4:bb:39:6c:18:0e:ef:90:
20:fc:39:07:c4:5d:79:c9:d3:f3:1f:b5:4d:8b:6d:
ed:db:0e:fd:e5:ab:08:ca:ea:68:39:76:3d:80:15:
24:77:f5:75:b1:40:0f:69:51:f5:c2:5a:2b:7c:71:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:26:93:AE:26:89:71:8F:50:A6:4C:AB:78:7D:FB:F9:F9:44:E0
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:6d:48:8c:21:39:c1:ae:a1:d8:42:49:37:1b:ad:07:28:
3d:63:b8:a5:d2:b5:2a:2d:b0:19:9b:75:1c:77:11:5e:e1:54:
77:db:84:23:3a:68:e2:59:d8:70:d2:7e:38:a9:b7:a6:08:de:
78:7e:e2:37:e7:b8:d9:f2:a7:56:3d:36:96:09:a4:d0:7c:b1:
fd:46:09:66:f6:0d:bf:e9:99:8e:5e:02:32:13:59:51:42:b8:
da:61:a6:46:0f:ec:d1:8f:ae:ab:19:76:ff:8a:c7:40:46:38:
f4:2e:62:d6:4d:86:fa:bb:ff:8f:43:df:69:65:c7:3b:d1:dd:
7c:6b:7d:e3:45:9d:a0:0b:f0:56:2a:af:99:60:3c:ca:fe:34:
0f:75:2b:64:51:1f:5c:82:3c:60:2f:fa:6e:d3:d0:cd:be:bf:
bb:a4:c2:95:9e:e4:5f:2e:5d:87:49:55:84:8c:0f:88:30:9a:
49:cc:30:a7:f8:6c:52:3a:13:5b:4c:26:4b:88:c0:cf:87:0b:
c4:59:21:a8:05:05:f1:bf:cf:69:d9:67:41:5a:8f:d7:6e:ad:
fa:e9:9b:00:7a:dc:6d:58:91:2a:a5:80:be:f9:39:a1:fb:c2:
77:2b:81:ac:1f:56:40:27:2d:90:06:c6:ad:1d:8f:e2:90:51:
31:e4:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:05 2025 by rpki-client