Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: yGaj+pfNVrrQWaZtV0A/NoKJgcgPyxv9WZuAz+do5kA=
Subject key identifier: A0:9E:C9:FB:78:46:8A:6A:2B:AA:A0:7D:65:DD:A1:A4:A9:7D:F4:BD
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 0196553842BB2B14F174760148B337469A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 12BC
Signing time: Sun 20 Apr 2025 22:01:12 +0000
Manifest this update: Sun 20 Apr 2025 22:01:12 +0000
Manifest next update: Mon 21 Apr 2025 22:01:12 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: 0+m7kbR0AHf06SlBvvnypZz2yXvDBvFdRa2St+k1D3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:42:bb:2b:14:f1:74:76:01:48:b3:37:46:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Apr 20 22:01:12 2025 GMT
Not After : Apr 21 22:01:12 2025 GMT
Subject: CN=a09ec9fb78468a6a2baaa07d65dda1a4a97df4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:87:32:f6:94:69:42:07:a2:14:df:6d:cb:
5a:25:52:e1:a4:bb:0a:af:83:25:5e:b0:33:f8:03:
43:d6:82:6d:35:30:83:20:a1:48:cf:63:c5:9f:9f:
ff:4d:66:39:fb:05:8c:c8:fb:ee:1c:e0:f7:5b:35:
9a:19:52:a0:7e:65:9f:33:69:75:49:f7:08:87:37:
e2:74:c4:cd:27:36:c6:65:01:3d:97:40:4d:02:22:
a7:de:69:b8:80:ab:b1:a8:c0:74:75:22:66:aa:21:
1b:c0:66:eb:6d:55:8f:b2:cd:4a:72:fd:73:5f:d7:
42:49:f5:ac:14:6d:86:62:51:e6:22:5d:ee:ad:8f:
76:16:3a:b5:b1:47:11:16:b0:8b:ee:10:2d:17:a2:
8f:8b:7d:4c:56:0c:3c:5a:3f:d8:a5:02:5e:10:65:
98:2f:06:20:99:e5:ab:b8:74:07:e0:44:3a:e6:de:
50:b3:32:1a:aa:da:2d:d0:71:65:4f:75:d5:3c:c7:
1c:70:ac:86:5b:5a:46:ab:09:18:3c:bb:e4:8b:67:
45:b7:c0:f5:b2:a7:b3:cf:6a:35:b5:53:aa:79:17:
b3:b7:8e:bd:c4:eb:21:9d:8e:c0:0d:72:0a:26:21:
39:9f:99:e1:f5:fe:a6:0d:ab:2d:43:2b:25:30:9e:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:C9:FB:78:46:8A:6A:2B:AA:A0:7D:65:DD:A1:A4:A9:7D:F4:BD
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:06:c5:87:13:8c:33:44:e9:87:31:8d:6a:7a:be:f0:53:
40:da:57:54:a3:b6:87:d7:99:47:27:b3:7c:a7:01:3b:39:2e:
b4:0c:06:fb:79:a5:7f:8c:b1:ee:bc:50:54:7f:74:58:ad:c6:
d4:37:ac:e4:a3:df:20:4a:74:9a:ae:e4:f9:1c:72:17:ab:61:
ec:e7:b2:ce:78:c9:cd:5b:4c:13:17:b3:5e:2c:b5:84:75:2c:
c6:8d:d5:43:81:f1:74:c5:c2:d3:77:1c:4e:de:c7:12:72:24:
4a:2b:72:aa:b0:c1:ae:da:20:91:ae:97:24:02:3a:cc:60:b2:
1c:24:8a:8f:5c:5b:a4:c7:f0:20:c2:83:c5:b8:71:e7:a4:3f:
9c:61:26:06:93:cc:16:bd:59:f4:22:64:9a:be:c5:c4:6f:ac:
f3:f1:22:3f:4f:9a:df:b0:93:c5:39:17:0b:10:d6:a2:a1:cc:
23:93:b4:2e:13:02:ce:01:70:31:48:6c:5a:c8:04:90:21:51:
48:b1:a8:b5:14:d5:19:74:d8:0d:73:70:02:59:18:7b:50:05:
2c:76:82:c5:e6:f1:8a:33:e7:e8:cc:c3:de:e2:8d:8b:20:70:
b9:a7:cd:19:0c:f7:72:9d:ab:71:3c:71:93:95:a0:c1:7b:91:
1b:49:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:40 2025 by rpki-client