Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: GIVXDqaSB9x5YZE7sbem+A8oWXaBbRA7LKxsAE1VLTo=
Subject key identifier: ED:17:DE:0B:15:DC:0E:CD:03:0B:82:FD:95:25:85:BB:F9:B0:7D:1A
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 01965793EA69BA266E308970762ECCC40E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1238
Signing time: Mon 21 Apr 2025 09:00:33 +0000
Manifest this update: Mon 21 Apr 2025 09:00:33 +0000
Manifest next update: Tue 22 Apr 2025 09:00:33 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 3H2BZZHpv+x7BOPkgvf5V1TWJyLV/hmk8l5BcVdF5yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:ea:69:ba:26:6e:30:89:70:76:2e:cc:c4:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Apr 21 09:00:33 2025 GMT
Not After : Apr 22 09:00:33 2025 GMT
Subject: CN=ed17de0b15dc0ecd030b82fd952585bbf9b07d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:87:d9:c3:a6:41:57:10:8e:bf:f4:f7:06:
e2:a8:6e:28:00:c4:07:1a:01:2f:6d:22:b4:ce:8b:
b8:81:ef:47:34:5b:d5:70:19:b8:13:e4:a6:1b:29:
a7:f9:8e:ba:ea:dd:a9:07:48:ec:71:d4:a9:11:d8:
f2:af:72:e0:59:8b:9d:1c:22:8c:b0:e3:96:08:d8:
15:f4:b6:a4:d2:c2:f2:9a:ba:3d:eb:a5:84:34:ce:
57:e2:8c:87:d8:22:64:c4:eb:de:b3:b5:47:db:e6:
6d:81:88:98:ef:77:62:65:92:f4:dd:a6:ef:11:3a:
68:52:77:c4:c6:d0:c2:98:9d:5f:0c:fd:eb:33:ff:
18:7c:2f:1c:d4:eb:56:68:97:32:73:dd:65:e6:7a:
cb:4c:d7:b0:3e:e3:ec:ca:8f:50:ec:3a:f9:b1:f6:
af:cb:2a:0b:bd:16:d9:08:37:d3:0d:dc:e3:fb:73:
b2:ce:e3:1f:2e:9f:a6:4d:8c:1b:67:cb:8b:62:b8:
42:40:41:64:40:b4:c8:4e:fb:59:74:25:33:1b:42:
b1:aa:88:c8:a9:55:b9:48:ed:92:9c:ac:e7:f6:f9:
ce:fa:6b:1f:27:3a:3f:b8:d9:9d:ac:45:3e:03:71:
80:8e:50:84:1b:e8:f9:7b:38:b3:33:13:f4:19:74:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:DE:0B:15:DC:0E:CD:03:0B:82:FD:95:25:85:BB:F9:B0:7D:1A
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:1e:9d:d7:27:b0:1d:e0:47:8c:6c:01:27:e9:a3:5f:01:
39:e2:d9:40:28:56:ee:19:78:fb:13:78:d7:bb:89:ff:6b:26:
2b:38:ea:3a:94:78:99:93:18:81:e6:7d:f6:a0:f3:d5:be:ae:
8b:7d:9d:2f:24:8c:3e:06:74:86:36:fe:f9:36:e5:e8:ae:59:
6a:a4:02:5f:b4:b7:c7:f1:68:e8:ee:ae:18:36:e5:22:7c:a2:
33:82:51:96:c6:2a:9d:70:31:1a:c1:46:f6:3f:c7:a2:db:7d:
6d:97:cf:8b:1f:e0:13:83:fe:a9:78:95:d9:49:1f:48:c1:a3:
c4:68:69:53:32:62:1e:94:c1:9d:95:19:90:30:2c:20:a6:2a:
9a:b4:cd:f0:dc:b5:da:48:89:c6:c0:85:01:e5:80:0c:1d:f1:
07:9b:90:c2:ec:44:0e:77:84:b8:cb:37:01:25:1b:34:7e:f3:
a2:60:80:8a:32:39:2b:19:a3:74:2f:aa:19:77:4b:3d:07:90:
8c:80:59:85:ea:ce:9b:09:2b:61:63:d9:ef:3f:fa:41:16:97:
f3:65:62:04:ed:74:5d:3c:33:64:93:2d:47:1b:37:13:0f:4e:
6a:ac:a5:e1:ad:c1:72:d1:36:87:24:01:4f:be:21:28:c3:a0:
ad:47:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:49 2025 by rpki-client