Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier: htY3MkDLBvtzh5PHFuwzT4X2ZL1lRrqPQKnE6n5aUwA=
Subject key identifier: D8:44:31:4E:84:8F:D4:31:3A:5D:70:19:66:6C:B2:B3:CD:D4:2A:C7
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 01965123F8569523BA3748925A7A1FD5BC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number: 0140
Signing time: Sun 20 Apr 2025 03:00:33 +0000
Manifest this update: Sun 20 Apr 2025 03:00:33 +0000
Manifest next update: Mon 21 Apr 2025 03:00:33 +0000
Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: EvTTfgBH5hsau1IC2GEX6/MK0VzIr9rbVJYx0LcPxt8=)
2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:f8:56:95:23:ba:37:48:92:5a:7a:1f:d5:bc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Apr 20 03:00:33 2025 GMT
Not After : Apr 21 03:00:33 2025 GMT
Subject: CN=d844314e848fd4313a5d7019666cb2b3cdd42ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:98:b1:78:79:62:d4:42:9d:10:a5:0a:cd:
d6:75:84:5e:91:9b:03:97:8f:66:89:07:9b:c9:bd:
12:41:56:07:65:e0:84:0f:d6:6a:90:9b:39:ef:29:
ea:d7:8e:82:4a:70:9b:53:a9:bc:ce:27:c0:0f:51:
05:46:dd:e9:61:a0:93:4b:7d:e2:e4:17:14:4c:6a:
a1:a0:27:69:8f:f7:58:ef:50:74:e5:46:2b:4c:13:
81:95:e9:c2:0b:17:49:ac:0f:6d:e4:f0:72:49:35:
8d:6f:4f:d7:e1:3a:ec:56:c3:a7:01:54:12:02:65:
08:33:8b:3e:0a:8c:a3:be:d6:b9:9c:9e:e7:63:0a:
00:1e:28:72:32:8b:b9:27:54:64:90:c8:e4:bb:6c:
59:60:72:f5:29:63:38:c0:d8:48:34:46:4b:97:e3:
eb:35:d4:91:0a:2d:09:d4:0f:63:7e:29:a5:99:a5:
f9:46:ba:65:15:51:aa:c7:67:d3:e3:df:3f:c1:04:
3c:97:1a:40:19:a6:30:b9:ec:52:bc:bc:8e:a3:48:
a9:79:26:12:34:24:c3:6e:c3:82:33:cf:74:ab:01:
3e:a0:e1:f7:32:08:1f:3d:5e:c5:91:75:94:c8:72:
ab:0d:de:4c:39:0c:42:fb:ef:df:64:6a:26:f7:c0:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:31:4E:84:8F:D4:31:3A:5D:70:19:66:6C:B2:B3:CD:D4:2A:C7
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:de:53:79:87:68:5e:42:63:c6:53:03:6f:11:10:f6:41:90:
6a:e4:d8:9c:10:81:87:1e:62:d8:2e:7e:b9:04:6a:64:83:5d:
5a:a0:ed:e9:36:22:f7:c7:f1:39:9f:c5:11:cc:c6:9c:ad:72:
39:b3:2b:8e:d5:f9:b2:7d:1c:a8:2f:40:cd:d4:21:f4:f5:ca:
90:c9:e6:80:96:be:d4:6f:1a:4a:45:76:ce:4d:61:5d:e4:15:
7f:97:b0:de:77:e7:d7:9c:5f:0d:d7:35:02:2c:2d:b2:1f:b8:
f2:ac:9e:fe:ab:7f:a4:e3:7b:14:fb:b0:cb:09:f0:b7:3a:21:
7e:28:ed:c2:f5:22:d7:59:c6:b3:0b:7c:f4:64:fb:60:3c:73:
19:bd:e9:f7:ff:80:fb:de:99:e4:a4:77:1a:85:28:70:c2:97:
d2:fe:d2:3c:f3:5c:f4:e6:55:2f:13:09:f9:4d:c7:07:b8:e8:
5c:2d:f8:ab:a4:22:4c:a1:e8:5c:9e:09:cc:e6:59:2b:34:00:
70:6d:db:b9:eb:1a:90:8e:e6:ea:d0:bc:07:8a:d2:47:27:49:
f8:00:ee:10:d6:8e:de:25:e3:9f:66:01:eb:e9:0e:cc:1e:6a:
bd:5e:03:84:aa:58:d4:e9:8d:01:74:4e:47:e1:26:fe:46:23:
c3:9b:cf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:02:36 2025 by rpki-client