Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: v3dBkJQNYyaSuhpwSjiODCImOwNuDZ0yrGK3WTCLpew=
Subject key identifier: CD:8A:FA:CD:AE:FC:AF:C0:31:9F:1A:22:B0:53:05:05:A8:84:31:26
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 01965492D1DCEE2239C8F147465EAF495085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 19:00:30 +0000
Manifest this update: Sun 20 Apr 2025 19:00:30 +0000
Manifest next update: Mon 21 Apr 2025 19:00:30 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: meqjQZVLjSao0ZMyJAOoGniqRyknykghYTdTXtgdnXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d1:dc:ee:22:39:c8:f1:47:46:5e:af:49:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Apr 20 19:00:30 2025 GMT
Not After : Apr 21 19:00:30 2025 GMT
Subject: CN=cd8afacdaefcafc0319f1a22b0530505a8843126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:c3:f4:5d:23:69:62:f8:b7:b7:76:65:2c:
03:5b:af:56:e9:c1:aa:25:38:04:dc:03:31:05:cc:
5b:d2:4a:98:a3:d3:81:14:b7:05:e5:5a:19:07:d1:
96:76:c7:5b:3a:08:18:63:1d:84:a0:56:e0:a1:3d:
1b:af:ea:ba:86:2e:ab:c3:7c:c3:f2:c3:25:60:58:
f7:2a:55:cb:28:17:95:9f:c2:2e:d0:68:dc:81:bb:
ea:15:ad:7d:d8:79:72:bb:01:57:9e:af:93:6b:d2:
97:ef:29:72:a7:9d:5a:f2:95:b7:ee:7a:62:ae:f0:
b7:d4:6e:93:c7:b6:79:b0:1c:6f:7d:c5:ef:46:b8:
a5:70:af:52:39:18:39:c7:ff:ef:36:e9:98:ab:7c:
98:d9:46:21:88:6e:90:ee:7e:20:3d:50:30:0a:08:
11:70:a9:fc:65:ea:e8:7a:13:73:b9:52:af:ba:c3:
6d:12:bc:aa:5a:e6:46:6e:2d:81:83:2a:c9:03:70:
32:c2:e8:44:cf:4c:bf:da:d4:bf:68:49:b3:f7:e0:
de:4c:9e:b9:30:98:c2:b3:66:66:75:db:14:b6:bf:
d6:01:d2:6b:03:33:f5:fd:84:e9:23:75:7b:aa:12:
ef:52:14:9f:65:b8:78:eb:04:0d:f8:b6:05:b1:32:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:FA:CD:AE:FC:AF:C0:31:9F:1A:22:B0:53:05:05:A8:84:31:26
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:61:f9:f7:6e:c9:c5:e1:73:e7:4d:ab:bb:92:43:34:40:f6:
8d:25:6a:ee:e4:4d:d3:2a:81:47:43:b9:55:f4:0c:d6:b4:7a:
6a:a2:7b:d7:20:bd:7e:50:99:0d:05:34:34:f2:b3:8f:11:d6:
44:1d:f5:7d:d1:7f:4a:9c:b6:0f:d6:b3:51:86:81:e5:06:98:
ff:76:9c:da:ee:f8:dd:4b:4a:a7:1d:e2:62:5b:04:c1:c8:9e:
42:87:1f:a2:76:12:05:72:1f:09:76:ef:7d:c5:14:77:17:22:
a6:7e:d1:86:f6:3e:e9:f1:cf:be:35:65:d8:ef:62:6c:e3:fe:
4c:aa:92:4b:c3:24:f4:7b:ba:4d:5a:06:06:d5:55:32:c0:96:
03:3d:31:64:8e:28:c7:e2:0c:3d:6e:32:73:2a:bf:8a:ca:cb:
f8:25:86:f2:a3:c2:90:59:ca:7b:75:5d:57:3c:38:45:57:5a:
7e:31:e7:de:f7:ac:1a:fe:19:1e:1a:23:53:4e:b5:90:98:e4:
89:fe:20:81:63:ff:b5:c3:4e:9a:c9:d3:90:e0:1e:b9:b5:50:
12:01:b1:12:c8:27:37:4b:e4:0c:45:d0:76:99:0e:44:02:f0:
5f:56:e9:31:78:6b:f7:cd:53:8b:8f:f4:cf:4b:09:9c:93:c4:
a4:56:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:31 2025 by rpki-client