Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: 8dmrs8qvVN8rOTcg4b7x4kS77liY9op4AJEFvwvwlZk=
Subject key identifier: 57:B5:0F:B9:EC:BB:53:4A:73:9A:FB:3F:E3:DC:18:A3:00:3B:79:D9
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 0196545C4FC0D4E2DB638194C438284292C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 14D8
Signing time: Sun 20 Apr 2025 18:00:57 +0000
Manifest this update: Sun 20 Apr 2025 18:00:57 +0000
Manifest next update: Mon 21 Apr 2025 18:00:57 +0000
Files and hashes: 1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: KOEvYsv3kXnMBJ45VReIyXxq1zHiZ8VFIN+2NyTU/a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:4f:c0:d4:e2:db:63:81:94:c4:38:28:42:92:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Apr 20 18:00:57 2025 GMT
Not After : Apr 21 18:00:57 2025 GMT
Subject: CN=57b50fb9ecbb534a739afb3fe3dc18a3003b79d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:f3:1f:4e:49:f7:6d:cf:2d:a9:d2:e7:68:
ac:22:c0:fb:10:34:db:09:42:ed:e2:2b:88:76:fd:
e7:77:c5:f5:58:fb:d5:7a:2c:3d:69:ed:5e:7c:4d:
da:ab:f9:cb:88:9a:97:6e:7f:9c:a3:bd:4e:ec:f9:
6b:1e:26:cc:21:a7:d0:db:63:d1:15:23:e2:d2:ad:
2f:19:42:74:62:be:08:43:09:c8:fa:c3:12:78:7c:
5f:56:7b:35:8b:2e:fc:fb:1a:f7:83:9d:84:bf:ed:
76:4a:e0:31:2b:55:d5:ee:f9:b8:c6:6c:73:2e:a5:
0b:5f:7b:55:cb:20:0d:d4:c8:9e:5f:8b:e7:52:c1:
c3:47:7b:a0:23:b8:b9:0b:6d:1c:e7:1b:66:6a:1d:
a2:99:64:c4:63:3b:d6:26:b5:1d:13:27:9a:18:62:
61:e3:39:92:76:61:1d:87:03:cc:68:9a:d0:16:17:
2f:66:53:6e:15:1d:b7:d7:cc:e4:b1:01:29:31:22:
33:68:72:b4:08:04:d4:49:cd:a0:65:d9:6b:4f:df:
8a:8f:1b:76:ab:79:27:b7:27:48:f4:8d:81:60:e3:
9a:a7:80:7b:92:22:e1:d0:cd:01:81:2a:08:56:fd:
37:30:8e:7e:24:b5:c4:2d:52:48:5c:b3:3d:6a:f0:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:0F:B9:EC:BB:53:4A:73:9A:FB:3F:E3:DC:18:A3:00:3B:79:D9
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:d3:0f:32:98:f8:90:63:d1:19:bc:43:3d:75:a5:20:e5:
76:71:40:03:d0:7f:f1:29:45:df:25:8b:10:4a:7d:26:29:e8:
35:8c:b4:8a:ab:4c:67:19:58:6b:db:2e:e7:60:b4:be:49:ae:
87:c5:87:a2:ce:45:ea:1b:da:81:21:4b:58:8d:33:51:73:87:
b8:33:66:a9:bc:7e:31:6d:e8:71:13:d2:a3:ec:cf:bc:00:94:
c8:3d:47:0c:ec:87:e3:56:5a:d4:57:b9:dd:0b:5d:bf:85:bb:
d6:be:bc:b9:07:20:a6:2e:17:07:e1:24:cf:01:0e:a7:34:4a:
9b:37:ab:cf:d8:ea:49:30:5f:41:7a:00:8c:af:19:d0:34:e6:
d3:ef:04:39:fe:7e:cc:3d:cd:38:31:9b:a6:46:2f:e5:c7:5b:
c5:d8:ed:9e:39:c1:ca:45:6b:6c:0f:4c:6e:6c:7c:01:4d:ca:
8e:4e:08:b9:c8:37:8a:e8:ac:e3:4f:32:34:b7:36:b1:21:0b:
ce:2f:5d:f1:0a:49:fe:9d:3f:3c:1c:ea:cb:ae:11:f5:ac:af:
f6:c7:44:71:a3:25:7f:cb:bd:07:7a:03:6f:35:9c:61:4b:53:
7f:bb:41:7d:12:ed:fd:af:9f:86:9c:91:3d:94:6d:f8:34:d6:
f6:bc:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:00 2025 by rpki-client