Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: wpKlJb725ey7OjPvQ0tTX81cqId9kNlZqqh9YWwacqo=
Subject key identifier: D2:2C:00:37:D4:3C:DE:11:E9:FF:8A:77:1A:78:8A:24:5C:4B:6F:83
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 01965124054D652E917AF136EF1C709B1590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0201
Signing time: Sun 20 Apr 2025 03:00:37 +0000
Manifest this update: Sun 20 Apr 2025 03:00:37 +0000
Manifest next update: Mon 21 Apr 2025 03:00:37 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: /89Z8HrwUSU8Qp77KGo8vNKtiJp4pJ5E/Me8UOgsp0E=)
2: JhyOMYsYocvVqxQhLK_Rr143Yl4.roa (hash: D5et6ikl0ESFL5b58JCC0EoY+mZ1iOis6weM043v4DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:05:4d:65:2e:91:7a:f1:36:ef:1c:70:9b:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Apr 20 03:00:37 2025 GMT
Not After : Apr 21 03:00:37 2025 GMT
Subject: CN=d22c0037d43cde11e9ff8a771a788a245c4b6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:44:79:e0:88:d5:f3:07:0e:c6:cc:7f:b9:
2c:13:cc:7d:86:26:de:f8:84:67:b3:e4:6c:41:9e:
07:ac:07:c9:b1:d0:eb:61:5c:49:3d:c6:33:cb:64:
e6:60:2c:eb:34:f8:81:dc:0e:94:76:18:4f:26:94:
d7:69:8e:b5:26:9e:2d:03:3e:cc:0f:1c:9e:70:43:
c2:f5:18:03:dd:19:02:7d:bb:11:5e:22:86:3f:f1:
cc:02:f9:f4:6f:8c:2e:01:67:84:8c:f8:73:ad:dc:
c4:ef:41:0b:b0:3d:ba:36:62:d1:d7:b3:9f:67:80:
b6:25:0f:95:8a:14:17:ce:3e:8e:3f:a9:5c:58:b1:
41:ea:e4:7c:92:f1:20:c9:40:6f:d6:9b:23:4c:97:
62:33:e4:8a:f9:f7:db:d0:1c:65:45:f7:95:08:d9:
50:18:1a:cc:21:c7:5a:c0:b9:6c:1a:d1:59:7b:76:
1b:9a:66:a0:1c:dc:09:65:7d:d3:9a:bf:e4:3f:3f:
cc:10:b4:87:27:9b:81:d4:b5:19:1c:c8:9c:7f:86:
27:92:e7:c6:f8:7c:42:5e:ab:97:a9:14:0e:3a:ab:
b1:5f:ef:e9:a7:d1:2f:6a:f4:d5:be:60:00:92:09:
f6:fe:4f:24:be:0f:7c:ec:1c:99:bc:bb:98:46:44:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:00:37:D4:3C:DE:11:E9:FF:8A:77:1A:78:8A:24:5C:4B:6F:83
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:79:27:ca:e6:0c:67:89:cb:44:04:90:41:17:60:05:49:
1f:2f:3c:4e:7c:d8:e2:b0:e2:d3:ec:04:91:ae:d8:16:4b:3b:
b7:45:c0:76:ff:7a:55:03:46:28:28:f9:54:94:66:c6:a5:fc:
e4:50:7c:1c:6f:d4:12:65:6f:5f:af:e4:ba:39:c5:ac:6d:03:
9a:af:04:06:81:95:59:ee:e7:b9:da:b2:41:19:78:22:66:63:
97:cf:30:f3:5b:55:76:bc:76:07:30:12:15:03:51:71:86:38:
0f:f3:ed:68:eb:1b:ea:cc:64:54:16:6f:89:a6:1a:a7:d8:2c:
4e:08:24:90:9b:f9:51:fc:d3:1b:be:72:e4:da:b9:c7:ef:1e:
75:bf:b9:15:75:a8:41:9f:ba:3e:ee:05:97:85:71:65:0e:42:
af:09:5c:ce:b3:7c:84:34:be:93:3f:d7:ee:0d:d6:af:3f:e3:
3a:65:1f:59:69:ed:49:9e:e4:09:7f:78:5e:0f:72:ce:a3:be:
15:ae:2d:aa:38:3b:2f:1a:aa:56:f2:06:c7:8b:80:a3:5a:f8:
a3:9a:c0:70:2e:14:6e:a3:e4:70:39:94:a5:df:5d:93:45:50:
26:4f:19:e2:73:a9:19:ff:1c:c5:fb:81:22:30:54:b6:17:cd:
8c:5f:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:00 2025 by rpki-client