Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: NSxuxRr9R9IKWNXgZ8H6Vsv5I3c5WKAZsiFX9rKj7xQ=
Subject key identifier: 27:12:80:EE:B9:89:11:E3:6F:22:2A:61:00:26:15:83:69:DD:25:C7
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 0196531273E33BC57F159090863E20C02EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0202
Signing time: Sun 20 Apr 2025 12:00:40 +0000
Manifest this update: Sun 20 Apr 2025 12:00:40 +0000
Manifest next update: Mon 21 Apr 2025 12:00:40 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: OrqAF0VlFKaCzc9xYEQng//vJChhbSJ2heneBrRZY7E=)
2: JhyOMYsYocvVqxQhLK_Rr143Yl4.roa (hash: D5et6ikl0ESFL5b58JCC0EoY+mZ1iOis6weM043v4DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:73:e3:3b:c5:7f:15:90:90:86:3e:20:c0:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Apr 20 12:00:40 2025 GMT
Not After : Apr 21 12:00:40 2025 GMT
Subject: CN=271280eeb98911e36f222a610026158369dd25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:42:7f:73:8b:37:ea:4b:d4:81:67:1c:11:
36:65:f5:2a:2b:64:d0:12:32:ea:18:50:a9:d6:93:
f0:43:2b:64:a2:51:75:a2:54:4a:f6:9c:70:22:3f:
49:ee:35:89:65:d0:3e:7d:5f:f2:49:7f:7c:20:51:
fb:6f:f6:6d:51:3b:18:ed:94:3a:9b:7a:86:8d:5b:
60:b9:00:d2:cb:96:87:16:11:26:58:ff:02:d2:71:
7c:bc:87:00:3b:e3:51:aa:db:e2:a5:7a:39:0f:1e:
5f:50:c0:22:bd:5d:b1:68:47:c4:da:9d:2e:26:b4:
2b:c9:39:e6:c5:5c:b2:8e:d4:4f:2f:b5:d2:47:2e:
3e:6a:f7:c3:7f:08:95:98:ae:7b:a3:b6:5b:dc:e8:
56:5c:f2:11:04:24:96:72:ae:9d:bf:be:ee:54:c1:
5e:e3:a2:dc:3e:1a:ba:38:1f:42:5f:22:ef:7c:3c:
ad:b3:81:47:a6:b6:09:e8:b3:f8:8a:47:af:e7:a6:
a7:89:bc:f1:7a:85:62:24:7a:22:ef:af:22:5c:84:
4f:f2:5b:93:5b:ae:f7:12:77:2a:9a:d0:53:08:00:
35:12:b7:64:50:e1:6f:67:8d:d7:85:c6:26:f6:57:
6e:59:0b:56:60:f1:b9:cb:4b:f5:2f:b8:ef:b5:f0:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:80:EE:B9:89:11:E3:6F:22:2A:61:00:26:15:83:69:DD:25:C7
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:39:b1:5c:f7:96:af:d9:ba:0d:e8:09:00:cd:01:f4:74:09:
1e:a9:d7:fa:9f:8f:92:5d:df:94:53:f4:1b:1b:38:ef:58:e5:
34:28:f9:55:da:4d:42:a9:cb:46:fc:e4:93:e2:9f:51:4c:2d:
f5:da:fa:1a:7f:be:13:62:8d:87:66:03:ed:eb:ae:77:54:7d:
39:d7:78:e7:7a:a8:31:fe:97:de:fb:d0:a1:e7:67:78:ff:dd:
0c:7c:45:ae:78:f1:73:58:56:ab:fc:89:c2:9d:de:a0:7f:0b:
a0:14:cc:64:22:60:c6:c6:31:d1:2a:fb:cd:25:ab:ee:1b:90:
13:1d:e3:be:57:ed:39:5e:ad:bd:c4:ea:47:dd:09:b3:0d:64:
13:51:fc:31:58:6d:ee:e3:55:37:dd:b0:f2:17:ac:18:cc:01:
91:42:f2:66:d8:19:08:e6:c6:21:f0:3c:13:6f:f6:05:d7:a1:
01:2b:52:72:49:0b:a9:c2:12:67:b4:30:f8:ae:09:f4:10:dc:
7e:59:03:19:e5:d7:11:62:80:bb:63:ab:9a:45:8e:e3:f6:17:
e0:d2:0a:de:aa:ae:15:a8:b3:77:43:b4:4d:2d:1d:16:de:7e:
80:57:1a:3d:46:c0:5b:eb:de:8b:b3:b2:d4:89:79:68:ef:f2:
4d:de:4a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:19 2025 by rpki-client