Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
File: IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft (raw, json)
Hash identifier: jLibLX/8ueA6gOb7M2AAeWsPLj+o5Xo5lsvKhc8UtJY=
Subject key identifier: 73:C6:67:BB:94:07:4D:93:07:EE:0A:2D:8A:96:A7:48:A8:75:F5:D1
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 0196575CC94216D7971F3FCD6D521F0D9F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
Manifest number: 0186
Signing time: Mon 21 Apr 2025 08:00:20 +0000
Manifest this update: Mon 21 Apr 2025 08:00:20 +0000
Manifest next update: Tue 22 Apr 2025 08:00:20 +0000
Files and hashes: 1: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (hash: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=)
2: IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl (hash: 0DwPCjGLX1+QSb5If20p7TFGqLnbITDjrrmnNLgtXQU=)
3: a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (hash: 6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:c9:42:16:d7:97:1f:3f:cd:6d:52:1f:0d:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Apr 21 08:00:20 2025 GMT
Not After : Apr 22 08:00:20 2025 GMT
Subject: CN=73c667bb94074d9307ee0a2d8a96a748a875f5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:a3:01:01:39:58:55:21:f4:b2:8f:01:18:
1e:bb:53:e2:98:fb:a7:fd:0b:da:37:2e:bf:76:54:
6f:fb:b3:41:37:60:bb:54:26:b0:a0:1a:1e:7e:46:
ae:b8:e8:0f:74:50:8e:f7:af:74:d8:98:bf:62:b8:
88:dc:e2:e6:ad:f5:5c:10:81:d5:e3:73:93:f5:9c:
15:ef:88:75:ef:3c:f8:0a:87:97:29:61:fd:5b:36:
39:89:33:84:40:4f:45:b9:fc:61:22:91:5c:5b:20:
4c:4d:b6:c3:46:38:57:b7:5e:ab:26:7c:08:4c:f7:
a6:1a:4c:c3:95:06:cc:75:7b:85:fc:1a:67:2d:92:
63:d1:68:cd:86:4d:ae:5d:f2:3d:24:c4:9a:75:65:
0d:66:5a:9c:f7:5d:bb:4b:27:9d:6b:f6:ec:10:cf:
ca:65:70:59:82:80:3c:a9:62:74:8a:08:46:eb:a4:
b2:0c:3d:7a:82:50:08:90:bb:da:a8:c1:d9:e9:e9:
17:d0:d1:0f:df:29:ff:86:24:8f:3f:42:ef:1f:39:
5d:81:84:e8:63:f9:44:73:30:cb:9e:33:72:4b:6b:
20:da:19:e4:a2:e6:54:58:71:24:2f:82:f9:5f:61:
78:40:b7:af:59:61:be:15:46:9a:31:a9:ad:67:ad:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C6:67:BB:94:07:4D:93:07:EE:0A:2D:8A:96:A7:48:A8:75:F5:D1
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f4:0e:19:2f:7d:6c:12:a7:e8:ab:3c:5c:e9:eb:61:de:64:
6a:61:18:a2:c4:0d:a7:5d:32:15:b5:fd:f6:6c:45:b2:2c:73:
30:f9:46:b5:1b:f8:78:24:34:81:69:87:82:b1:79:02:95:e0:
97:9b:d3:42:ae:ba:e6:41:7b:73:2e:04:99:0c:ec:38:6b:f4:
12:cb:13:d1:79:fb:c7:a7:17:f6:eb:41:8b:6c:f6:84:6d:74:
b4:4a:bf:29:d6:a6:02:46:61:c8:ba:b2:ee:84:0f:15:a0:d6:
eb:75:e0:f4:6d:df:0e:ce:1c:85:ea:c6:93:db:5d:7d:fa:a4:
01:39:b8:c9:f4:a6:f6:96:8d:f5:f8:1c:c4:ec:d6:8a:65:a2:
99:8d:4c:87:72:24:1a:be:65:52:b4:8c:a9:08:27:44:e6:88:
f1:8e:f8:34:98:a9:fa:c3:45:c7:b8:79:2d:ad:70:78:e0:10:
1a:cd:cb:1e:30:14:0b:ea:17:c3:76:39:fa:25:5a:ef:80:f4:
8c:1e:6e:9d:33:cb:cc:c9:cd:3e:8a:ae:7f:d9:67:b6:cc:af:
0a:44:f0:7f:d1:b0:37:2a:b4:2d:72:70:1e:4a:3d:d9:4b:bb:
6a:58:22:d2:cb:41:6c:b2:91:02:d1:01:01:3b:a1:e4:ac:8c:
4f:00:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:14 2025 by rpki-client