Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: f0qdrobn30qpQ+IGcqEnnuET93SeQ/emRsLufeGsCc8=
Subject key identifier: 0C:6A:00:46:57:E6:93:B8:5C:7F:D8:53:A9:2D:49:D5:D4:E7:FD:F2
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01965801C93EDAA80E3FFB7EED743A8ECD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0632
Signing time: Mon 21 Apr 2025 11:00:34 +0000
Manifest this update: Mon 21 Apr 2025 11:00:34 +0000
Manifest next update: Tue 22 Apr 2025 11:00:34 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: SGA00LInZnEbiE+bCVsnH9nh+caAwidQlpUtR9hPC5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:c9:3e:da:a8:0e:3f:fb:7e:ed:74:3a:8e:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Apr 21 11:00:34 2025 GMT
Not After : Apr 22 11:00:34 2025 GMT
Subject: CN=0c6a004657e693b85c7fd853a92d49d5d4e7fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:09:1b:5e:2a:ec:75:19:8e:bc:92:c7:66:
e4:ae:6c:4c:5c:6d:50:51:d2:af:b5:ea:b9:78:cc:
c5:d3:49:91:c1:18:37:c5:72:48:f2:ba:3d:7b:22:
f3:66:7a:b3:48:b7:f9:a8:f7:9b:00:79:00:5d:84:
e5:a7:f5:a0:df:f8:00:12:b3:1d:1f:86:24:14:dd:
d6:5a:21:6c:fb:ea:28:b7:9e:85:a6:56:11:0d:a1:
94:87:62:c2:89:d5:df:8d:ba:91:47:32:cb:dc:48:
1e:1f:cf:f1:00:2c:eb:eb:82:a3:ee:7a:e3:b2:f9:
69:2a:00:c7:34:aa:3a:f4:47:49:be:30:c9:c7:7f:
85:32:de:a7:af:7e:36:1f:b5:03:22:23:30:00:29:
87:88:2c:16:21:94:be:36:49:35:16:dc:a9:77:5c:
e7:c5:d0:c6:ca:c2:5a:fa:1f:e6:67:68:8b:63:d0:
6c:98:fc:13:b8:7a:b5:e6:ac:7b:9f:de:98:0f:13:
a3:32:66:71:64:ba:98:a2:52:76:63:b2:b8:38:90:
8f:f5:a1:a5:08:74:6a:39:ff:0e:80:44:31:1e:36:
33:64:b5:e6:6a:e3:c0:83:74:6e:11:9d:5c:0b:2e:
6e:11:60:fc:6e:f0:f9:39:b9:18:78:31:00:5b:f9:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6A:00:46:57:E6:93:B8:5C:7F:D8:53:A9:2D:49:D5:D4:E7:FD:F2
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:0b:52:96:74:6c:ab:72:05:a9:56:7a:65:5c:51:ff:c3:
fc:ef:cf:b3:70:41:4c:34:33:41:85:a2:8a:2d:99:4c:bf:5d:
ec:c5:ff:c3:dd:f1:24:3f:88:20:fa:8c:5b:ad:34:ed:6e:d6:
5a:e2:bf:f8:c8:e6:30:90:2c:66:c8:e0:62:5e:63:d7:32:98:
92:3c:43:41:9b:fb:83:8a:7a:b2:93:04:da:29:ef:c0:a5:a1:
32:aa:a5:d6:ca:b0:46:30:92:92:aa:9f:37:ef:64:50:f9:8d:
9d:a3:5e:14:25:97:fc:90:f9:bb:3c:26:9a:f6:38:85:40:5e:
a7:eb:4b:89:83:20:b2:25:45:c3:87:45:cd:d7:ff:8f:5c:64:
62:90:e5:25:2a:d4:14:b6:95:a0:3e:60:6f:30:24:89:84:4c:
d2:0d:d6:08:23:12:97:bf:5a:1f:90:43:3b:d4:12:dd:5d:7c:
62:5a:af:7d:36:f5:67:92:a8:44:e7:65:01:74:15:83:fe:34:
8f:1b:55:09:e5:76:f9:87:9f:37:74:0a:d7:1c:c4:91:a9:cb:
bf:44:dc:84:72:a8:39:9f:31:91:2b:e6:16:db:dc:66:dd:87:
89:6d:1a:b3:5e:3f:a9:f0:71:6c:f2:0c:8f:43:b6:33:16:2f:
ec:5f:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:23:20 2025 by rpki-client