Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: FES7kmWsHqqjwFqj9Na8DLg1LvTpwI13zEW6+39k3hc=
Subject key identifier: C9:2D:6A:67:30:14:B0:F7:A9:2E:68:19:8A:23:4D:57:19:1C:D0:50
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019655A611D8E6791233F985ABD50C6BC713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 00:01:08 +0000
Manifest this update: Mon 21 Apr 2025 00:01:08 +0000
Manifest next update: Tue 22 Apr 2025 00:01:08 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: tX+etDlyEPkmvUmOEquP9uPyQLCO5LTHcrgW2wylo9g=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:11:d8:e6:79:12:33:f9:85:ab:d5:0c:6b:c7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Apr 21 00:01:08 2025 GMT
Not After : Apr 22 00:01:08 2025 GMT
Subject: CN=c92d6a673014b0f7a92e68198a234d57191cd050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:5a:75:dc:69:8f:fd:80:fb:6b:0c:db:48:
c9:f6:9c:32:50:53:fe:2c:22:00:41:b2:c6:ab:04:
e5:7c:e0:81:c3:f9:b8:af:be:a2:a3:b5:65:f0:34:
1f:58:da:6b:d0:6b:44:07:f0:47:57:61:7e:7b:43:
85:a5:20:4a:01:53:78:bf:a1:fd:76:27:b7:ea:bd:
19:68:a9:8b:cc:3d:65:5a:eb:33:9e:91:5d:67:85:
73:9a:24:1a:e3:83:e0:5b:19:db:8a:1d:9c:cc:28:
8b:c6:10:0e:68:f2:6a:ac:82:4d:a2:49:ce:78:6f:
39:83:79:c1:9d:8a:e9:b2:80:7f:49:94:49:1e:0d:
ab:5a:8c:cd:c0:fb:98:76:ac:f7:06:e2:c4:63:0f:
e0:6f:01:79:86:3e:3b:e2:98:1a:e4:af:fe:da:52:
e7:a6:49:10:4b:7a:2c:51:aa:fb:e4:af:78:01:9b:
fb:de:d7:ba:91:ab:52:cc:10:27:b7:e5:ce:a1:54:
0e:cd:01:de:5a:29:56:43:90:10:e9:98:fc:37:0c:
33:bb:34:fa:1b:2e:be:d7:cb:3b:ef:cc:fb:c4:1b:
ab:ba:f9:df:82:11:20:8e:4f:cb:5c:6c:31:07:a0:
82:ae:d6:57:f0:ef:4b:67:60:d8:8a:03:6a:e4:b5:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2D:6A:67:30:14:B0:F7:A9:2E:68:19:8A:23:4D:57:19:1C:D0:50
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:93:e2:e9:60:f9:35:fc:72:b7:11:ab:22:74:c0:a3:19:e1:
20:78:2e:48:d5:4c:3a:1c:b3:d4:96:d0:d6:31:1d:ea:1f:ae:
0b:8c:ee:f7:e2:31:ae:59:56:bf:0e:c3:e5:f9:0a:ef:03:cb:
7f:1d:17:ad:24:f0:1d:45:88:ba:80:1d:60:85:f8:6b:d3:ff:
b8:c3:ac:a1:3f:42:39:00:d7:fd:4b:66:02:cc:39:c4:24:0b:
c6:03:29:f0:0d:2e:a0:5a:cf:fe:06:6e:22:62:56:cf:99:f2:
22:ca:82:79:c2:2a:d7:57:3b:37:b1:c9:8d:61:87:0d:e5:a1:
cf:d6:6a:56:1b:81:6e:c6:44:59:8e:f4:1e:11:c4:df:f9:a1:
c8:7f:d9:12:e1:64:a1:23:54:f5:85:ba:e9:9f:5f:9d:21:d3:
37:fe:87:e7:49:a3:99:2f:d9:09:f1:4c:95:da:ad:1f:15:b3:
01:cf:ef:c6:d9:a1:c2:93:f4:c3:d0:c9:1d:62:0d:96:07:ec:
77:44:75:46:4b:bb:07:8d:8c:72:a4:84:18:1b:5b:82:9d:b1:
c5:f8:7c:da:68:ee:31:ad:c4:5f:c9:26:72:2c:f5:a1:80:9f:
f3:2f:6e:cf:be:f5:d7:9c:dd:c8:f4:53:f1:03:45:33:17:c4:
58:65:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:33 2025 by rpki-client