Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: k1OjbSj90UBvKfLfdAhvn1gptiQdF7vwmmO4lpKr+Sw=
Subject key identifier: D9:AC:0A:98:14:22:0F:8E:49:98:25:2B:96:4F:A3:74:8C:CD:F8:79
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01964AEB1517F15938627927C1385D8B556B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 09C9
Signing time: Fri 18 Apr 2025 22:00:42 +0000
Manifest this update: Fri 18 Apr 2025 22:00:42 +0000
Manifest next update: Sat 19 Apr 2025 22:00:42 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: WVa6hF8578HXfvcbv9CcekSW2f/akzINmP6mEcq+GGc=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:15:17:f1:59:38:62:79:27:c1:38:5d:8b:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Apr 18 22:00:42 2025 GMT
Not After : Apr 19 22:00:42 2025 GMT
Subject: CN=d9ac0a9814220f8e4998252b964fa3748ccdf879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:2e:d1:92:c3:fd:e3:b7:5c:3b:69:a4:1f:
06:ba:d1:08:6e:14:a8:ac:02:5d:d0:cc:07:df:de:
4b:c5:a0:e5:e6:19:59:61:1e:c7:3b:50:f0:1f:82:
8d:b8:fd:9a:25:35:fb:54:dd:2d:23:e1:5c:7a:25:
46:0a:06:d1:fd:7b:9e:50:b5:7b:6a:41:99:ec:73:
ac:a1:54:3a:8b:59:a2:7a:49:c5:49:e0:2a:b6:c2:
6f:56:25:c2:ea:88:32:82:e7:f0:3e:17:96:79:7e:
62:2e:13:b3:2b:2c:25:70:15:e6:fa:1a:21:99:a4:
ce:89:2c:2b:e4:c0:11:33:2d:99:f4:35:64:2e:29:
7d:05:36:df:ca:a0:ef:61:f3:17:a9:b6:46:3f:ac:
b8:ab:7c:35:f4:11:35:30:a7:b2:0b:ca:25:80:8c:
a8:8a:1e:d1:af:ab:02:87:e2:65:4f:72:9d:81:c5:
04:6a:4a:84:1c:30:87:77:b3:0a:1f:88:3e:65:21:
f3:7f:90:58:c9:23:3a:5a:b1:8f:6a:07:ff:57:01:
c4:e6:4f:cf:7a:77:73:5c:ef:7e:0d:12:ce:5c:9d:
ed:32:9d:ab:27:b4:09:f7:c2:4f:1b:dc:f4:e8:ba:
73:d7:6c:b0:70:bd:96:11:a9:ae:05:c7:16:29:45:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AC:0A:98:14:22:0F:8E:49:98:25:2B:96:4F:A3:74:8C:CD:F8:79
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:4e:cb:a4:c6:39:c8:cc:01:f7:40:9a:4e:06:34:1d:3b:
de:cd:67:c3:a0:27:a3:df:65:79:09:fd:ef:db:51:d9:f5:4a:
e2:04:14:5d:e5:42:c0:87:17:7b:3e:6b:d2:db:d9:4b:61:6f:
95:03:26:6d:93:25:32:6c:18:ea:b6:58:c3:84:f0:c6:ce:a9:
c7:dd:e0:b3:12:2f:2a:b1:77:7f:04:5f:e1:ca:ee:93:0e:b0:
c0:c0:a1:ad:91:e7:89:a2:b9:b9:89:59:b2:5b:c1:05:42:88:
90:fb:ad:9b:4c:a4:af:a1:f5:30:77:48:ba:90:2f:9f:5d:67:
a5:47:09:1b:18:88:56:a9:85:53:4d:4b:57:ef:33:8f:e6:5c:
34:3a:55:b8:51:9f:a3:4b:2e:43:5b:bf:81:6e:ba:c3:8f:f8:
82:ef:42:66:74:0b:af:d6:5f:5b:00:88:bb:7e:77:77:e8:d6:
e0:d4:f0:34:f6:cd:72:d1:8f:29:bb:6c:89:ee:a6:80:91:8d:
fd:78:83:a4:8f:1b:ad:8a:69:ec:7c:46:2d:12:3f:03:42:d6:
0e:30:83:a4:29:ec:3b:38:34:17:5c:e8:5e:c2:e8:c0:93:44:
9e:9b:f8:64:93:01:e4:5b:c1:2f:07:7b:db:60:28:34:51:22:
fc:6b:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:34:50 2025 by rpki-client