Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File: IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier: sGrxlOPMGpOW5/mVxfxzLy4PNTe6Fm2mmMEWnmoXoBI=
Subject key identifier: 44:A3:61:0F:15:18:21:F2:64:71:2F:E0:74:8E:D0:FE:24:74:C4:22
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 01965B70800F2BB21DCC2FFA3A2D63F3A4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number: 0EFC
Signing time: Tue 22 Apr 2025 03:00:21 +0000
Manifest this update: Tue 22 Apr 2025 03:00:21 +0000
Manifest next update: Wed 23 Apr 2025 03:00:21 +0000
Files and hashes: 1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: 3TsCC2wKrvKFh0/7gD6YwatgTaWerZ62uXe7dzLM0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:80:0f:2b:b2:1d:cc:2f:fa:3a:2d:63:f3:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Apr 22 03:00:21 2025 GMT
Not After : Apr 23 03:00:21 2025 GMT
Subject: CN=44a3610f151821f264712fe0748ed0fe2474c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:a6:59:31:72:1f:65:00:f0:d8:ab:b7:14:
55:a6:b3:72:80:69:1c:f7:20:a5:b4:30:98:3b:d1:
fb:3b:c5:8e:ce:26:e7:3a:5a:1e:74:9f:84:30:b5:
21:64:74:42:d9:e3:88:02:80:3a:90:e3:40:53:b9:
81:2e:62:ed:50:b6:a1:37:d9:47:fc:5a:13:10:79:
c6:f3:91:bf:ef:98:b1:04:71:69:cf:a3:59:77:db:
8f:a6:12:b2:cb:87:6d:2c:34:18:a4:b4:66:6c:45:
00:5e:a8:71:e4:c3:b2:7b:38:ea:0e:7d:68:28:c4:
ae:7e:44:51:b1:9d:ba:83:18:7f:ae:fe:f7:97:35:
a8:44:59:60:7c:08:37:bf:71:0c:c5:55:af:7f:50:
f5:0b:5e:35:4c:2a:c6:35:30:ad:41:8f:42:c3:54:
a2:3d:de:c1:2b:06:0e:d0:16:d5:ea:9d:00:23:52:
17:e4:8d:94:5a:27:98:dd:0a:7c:28:0e:28:f9:21:
ef:31:6f:61:e8:a7:0b:75:89:59:58:ab:a7:23:20:
89:d2:9a:a8:6b:0e:bc:0c:66:b0:89:f2:f3:31:ac:
93:1c:50:45:01:c6:24:01:57:98:fb:e4:09:73:bc:
71:fa:35:7e:5b:21:f4:dd:25:b6:c9:1c:c5:be:2c:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:61:0F:15:18:21:F2:64:71:2F:E0:74:8E:D0:FE:24:74:C4:22
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:38:09:cc:3c:4b:5d:01:4a:7d:d9:03:88:f6:a4:69:b2:
98:bc:05:8d:91:8d:ad:a2:c1:27:82:4d:b0:8d:51:09:bf:01:
67:8f:9a:3c:5a:02:9c:a9:85:10:92:3f:b9:42:67:32:1c:37:
e2:14:e8:d6:15:4b:b9:bd:fb:f0:44:a7:5c:59:ce:e3:5e:0c:
c9:2f:44:23:7a:62:21:e7:ff:fa:db:8c:75:58:46:15:73:4e:
3a:0b:6f:86:27:e8:ef:0b:e2:67:db:68:3a:b8:ea:1b:72:b2:
b7:c0:5a:83:d5:87:a7:1d:c8:85:58:20:e3:a5:c9:ba:f5:96:
6d:3e:8d:05:01:43:0a:3a:0d:6f:ad:b9:aa:99:5b:36:f4:98:
d7:ce:70:67:c1:a7:4c:ef:f0:c7:7d:82:10:2e:fc:80:f2:07:
af:4a:8a:b7:af:55:a7:3e:48:03:31:4b:ec:7b:a7:39:2d:79:
59:f3:23:6d:ca:70:24:00:ac:5e:2e:65:b9:9e:ca:88:cb:2e:
40:b4:d1:e7:27:d2:94:17:04:62:27:e0:49:0a:4d:21:ca:e9:
8c:a0:17:f6:9e:3d:45:67:d1:d9:2a:6d:88:53:1a:20:a2:9f:
d4:55:1d:8b:aa:a5:2c:e6:b7:ef:20:06:1e:88:c0:22:ae:30:
88:f0:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:42:48 2025 by rpki-client