Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier: KISRBn8MxzXW+IPoYKLsVoGCX58RdPqMIIt1C8jUgBQ=
Subject key identifier: 47:4B:1B:73:E7:BA:75:84:3A:11:79:F1:F6:DA:4D:3E:06:57:2E:8E
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 01965492F7344E7054CEF3BF4675CDD9159E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number: 11CF
Signing time: Sun 20 Apr 2025 19:00:39 +0000
Manifest this update: Sun 20 Apr 2025 19:00:39 +0000
Manifest next update: Mon 21 Apr 2025 19:00:39 +0000
Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: XzplWpxMG41+pVhWr90cJY93QgxyyK6U9tk78W67acc=)
2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f7:34:4e:70:54:ce:f3:bf:46:75:cd:d9:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Apr 20 19:00:39 2025 GMT
Not After : Apr 21 19:00:39 2025 GMT
Subject: CN=474b1b73e7ba75843a1179f1f6da4d3e06572e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:30:cd:c4:e1:41:98:04:c5:ee:a4:64:1d:
3d:9c:70:3c:2c:bb:9c:1f:46:c4:46:47:3f:66:d4:
4d:f4:5a:db:20:03:a4:cc:9a:f7:77:5f:bb:56:36:
2e:ae:14:18:74:11:32:46:d7:03:f1:75:53:c6:26:
ec:43:1d:c5:0e:99:7f:f7:7f:a6:b2:bc:e7:f1:b5:
d1:11:33:ff:41:88:e7:b5:98:f1:bb:45:7c:e5:b3:
c7:c1:3c:ea:4e:32:a0:1c:63:e7:85:1b:4a:79:94:
fa:f6:74:7f:81:8d:d0:98:91:c7:4c:11:00:81:29:
7a:c5:4a:fa:bb:43:d6:53:0b:13:8a:6e:64:71:55:
6b:7b:f5:bf:46:01:6e:b1:d5:84:81:a4:dc:7b:89:
6b:05:91:98:74:59:d0:18:2a:0b:ea:46:97:bc:c6:
a9:04:08:b0:90:ee:65:cb:e4:c7:8d:fe:a3:39:22:
88:cb:4d:20:cb:a3:14:aa:72:0a:2c:1a:58:0a:e9:
c4:88:2c:48:cd:d5:c7:bd:f6:56:ec:5b:49:2b:5b:
ff:2c:7f:f2:d4:48:b3:13:bd:c4:a2:de:f8:35:20:
72:28:f6:74:01:b8:4c:6d:81:86:2a:27:e5:4a:f4:
e8:50:b7:04:b8:8b:59:96:0c:68:5a:8f:83:0d:1f:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:1B:73:E7:BA:75:84:3A:11:79:F1:F6:DA:4D:3E:06:57:2E:8E
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:07:ad:66:41:3a:9d:be:5e:d7:fd:ff:fd:f1:ee:90:1e:
be:de:64:5c:9c:b2:96:65:f2:70:f0:79:67:86:c1:6a:9f:37:
d4:19:b7:82:eb:1b:d2:21:16:c0:0d:17:e1:c3:d7:89:12:52:
c0:3d:92:08:a7:de:8b:15:be:a4:b3:e1:cf:14:20:75:21:c2:
72:13:33:d2:40:c3:20:c4:6e:68:f1:fd:9d:45:83:94:ab:4b:
08:95:09:24:fa:1c:63:fb:d8:c6:13:4c:a0:bc:2a:b6:e7:0c:
86:3a:8d:90:c4:3b:8a:14:28:6e:b2:c4:19:e3:67:c2:a2:b3:
74:cf:97:48:c2:1f:43:3f:2b:ad:67:a9:be:94:36:4f:e9:a4:
b0:49:05:1e:f0:5f:04:fb:c9:d1:5e:ab:b1:a7:14:d4:3c:e2:
72:3f:62:43:44:ec:62:ce:ed:69:59:32:59:99:25:29:4a:bd:
e4:ae:af:c3:4a:86:c4:f8:b5:df:67:3a:18:ba:d2:7d:27:73:
78:bd:80:4f:ef:9f:fe:91:b6:be:f0:41:80:3d:8e:a3:e5:18:
d3:25:1a:d7:3a:d7:42:09:18:13:f5:4a:ed:34:8d:28:4e:f3:
73:19:c2:72:7d:bb:93:de:6e:76:ca:54:a9:6d:bc:d1:de:79:
ba:11:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:04 2025 by rpki-client