Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: pkuMcW3RXOY8VP+wZbjsxYLXpkNNu+hkTxUIKjHcfns=
Subject key identifier: EB:5C:38:48:2C:5D:C9:DD:1E:E2:3A:D2:CF:87:B1:E4:4E:EB:31:28
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 019658388B4A31EC32DFD28044BB91684344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 096C
Signing time: Mon 21 Apr 2025 12:00:22 +0000
Manifest this update: Mon 21 Apr 2025 12:00:22 +0000
Manifest next update: Tue 22 Apr 2025 12:00:22 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: 2FBzA0vhY3eYAvNYxk8YPc5LomRzC4ZkyKIwd2bjb7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:8b:4a:31:ec:32:df:d2:80:44:bb:91:68:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Apr 21 12:00:22 2025 GMT
Not After : Apr 22 12:00:22 2025 GMT
Subject: CN=eb5c38482c5dc9dd1ee23ad2cf87b1e44eeb3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:39:09:28:7f:93:1c:2f:6c:b5:5a:eb:2a:
b1:e9:ee:d1:aa:b0:c5:c6:26:da:03:54:09:c9:0c:
54:a3:ba:8e:06:58:c2:8c:77:db:e8:3c:25:dd:54:
7c:51:43:be:84:50:ed:d8:2c:17:69:4a:a1:ee:b7:
0f:f2:7a:5b:c5:44:04:33:fc:c8:7c:ec:4e:bc:22:
55:9e:a0:1b:12:51:5b:69:ae:5e:a2:4b:43:08:95:
10:0f:3d:3b:54:3a:6f:4f:bd:7e:49:10:ce:f3:6d:
dd:37:49:08:65:b1:e5:fd:2c:7a:12:32:b0:c5:3f:
fa:dc:21:af:cd:45:94:c7:31:46:33:66:75:68:c6:
1c:59:fc:41:b4:3d:aa:25:e6:5b:54:44:d4:b9:b8:
cd:e3:e1:78:41:3c:eb:e5:59:b6:9d:8b:20:9b:1d:
1a:d9:1d:b0:c9:0b:5d:cc:46:61:4e:46:57:77:15:
61:9d:0e:91:24:cc:da:ec:8d:02:e3:83:21:d7:9f:
28:4a:ab:8d:6d:b7:da:8f:d9:ca:d7:70:d6:67:28:
95:e8:98:67:35:47:5d:2b:cd:ff:bb:b6:14:ff:fe:
cd:40:68:2d:16:2b:7c:9c:4d:0b:da:51:aa:40:ca:
8c:cf:29:d5:20:b0:fd:89:db:73:e6:a9:a4:f1:02:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5C:38:48:2C:5D:C9:DD:1E:E2:3A:D2:CF:87:B1:E4:4E:EB:31:28
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:de:6a:42:d7:57:02:30:74:18:58:c1:8e:1b:5c:b9:8a:8e:
72:62:4d:a3:4e:e4:69:d7:2c:21:dd:db:6e:b6:7e:d0:bb:71:
37:75:e7:27:59:17:21:1a:7e:1e:75:cb:44:e9:eb:bb:2a:3f:
ac:9b:12:6f:0c:53:b2:19:d3:c0:9a:ed:f7:5f:d1:58:f6:0c:
43:0c:4d:92:d7:94:ec:02:91:5d:6c:27:56:6d:9a:6b:16:ca:
e7:a4:af:96:74:1d:83:8a:5e:07:6d:4f:c7:cb:e0:a2:2d:22:
9c:aa:06:6d:dd:51:d6:17:21:6a:d3:40:47:a1:4f:d1:01:58:
43:84:b9:97:08:f3:7e:7b:9e:e9:5b:5e:42:0b:99:ec:cd:4d:
d8:1a:0b:da:54:b8:05:d5:46:42:d5:d3:bb:37:b6:21:1f:de:
87:a9:08:b9:fc:3c:99:fa:5a:5c:41:5e:8a:8e:d3:24:59:0f:
b2:3a:9b:84:41:38:b6:4b:e5:b4:6a:6e:e7:74:1d:de:01:7f:
4d:2b:80:e1:27:34:df:62:85:7d:ff:85:d7:c6:41:b2:27:d3:
55:57:d2:6a:51:60:bf:2a:0e:03:66:4e:16:61:cb:3e:a6:98:
aa:95:53:52:3b:c5:58:d8:24:60:4d:5d:b8:40:1a:3e:93:ba:
11:d9:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:09 2025 by rpki-client