Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: P82iqdd8RROqjk3v7dvDmzR65U4ONkx0WhFPenjtWts=
Subject key identifier: A3:99:49:E9:69:A4:D3:27:DA:AF:35:EE:E8:A2:C2:D1:11:06:06:0F
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 019655DD0AA6C8CB758E75B94796E63DB0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 0107
Signing time: Mon 21 Apr 2025 01:01:11 +0000
Manifest this update: Mon 21 Apr 2025 01:01:11 +0000
Manifest next update: Tue 22 Apr 2025 01:01:11 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: Dys3l9AYeukZIOlcaNU7tZhzIJDf3UhMX5A5lbG45Jk=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:0a:a6:c8:cb:75:8e:75:b9:47:96:e6:3d:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Apr 21 01:01:11 2025 GMT
Not After : Apr 22 01:01:11 2025 GMT
Subject: CN=a39949e969a4d327daaf35eee8a2c2d11106060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:87:3c:9f:98:c1:ef:63:65:cf:9d:92:4a:
6a:97:8b:1c:6e:72:be:95:b1:53:7a:2d:9e:f4:59:
60:0b:2d:df:a5:ef:5e:13:2f:8d:f1:a7:fd:88:e0:
03:75:59:25:e6:4f:ca:00:a8:ed:ec:e3:b3:22:47:
16:1b:42:9b:8f:24:62:71:bd:be:db:11:64:40:86:
c9:4b:82:c0:ec:59:2b:ab:eb:90:e4:2e:6e:2d:93:
70:87:9c:2b:72:16:10:ed:9b:f6:00:d8:0d:31:41:
93:e2:fd:4a:fa:fc:34:58:b2:92:84:c3:e6:dc:c1:
26:4c:d5:e0:52:1c:ff:ce:81:c3:2d:f3:73:18:a4:
04:98:72:07:95:6f:59:01:6f:2c:88:44:c0:a9:52:
70:c4:24:8d:8b:fe:4f:71:f0:5c:64:80:72:17:38:
07:fa:1d:b9:21:56:8a:79:cf:5c:9d:e0:92:41:ed:
a8:e7:5d:e3:36:d1:88:4d:4e:30:14:68:ac:98:61:
58:27:f7:9b:2c:99:7e:b7:82:b4:c2:17:9f:ce:46:
93:18:1e:66:e0:eb:31:62:d0:6f:97:9f:1e:ea:09:
a2:b6:3f:60:6a:1a:14:71:c6:b4:ef:24:5c:c9:d2:
96:5c:1a:6d:4e:91:42:6f:f0:da:50:1d:e4:5a:30:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:49:E9:69:A4:D3:27:DA:AF:35:EE:E8:A2:C2:D1:11:06:06:0F
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:7a:96:bd:c6:91:59:38:a9:0b:63:54:13:1c:04:a1:f4:
fa:c6:8e:43:05:5c:92:65:02:19:11:14:7f:e3:11:f6:37:34:
a1:1a:b6:9d:64:4a:e3:7c:5c:40:a3:39:44:74:35:ea:16:53:
aa:d9:f4:23:1a:7d:67:4c:8a:3d:44:28:6c:19:11:8e:ab:49:
27:74:48:c1:f6:94:77:02:f5:e6:39:b2:dc:0f:e2:dd:c3:a1:
b1:f5:42:a2:80:1a:de:5a:24:67:fb:55:f4:eb:ff:c3:fd:28:
9b:71:6a:1f:e5:48:ab:05:f2:10:a9:80:eb:2d:bd:cc:10:9a:
d8:d1:52:bc:d3:03:d6:3f:d8:3b:bb:31:3f:08:a0:cc:87:63:
55:4d:88:7a:12:7a:db:0a:95:26:9f:14:72:44:29:ba:4e:26:
8f:ed:e4:6f:33:bb:a9:d0:4f:8f:5d:78:b2:e7:a6:d8:09:5b:
f6:c0:79:e2:e4:b4:f5:77:b1:f4:a1:47:e8:8b:7f:d6:0a:a6:
b0:3b:5e:64:e4:9f:40:b4:a6:cf:2d:22:13:bf:15:c9:9c:15:
91:26:75:64:24:41:0f:3f:26:33:55:c5:31:a3:9b:6e:12:9a:
e0:ba:02:c9:c4:55:5b:91:c4:58:e6:08:ec:34:aa:dd:a9:56:
16:64:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:29:50 2025 by rpki-client