Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: rY3WO84uIbAOrLg4sT8LkIR9nfUWB8wqt80bYC31Yo4=
Subject key identifier: 01:52:57:B6:E8:66:56:40:21:CD:FD:33:05:9C:72:25:DB:3E:2E:06
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0196598265E05C8D700C4CAAEFC329CA45B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 18:00:40 +0000
Manifest this update: Mon 21 Apr 2025 18:00:40 +0000
Manifest next update: Tue 22 Apr 2025 18:00:40 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: aAtpgDdUGDVB4FkBTpTBSWkIHX5zYon2qTU0ua1x3+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:65:e0:5c:8d:70:0c:4c:aa:ef:c3:29:ca:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Apr 21 18:00:40 2025 GMT
Not After : Apr 22 18:00:40 2025 GMT
Subject: CN=015257b6e866564021cdfd33059c7225db3e2e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:5b:b9:b1:c6:19:2a:15:c8:39:3d:58:23:
00:58:df:04:af:34:58:5b:0d:05:bb:fc:ba:40:ac:
e2:ea:a4:91:cb:7d:ca:29:04:b6:a2:87:6c:05:ab:
35:8d:15:7d:2f:2d:76:f2:e2:05:84:44:f7:21:bb:
2c:18:69:6d:1f:3c:27:c9:f0:9a:62:fb:57:74:ca:
40:d4:b0:96:3d:d7:fb:1b:bf:27:dc:f0:d0:50:2d:
74:4c:76:bc:66:ee:65:e2:87:b2:e4:77:7d:6a:70:
25:d9:2e:77:2b:d2:3e:d1:5b:1d:89:37:91:db:0e:
9e:e2:6b:3b:00:71:d3:ed:ad:82:5b:4b:c6:22:df:
26:6f:0b:ab:37:fd:99:d2:34:51:0a:b9:e0:85:54:
c1:04:4c:f1:d5:21:21:da:e2:bf:3b:40:1b:dc:50:
f7:eb:a0:80:b0:53:4a:f4:63:1d:e7:7e:33:e0:95:
8c:92:41:62:45:b7:01:99:a8:8a:79:48:64:94:07:
ea:c7:39:29:b8:46:74:26:b2:44:29:de:29:9d:a9:
ac:7e:dc:ac:4c:15:35:17:fa:df:9f:f8:2b:22:e9:
87:1f:a0:fb:e2:16:e3:7b:96:38:10:3a:ff:f2:4a:
88:46:b4:b7:9a:82:57:f3:c4:20:7a:4c:33:46:38:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:52:57:B6:E8:66:56:40:21:CD:FD:33:05:9C:72:25:DB:3E:2E:06
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:37:4e:4d:be:c8:20:3d:e6:43:74:0b:d7:80:1d:d3:75:
21:50:ba:11:1b:86:81:3c:54:ff:fa:c2:7f:ab:9b:a5:e9:8f:
e8:81:17:c6:6c:56:9e:21:7c:d5:bc:79:3d:ac:f2:df:b6:f2:
71:28:f3:f9:92:08:54:6f:b1:85:22:75:f3:6e:37:94:a5:42:
7b:fc:08:bb:3b:09:7f:af:83:bf:7c:fa:2f:19:22:e8:83:e2:
fd:ac:5f:29:e0:40:c5:dd:bb:4e:74:96:6b:9e:41:eb:90:68:
c8:b7:f9:8f:5c:6f:23:9d:ee:d6:9e:ec:70:b0:93:68:dc:d3:
97:02:55:18:ee:31:1c:0d:0c:49:c4:ae:0c:2f:6f:7c:5e:1e:
86:42:a3:91:d8:ff:0b:5e:ed:38:d9:e3:58:56:59:e0:9e:34:
72:a0:b2:01:b5:66:f5:cb:ea:1e:4b:e0:06:88:e3:83:a7:60:
af:46:c3:b3:b5:68:d3:2c:b8:44:fa:ff:c9:2a:d7:b6:64:b2:
57:7c:04:1f:7d:a8:22:27:80:14:90:80:57:8c:cc:9a:5b:7f:
55:99:c4:f2:91:72:75:d8:49:34:f9:05:1f:26:15:c6:07:f2:
f4:44:c3:79:f0:2c:85:68:b6:b2:74:a2:96:a6:dc:17:61:7b:
5a:9a:47:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:59 2025 by rpki-client