Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: nx0t9Cv6fNXo55TbVoT/5/sVVLe8jXPsy5iFRAWBFM0=
Subject key identifier: CD:E2:57:F2:D0:E4:A4:C4:53:AF:68:43:CE:62:3C:7A:17:CD:67:DA
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01965CF1FEBC2E4230A6B86EEA6B24CEAEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 053E
Signing time: Tue 22 Apr 2025 10:01:25 +0000
Manifest this update: Tue 22 Apr 2025 10:01:25 +0000
Manifest next update: Wed 23 Apr 2025 10:01:25 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: sIF6yAIlUdyviVjAJRMlRhEMN/rNRX1nH5LFid5UKvs=)
2: v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa (hash: +ztaiH2S/aHDtgvKfj/YkXPsW58SyJ9uS27Ej7psyFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:fe:bc:2e:42:30:a6:b8:6e:ea:6b:24:ce:ae:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Apr 22 10:01:25 2025 GMT
Not After : Apr 23 10:01:25 2025 GMT
Subject: CN=cde257f2d0e4a4c453af6843ce623c7a17cd67da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:d5:01:b0:a3:3a:1d:89:68:e5:bc:b7:80:
80:3b:85:18:7a:54:7b:28:96:f9:a4:50:4a:8e:54:
62:69:e4:96:0a:08:5f:a7:6e:9f:2b:6c:cb:4b:14:
48:b5:06:66:82:76:a0:90:06:dc:6b:3d:c1:d3:c3:
fe:fa:27:b5:00:fb:2f:8f:d9:a0:50:c4:94:a9:09:
97:83:d3:3c:d2:6a:a4:a4:cd:61:1e:49:1c:a1:86:
9f:2b:b3:9a:4b:4e:dd:13:d4:b8:41:5b:76:0c:c8:
44:4c:19:39:65:4f:60:34:b3:1b:c7:d2:2b:6a:7d:
8a:e5:00:87:7f:85:c2:c4:70:1e:20:37:d5:4b:4f:
91:ce:46:f6:bf:fb:af:87:dc:b9:e9:51:98:78:55:
02:e0:70:eb:70:53:de:0f:6d:d5:c0:59:83:64:33:
57:0c:96:1d:87:3b:37:7d:29:28:73:b9:12:61:b1:
67:a0:c5:64:87:e2:98:6c:f3:32:a6:79:98:e7:73:
33:37:65:05:fe:cb:80:81:94:d6:c6:20:5f:27:6c:
fd:88:dd:2e:ef:c7:d0:73:c2:75:b0:5d:84:48:61:
94:13:7b:44:78:7f:7c:13:37:fc:6d:6d:d5:d2:c7:
23:41:73:3a:a7:ea:ba:80:66:66:30:25:78:04:52:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:57:F2:D0:E4:A4:C4:53:AF:68:43:CE:62:3C:7A:17:CD:67:DA
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:34:fc:11:96:78:a6:df:65:91:f0:66:4d:8b:3f:9e:03:
0e:85:69:44:c9:b2:67:19:5c:f1:30:a9:2c:70:b3:72:78:84:
9d:57:ef:30:eb:0f:74:5a:d9:f8:42:6e:c7:cf:e0:a4:2a:9c:
92:66:6d:85:48:8c:26:d8:87:a4:48:18:94:c1:68:9d:87:e7:
19:4f:d2:02:85:39:b8:4e:10:94:44:d0:5e:76:af:5b:e7:11:
96:cc:f4:cb:e3:c1:53:ed:6f:73:ce:3d:a4:ec:f6:44:e3:20:
9d:2b:40:71:a7:8a:26:d5:81:e7:ea:f5:61:06:55:7b:7c:69:
c3:57:a3:27:a9:97:b8:f3:98:93:d7:a0:c6:26:cf:ff:90:89:
fd:b5:c4:fe:77:4e:66:eb:f3:cc:24:f3:68:88:41:cd:3d:0b:
cb:dd:5d:6b:88:6c:5f:fc:96:f5:e1:10:b9:8c:91:55:3f:ce:
8e:a1:15:a0:6f:03:5c:ce:58:1a:aa:d8:f1:5f:8c:72:7c:36:
a8:77:76:d3:c7:fa:c6:4f:1f:c7:20:5c:35:c5:81:e9:64:f1:
fa:8f:28:ca:4a:6d:b2:ac:fa:1a:bc:46:f8:1c:d5:91:7f:51:
4b:d1:f3:66:ae:8f:98:2c:4a:13:26:9f:1f:2a:9f:7b:83:0a:
7a:d8:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:30 2025 by rpki-client