Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: 7fV6wHKVfkytgosi9BMpET6oSpGmRV7ck3CeqYW75KQ=
Subject key identifier: 40:EB:F3:00:31:A9:4E:EA:17:CA:B9:A7:B2:F1:05:A5:4E:FE:13:E9
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019653EE8E9AF45CEF7E0939F64CEF1E6A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0100
Signing time: Sun 20 Apr 2025 16:01:05 +0000
Manifest this update: Sun 20 Apr 2025 16:01:05 +0000
Manifest next update: Mon 21 Apr 2025 16:01:05 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: 9YKkBqxE1aA4MLpjicX2fBFA+XgePLojZZLcxtglPYw=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8e:9a:f4:5c:ef:7e:09:39:f6:4c:ef:1e:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Apr 20 16:01:05 2025 GMT
Not After : Apr 21 16:01:05 2025 GMT
Subject: CN=40ebf30031a94eea17cab9a7b2f105a54efe13e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:64:b4:ea:85:ba:23:c3:16:4d:80:83:35:
e0:c9:e4:72:96:e0:3c:de:e5:46:38:1f:32:47:86:
2f:80:b1:40:b9:34:b6:be:e8:3a:6b:40:bc:48:57:
3b:4c:54:45:cc:1d:78:ed:b3:a8:47:cf:3c:b1:22:
94:53:c8:61:c6:87:88:d8:4d:58:f8:b6:af:87:e8:
d9:dd:9f:c0:6d:7c:3e:f8:b1:9a:60:a7:10:4e:53:
a0:c9:eb:4a:5e:79:82:de:c4:87:65:6e:8d:84:33:
7b:2a:1b:41:58:ad:0a:b0:fa:08:02:a5:9b:4b:fa:
5f:b4:30:8f:f3:31:92:25:c2:31:45:d0:72:1e:cf:
b7:8c:d8:77:19:ca:88:73:ff:39:a1:44:fa:e2:65:
12:e2:8b:92:d6:0b:14:86:97:bf:a1:34:f4:7a:4c:
24:fc:35:5d:60:6e:75:2a:21:03:39:49:76:e5:e1:
33:77:ac:52:60:5e:57:b1:45:16:73:b1:4f:8e:44:
75:fd:bd:ee:82:6f:08:d7:63:08:b3:3f:6e:4d:7b:
9f:05:87:76:8f:8b:77:49:b1:cb:84:a8:c0:8d:80:
d4:22:86:25:1d:f4:a3:0d:50:75:21:75:ad:53:88:
59:4c:e1:df:e3:60:c9:e4:82:32:a1:87:75:e6:1e:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:F3:00:31:A9:4E:EA:17:CA:B9:A7:B2:F1:05:A5:4E:FE:13:E9
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:50:e2:dc:5f:a3:8d:7a:76:4e:ff:c2:74:cb:b0:50:78:
7c:52:4b:e1:a5:92:55:c4:61:91:ab:34:36:f4:2d:70:b1:e8:
7c:99:77:f2:38:e3:33:18:55:2b:69:43:f6:e7:1e:79:0b:a6:
e7:80:15:45:bf:71:fe:6c:8f:d6:3f:07:44:3a:c5:4a:be:d6:
fc:80:52:ed:81:a0:fb:c2:52:a9:fd:15:4c:d9:26:09:f7:06:
4d:65:3c:b9:50:dc:9c:6d:57:ad:e7:d5:e2:37:e3:1b:2c:0f:
ba:4c:93:a6:c8:52:9d:5c:ac:fa:25:2f:28:d6:47:8f:c0:0c:
44:e9:2f:3f:d2:e7:59:60:76:1a:92:e0:3d:06:3e:9c:c0:ba:
54:d5:99:a7:d9:57:bd:df:11:3b:e7:d1:f2:83:e4:1c:0b:24:
61:06:bf:fb:c7:1d:38:a2:8f:5a:ce:3f:fe:b0:24:62:e8:1a:
df:c6:c5:8b:8a:0c:38:74:59:ee:58:15:9b:23:fd:c6:d7:67:
2a:a4:eb:ee:53:29:23:6b:34:0c:20:c3:e0:f9:86:56:41:07:
35:bd:4e:94:f4:97:2f:c6:2c:6e:2a:67:a2:68:34:4f:4a:8d:
95:a2:b5:3c:8f:56:7b:c0:e4:25:9e:74:d5:75:e5:73:fd:6c:
97:16:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:56 2025 by rpki-client