Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: MoReyF/4PmgtpdJfMQCca1+q2XRqNApvyx3XbIYsboU=
Subject key identifier: 0F:A2:A6:65:5C:CD:F9:CF:98:A8:62:FC:AD:F6:BF:33:47:A0:4C:F8
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 019659F046C1B800D61B6B5C9FCD052AB0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: DD
Signing time: Mon 21 Apr 2025 20:00:41 +0000
Manifest this update: Mon 21 Apr 2025 20:00:41 +0000
Manifest next update: Tue 22 Apr 2025 20:00:41 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: xi8F22iEQoc0dNWQ2TRHfBdKRMp8KxzPMij4y3vshoQ=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:46:c1:b8:00:d6:1b:6b:5c:9f:cd:05:2a:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Apr 21 20:00:41 2025 GMT
Not After : Apr 22 20:00:41 2025 GMT
Subject: CN=0fa2a6655ccdf9cf98a862fcadf6bf3347a04cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:5a:43:de:1c:d2:8b:8d:03:9f:1e:17:99:
8b:10:0b:86:8c:c4:2d:d4:7d:02:37:76:42:ad:28:
85:97:3a:06:f9:9a:ad:e0:67:78:24:0c:f2:4d:c2:
2e:05:09:2f:61:4d:75:ba:2b:1d:d7:fb:15:6b:48:
5b:56:84:05:e5:ee:9f:23:19:5d:0b:a2:5e:dd:06:
28:cc:c9:67:3e:01:bf:83:bf:f3:cf:63:11:8b:20:
c7:0a:50:ed:f9:b4:d6:31:3b:0b:b8:b8:e6:74:c6:
e3:ca:db:70:88:a9:ff:7d:a1:45:71:1e:5e:dc:fc:
d2:c0:65:9e:87:e6:34:52:61:49:4d:18:6c:d2:a9:
9d:20:6e:fd:a1:5d:e1:e9:f8:00:c0:22:d0:61:7d:
98:64:5a:4d:0b:64:9f:1b:b4:41:b8:7c:70:2a:19:
ae:3f:6b:9a:3b:6c:23:98:74:37:d3:d7:b9:7e:47:
50:71:e1:f3:92:ec:c8:4f:df:ad:6c:3c:c8:6f:b5:
8d:60:3f:a8:78:32:80:2e:7e:82:2c:33:41:f7:51:
8b:5c:cf:f9:44:f9:51:f5:ab:69:e4:cc:9b:ee:a2:
ed:8d:3a:2f:dc:52:42:b5:2e:05:4a:5f:be:ff:5f:
02:79:43:94:25:31:85:c6:62:74:7e:9d:cc:f6:01:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:A6:65:5C:CD:F9:CF:98:A8:62:FC:AD:F6:BF:33:47:A0:4C:F8
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:1c:04:07:6a:21:4f:fa:bb:3a:1e:e1:0b:0d:27:e4:9f:
9c:e6:a0:db:56:05:ac:8e:7b:94:3f:c5:a9:b5:c1:2b:85:2b:
02:79:3c:20:7d:86:f1:68:8c:3c:e0:46:e0:b7:3f:b4:89:0b:
94:70:51:9d:04:fe:f1:06:eb:19:33:bd:df:ad:54:68:07:19:
1d:dd:2b:1e:46:d3:ed:40:ee:b0:47:1c:db:b2:1b:88:2c:0a:
f6:f6:ab:e6:6e:84:f7:43:5e:a0:d2:d8:ef:69:6d:f6:f6:e5:
94:d6:ee:03:ad:fb:01:ed:90:7f:4e:1d:65:d1:83:93:6f:64:
26:29:9f:0e:35:8a:5f:e2:fc:cc:0e:aa:44:d0:7a:65:b6:67:
07:b7:df:5e:dd:38:c0:10:48:4c:81:bd:01:b4:25:1b:b1:b2:
d6:b1:4b:2e:fa:4b:52:af:e5:df:f8:83:94:cf:6e:61:14:89:
1f:23:bd:cf:6e:56:93:39:b1:aa:fd:5f:dc:3d:47:85:fc:26:
7e:6f:71:a1:19:18:b8:68:0a:de:e4:af:e3:42:50:62:2b:e5:
9e:34:9a:99:f9:69:79:cb:f0:34:5d:18:8b:a3:8e:d9:f7:27:
93:d3:5f:98:b0:06:11:3f:08:db:a5:c9:cf:14:69:a5:ff:8d:
00:4f:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:30:47 2025 by rpki-client