Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: liB1+nCbuLsBRVvwXq95kPSVdpmUC018ZNGXRTufwA0=
Subject key identifier: 83:21:E1:04:E7:24:99:76:DE:B7:16:41:A4:0C:DA:31:D5:4F:03:D4
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01964A0F3165EBE6F377D783092526D441E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 0384
Signing time: Fri 18 Apr 2025 18:00:31 +0000
Manifest this update: Fri 18 Apr 2025 18:00:31 +0000
Manifest next update: Sat 19 Apr 2025 18:00:31 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: YfNLOrrGITMi/SvoFz8uYiBMJskr7xxxwjYzX56Y0+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:31:65:eb:e6:f3:77:d7:83:09:25:26:d4:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Apr 18 18:00:31 2025 GMT
Not After : Apr 19 18:00:31 2025 GMT
Subject: CN=8321e104e7249976deb71641a40cda31d54f03d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:0b:2c:c7:31:19:9f:42:cb:6b:4f:1a:e1:
f9:c0:1c:0d:37:2d:50:1c:37:5a:02:12:5d:d7:9c:
bd:44:da:50:d6:e0:23:c0:1e:ed:a1:85:c6:ed:a7:
9f:83:10:52:5f:b8:6d:08:ad:3b:cf:2f:39:d0:6d:
33:7d:cd:77:7e:60:e4:e3:01:d5:27:42:84:6c:4a:
34:f2:29:ab:67:da:04:e4:14:95:d9:5b:ac:3c:48:
8a:76:74:49:48:da:d4:c2:1e:f5:0b:9c:62:c6:86:
a8:32:5b:64:a9:f8:a7:4a:5e:6e:27:cb:61:d3:7e:
a4:f0:68:a4:d8:c4:32:4e:42:39:00:85:6d:7e:e5:
33:ee:0b:ae:4f:3e:72:d5:e4:39:73:a4:4b:1a:03:
2c:38:67:3a:48:70:86:17:86:11:c8:98:9b:d8:d1:
36:ad:5f:0f:1e:f1:0a:1e:7a:ad:d6:61:48:ea:7f:
ae:85:f1:93:98:c1:ce:50:6b:ef:45:29:39:cd:01:
71:b4:3a:75:cd:63:db:23:59:92:06:78:2e:57:c8:
e5:da:0c:09:f4:4a:36:0c:b7:3e:1e:3e:46:e7:41:
7a:04:5c:39:d6:e3:40:e3:8c:48:e6:c8:dd:b3:91:
49:98:91:96:ed:60:93:d3:8d:bf:65:14:f2:6e:e7:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:E1:04:E7:24:99:76:DE:B7:16:41:A4:0C:DA:31:D5:4F:03:D4
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:16:53:3c:9d:5a:93:16:56:93:31:6a:2f:80:ce:77:ac:a5:
22:2e:98:18:1a:a4:90:cc:8e:21:08:df:45:49:91:58:55:b4:
af:a7:0e:42:51:85:d3:c9:f8:53:4f:a6:c8:05:03:1c:2b:34:
34:72:9f:2d:cb:53:15:70:0b:86:84:14:84:ea:a3:15:df:9d:
0c:9e:24:25:79:07:3f:5d:33:06:dc:66:27:e4:f1:d3:c4:c0:
a5:82:d2:57:1a:16:0e:8f:08:13:ac:a5:2d:7d:7d:d4:8d:af:
f7:0f:dc:e4:20:ef:75:5f:ce:a0:7c:d8:ec:6d:ba:a4:e1:a3:
de:e3:dc:f2:3d:ce:36:13:e8:c1:29:e6:9d:28:b0:6e:c2:91:
4e:26:c4:da:c8:82:55:f0:bb:5c:71:0c:00:58:32:91:b0:f0:
32:90:30:4d:30:81:c7:d6:6f:b2:7c:59:df:6c:36:c7:a3:39:
ba:be:e4:77:6f:ef:82:b5:82:f7:8a:e7:cb:f9:17:e0:ea:cb:
88:df:b0:fd:fa:88:a0:83:80:21:84:8e:8c:29:9e:ae:b6:cd:
12:b2:90:15:ea:bd:89:cf:ef:a4:af:df:fe:d1:7f:ac:62:97:
a9:f9:8d:36:eb:83:7b:10:45:72:cb:e1:19:33:ef:71:b9:05:
66:46:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:00:42 2025 by rpki-client