Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: PogA5DaXqBYQY7R+w7EErsfGmmrH83Nzqmm386EbTd4=
Subject key identifier: C2:7F:15:73:36:D4:C9:04:43:69:37:31:65:4F:C0:F6:4E:DA:C4:61
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019656EEEBA703B850653196D0D98129E651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 0348
Signing time: Mon 21 Apr 2025 06:00:20 +0000
Manifest this update: Mon 21 Apr 2025 06:00:20 +0000
Manifest next update: Tue 22 Apr 2025 06:00:20 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: 97JwdNocjDvXv5WF+J9L8L4nqGa4Gz3QV8oa1i7HEdw=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:eb:a7:03:b8:50:65:31:96:d0:d9:81:29:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Apr 21 06:00:20 2025 GMT
Not After : Apr 22 06:00:20 2025 GMT
Subject: CN=c27f157336d4c90443693731654fc0f64edac461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:17:8f:ec:21:38:d7:db:85:a5:c6:4b:02:
89:59:b7:1b:8b:74:86:75:8c:ce:bf:86:87:64:7a:
69:f7:b8:f1:93:2b:0d:d0:b9:78:7b:86:d5:ea:b8:
c9:a7:29:cc:2e:61:91:e8:76:e8:99:36:ad:6f:05:
99:02:2b:58:29:d4:91:b0:f6:b1:97:4d:e8:c4:8b:
2a:d1:c2:72:42:12:b2:89:60:c2:f7:44:de:c2:29:
9f:e6:a5:03:d0:b9:d8:1c:73:56:14:0f:ee:d8:46:
d6:6e:f5:a1:a5:95:a7:48:34:ea:b9:e2:0f:8a:c1:
05:88:95:ad:b2:d6:98:e1:2e:c1:19:2b:ee:49:69:
3f:44:bb:f4:d8:7a:5f:fe:f8:89:7f:80:ae:37:02:
51:05:13:53:16:fc:7c:8f:87:14:d1:2a:5c:31:de:
aa:74:f9:32:c4:16:27:40:80:b0:17:48:e2:77:8a:
0d:6a:d2:98:9b:89:9c:06:87:a3:f4:05:dc:ef:ff:
86:b7:e0:7c:3c:27:85:98:c6:8c:90:51:98:b2:0f:
41:36:89:5b:6e:59:44:ec:f4:ac:85:24:74:a0:d0:
f9:ad:9a:34:26:c1:6b:aa:81:9a:f1:13:a9:c6:0e:
f3:c7:30:92:34:cd:c2:02:e1:02:8d:28:50:48:d1:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:15:73:36:D4:C9:04:43:69:37:31:65:4F:C0:F6:4E:DA:C4:61
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:45:ca:41:ed:b6:45:03:97:97:41:9b:59:f6:a8:92:a5:6c:
25:49:f6:6f:0d:8e:04:79:fe:59:8f:44:57:91:60:2a:39:f1:
16:b0:72:28:87:6f:45:d3:d4:05:16:d8:ba:82:50:57:41:f9:
9b:f1:1d:38:d8:10:18:14:a7:d8:2b:59:e5:29:81:e0:cc:0d:
aa:16:71:98:e2:aa:47:8b:34:12:4e:d6:1e:1f:95:48:df:cf:
ed:6b:f9:e3:30:72:83:0f:77:86:f8:b9:61:23:ee:41:fb:be:
ae:a4:68:4f:5c:c1:4e:58:c7:94:f5:d2:dc:9a:4f:96:db:cd:
b1:dc:12:16:ba:7d:f2:a7:54:77:cc:ba:81:13:e0:2c:1a:68:
e2:7a:c4:bb:d5:72:21:36:ac:16:7f:99:2d:ab:4f:0a:d0:c3:
94:4c:5a:da:6d:2e:e1:0f:7e:f2:de:c0:c1:68:dc:ee:05:fe:
37:b8:78:25:ab:16:b8:58:d6:17:35:fe:6f:aa:c2:68:fb:77:
d0:9c:b7:00:d6:3f:28:e9:c8:56:0b:17:f0:44:b2:c0:56:9f:
27:0b:1a:2d:1d:a6:39:ce:4e:2b:05:8b:d9:86:c8:a5:be:46:
47:2a:8e:b5:fb:15:12:b6:25:2b:67:fd:fd:6a:5d:60:7a:54:
dc:cc:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:26 2025 by rpki-client