Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: BnKebe0JvqjUsnI5Ef/CwMU6KQs/N8a5N2wb7jM45K8=
Subject key identifier: 8B:C1:3D:E7:47:1E:E4:76:17:A0:8B:7D:63:B1:EF:42:86:A0:39:94
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 01963F8B8846E2A700CA3A407B61C7C72C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 17:00:31 +0000
Manifest this update: Wed 16 Apr 2025 17:00:31 +0000
Manifest next update: Thu 17 Apr 2025 17:00:31 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: Z94YjDXDpfX5ACoaNGr83uBHvvzuEsHoh7KArlA7mtY=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:88:46:e2:a7:00:ca:3a:40:7b:61:c7:c7:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Apr 16 17:00:31 2025 GMT
Not After : Apr 17 17:00:31 2025 GMT
Subject: CN=8bc13de7471ee47617a08b7d63b1ef4286a03994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:e5:ec:df:99:34:b6:29:d2:c6:ff:67:21:
fd:c1:01:70:16:9c:6e:e2:5b:3b:72:d6:9c:b8:bd:
02:53:ee:aa:ae:31:08:e1:19:b3:b3:af:f2:9a:67:
1f:34:9e:8b:0d:a5:c7:8b:c0:3d:68:8e:cb:bb:f2:
b2:0b:52:0a:1a:05:6c:be:b3:3e:bf:fd:80:5c:b3:
38:20:9f:60:25:c9:4c:28:72:3a:19:08:28:36:60:
a7:cc:ed:23:63:a5:6f:21:27:e2:9f:d1:e3:e2:39:
4e:09:73:5b:98:4a:09:07:80:f0:c8:ae:6a:77:c0:
3d:3b:05:97:55:3b:75:f2:d7:d0:53:ea:48:a7:07:
18:d2:e1:31:f4:03:41:7a:f2:03:1d:6e:c9:ee:0e:
d0:67:0c:84:8d:4c:59:67:29:e2:86:c0:2a:bf:4d:
62:6e:e6:3e:89:b9:a3:fd:16:11:f8:96:76:6d:3b:
a6:47:0c:89:a7:b8:3e:94:1a:62:2f:dd:55:98:f6:
15:10:37:77:ee:7c:dd:96:40:a9:4c:84:67:90:90:
65:aa:6a:08:86:96:e2:47:55:0f:d8:0e:6b:8f:46:
a9:15:6d:07:e5:91:cf:36:49:38:ae:ef:98:e8:36:
fb:45:84:4a:4b:3d:d7:59:bb:26:66:fb:46:a0:f5:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:3D:E7:47:1E:E4:76:17:A0:8B:7D:63:B1:EF:42:86:A0:39:94
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:34:ba:e6:3e:d8:e8:35:88:b9:eb:94:d9:b5:3c:70:d0:28:
2f:5a:f1:b8:6f:85:33:de:ac:b2:64:9b:21:4b:b9:80:8c:19:
f6:a6:0a:09:62:11:09:a5:1a:02:47:06:a3:a8:56:c9:55:0b:
98:32:a0:dd:46:9d:f1:d7:1b:ad:ff:b0:d9:b6:78:20:27:ce:
ec:44:9e:dd:de:6b:9c:4d:cd:60:a2:89:4e:d9:85:bd:a0:33:
42:da:58:09:4b:23:0e:ea:d2:61:6d:bc:c0:76:1e:7d:4c:d6:
4b:ed:b3:87:19:9f:5d:dc:95:cc:ce:54:f5:d7:54:15:5d:cc:
b8:72:7f:2d:5e:10:51:33:f9:e9:45:56:e3:94:6e:46:60:94:
5c:cd:df:86:08:5b:15:1c:c1:17:25:c4:37:ee:cd:bf:d4:ee:
99:f9:40:e7:38:62:16:57:1e:d1:22:56:3a:c1:cd:a8:fb:77:
b5:d2:85:fb:94:1f:27:dc:49:57:24:76:c0:68:71:e8:a6:02:
ec:70:d7:cd:0d:b9:e8:c6:b0:0c:32:e8:4e:1c:48:58:d5:9a:
9e:c9:5a:8f:8c:40:de:51:17:1c:71:1a:d8:92:f5:54:ed:10:
ab:62:f0:2c:1d:e5:b1:18:b8:05:84:73:7c:5a:8b:80:5b:f9:
f7:67:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:29:31 2025 by rpki-client