Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: y4ofVABKGehz2WT2q/p36D3RKA6mQ5iOizzRcW1u3b0=
Subject key identifier: 02:BF:C5:FC:48:74:6C:2F:14:6B:B3:CF:04:4B:82:55:A8:FB:B5:AB
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 019655A5B926742A5BBCA36D77FFFA642FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 046C
Signing time: Mon 21 Apr 2025 00:00:46 +0000
Manifest this update: Mon 21 Apr 2025 00:00:46 +0000
Manifest next update: Tue 22 Apr 2025 00:00:46 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: muoOKo0RS7eu041rnIaw4rXUEuoT0C42qROdhPg/kpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:b9:26:74:2a:5b:bc:a3:6d:77:ff:fa:64:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Apr 21 00:00:46 2025 GMT
Not After : Apr 22 00:00:46 2025 GMT
Subject: CN=02bfc5fc48746c2f146bb3cf044b8255a8fbb5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:07:7a:9d:76:b4:c1:fe:69:b1:93:06:93:
69:e0:f1:1b:08:f5:cb:7a:0c:e8:c0:b3:5d:19:29:
24:9b:66:e9:16:fa:33:b9:68:e7:00:ac:08:11:ef:
82:ca:01:2d:87:93:4f:d6:e7:3b:e0:de:7d:3a:3d:
34:25:6a:0e:a1:f2:70:1f:9d:ee:8c:9e:f5:6d:7e:
6b:87:8c:2e:08:e0:24:9e:05:b3:15:4e:77:a3:14:
0c:aa:a6:b1:de:8d:2d:7b:0d:b8:6c:bd:e0:b3:43:
a1:e7:07:5f:09:7a:d0:8d:9c:22:96:98:ca:f3:5d:
b2:6e:24:ee:69:a9:29:8c:2f:59:ee:34:5a:72:ad:
97:29:31:37:29:1c:1b:12:6c:8b:0a:e7:3e:1b:62:
d8:d3:0d:93:01:56:0b:af:ce:64:17:6e:4e:61:74:
fa:5d:fd:ee:9b:28:86:36:e0:9a:10:44:59:7d:12:
7a:d6:a0:4b:13:55:59:6c:df:19:ce:6e:ed:d3:c2:
f7:ef:ed:17:38:cb:37:12:63:ba:7c:8c:3f:90:8d:
f5:15:95:e9:0b:b5:e7:b3:9d:1c:91:f8:88:7f:3d:
d3:53:5d:f2:07:9b:35:e5:19:44:6f:3d:46:44:e4:
92:7b:52:2b:09:79:1f:86:b9:50:00:28:49:5b:2a:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:C5:FC:48:74:6C:2F:14:6B:B3:CF:04:4B:82:55:A8:FB:B5:AB
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e1:3b:fe:1c:ac:e2:4c:00:ca:d2:ec:21:f7:56:6c:1a:85:
04:b8:67:b3:92:8e:36:5f:d8:df:60:f6:01:af:e3:f7:25:bd:
f9:b5:da:a8:f6:da:8f:42:6e:4c:21:ce:20:b4:36:30:40:52:
6b:5f:a3:2a:97:54:f9:b3:ff:61:ad:c8:28:5b:60:59:06:b0:
41:62:dc:1f:3f:cb:35:a3:40:cd:7a:02:48:55:7b:28:a3:a7:
3d:13:9f:de:29:e0:41:19:ef:03:12:b3:03:6f:ce:ca:39:bb:
eb:8e:a7:17:c7:7d:08:23:29:52:43:f9:20:72:4f:99:7e:80:
4b:f3:a6:0a:1c:33:de:de:f3:7a:7a:2b:0a:57:88:56:dd:3a:
06:e2:7f:05:79:c0:d9:1e:7f:d4:48:6a:ce:9a:22:b3:e2:1a:
ce:48:12:ad:ed:62:98:df:a3:f3:ff:03:35:3b:70:7f:4c:84:
16:9c:c7:a5:b8:52:6b:3a:5e:58:2b:52:57:82:53:fe:a8:7b:
66:f8:e3:72:4e:42:6a:13:ae:ab:75:e3:51:a0:bf:82:fb:d9:
f7:f2:99:db:2a:16:9c:32:7a:3c:a9:ef:6d:e9:1b:03:f4:d8:
62:f7:fa:4d:15:c1:b6:b2:46:bd:ba:c0:5b:da:ff:76:f8:87:
a7:0b:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:38 2025 by rpki-client