Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
File: IYCTB4hvuv261Th2Eu_-dxOHowA.mft (raw, json)
Hash identifier: 1LmKpNSEjUCbMrHcjgYrFKkr8L89DWQr7kHDf+l06E8=
Subject key identifier: 51:B0:42:D5:4B:0B:E0:90:3C:11:10:6D:A7:6C:09:9C:89:BB:CD:75
Authority key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
Certificate issuer: /CN=21809307886fbafdbad5387612effe771387a300
Certificate serial: 019657265D560931F2ADFF7C86EDAEC22321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
Manifest number: 0643
Signing time: Mon 21 Apr 2025 07:00:54 +0000
Manifest this update: Mon 21 Apr 2025 07:00:54 +0000
Manifest next update: Tue 22 Apr 2025 07:00:54 +0000
Files and hashes: 1: IYCTB4hvuv261Th2Eu_-dxOHowA.crl (hash: agzGdEqRqH6K8Zay9f0WcPQ0hk+5qwZSR1Tt/2M2BnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:5d:56:09:31:f2:ad:ff:7c:86:ed:ae:c2:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21809307886fbafdbad5387612effe771387a300
Validity
Not Before: Apr 21 07:00:54 2025 GMT
Not After : Apr 22 07:00:54 2025 GMT
Subject: CN=51b042d54b0be0903c11106da76c099c89bbcd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:16:b2:5f:23:3d:a2:a0:fa:78:09:73:cf:
b6:a8:4a:f7:f4:fa:c9:aa:c5:38:31:bc:76:4d:c9:
d0:2b:b1:d1:20:12:b9:22:ec:12:de:88:0a:70:f3:
31:bf:9b:0d:12:55:f5:6c:82:56:d6:82:43:65:ee:
a7:af:f7:93:95:4d:77:7d:87:5a:99:23:31:c3:6d:
bc:b1:89:21:2e:0a:9b:27:e0:bb:40:e5:3b:2d:82:
49:15:33:b8:e7:95:99:72:a1:8f:9b:b1:2a:02:11:
94:57:c0:4c:0a:bb:b1:6b:ae:63:6b:10:f4:76:c4:
25:40:37:ea:1e:2d:ff:a5:96:ce:77:b4:57:3f:5f:
4f:44:0a:68:c5:60:7f:78:4d:ba:63:7b:3d:29:72:
22:be:33:db:54:e1:a7:39:7d:16:c0:2b:99:08:f0:
84:b6:c4:8b:a0:41:33:02:c9:a7:e0:b9:43:bd:84:
70:57:79:89:b5:05:f9:e4:a5:57:74:9b:ae:7c:19:
e5:7a:42:de:0c:aa:40:9f:9e:e7:25:dc:16:8e:14:
1e:ad:ee:94:26:9b:e3:ad:2e:e2:96:a9:7a:b3:5c:
06:74:13:03:a7:81:3f:c6:3c:4e:d7:e0:b9:a9:15:
34:16:92:50:7f:05:7a:c4:be:3f:83:03:d7:1f:8b:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:42:D5:4B:0B:E0:90:3C:11:10:6D:A7:6C:09:9C:89:BB:CD:75
X509v3 Authority Key Identifier:
keyid:21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:ac:79:62:4a:be:03:78:ed:a9:6e:84:01:b7:2e:8f:a9:
e4:20:09:91:6a:e6:07:86:eb:1b:fb:d2:48:16:1a:af:77:49:
b0:d1:92:d2:b0:1c:ce:d3:da:e6:6d:7e:b5:76:9f:b8:57:35:
48:d0:0c:80:78:a9:de:fe:43:1d:09:13:da:23:d4:fc:53:f5:
8e:25:72:82:9b:53:f7:6d:68:31:da:b0:0a:fa:b6:ee:38:17:
87:04:d2:07:05:e7:cc:3b:d8:9d:53:85:a4:c8:92:b9:11:da:
69:81:8c:32:b8:c2:28:3d:ad:5e:b3:bd:5f:3b:f8:b3:7b:d6:
f6:f7:ab:7d:3d:07:ec:35:d2:13:7b:e0:fe:96:37:aa:2f:ef:
b9:d2:7a:c1:21:48:e7:cc:37:03:31:e5:b0:5e:1f:8e:57:2b:
b0:36:2b:4a:92:e0:ba:a8:f4:ea:bc:11:19:d0:27:2a:ee:aa:
ac:da:72:9f:19:a0:7b:93:04:20:28:4e:78:a0:df:80:26:12:
19:bd:0d:83:9c:73:f7:12:45:fb:b8:60:fc:e7:1f:bd:38:c2:
00:8a:3d:7d:e2:ea:88:e9:4f:c7:50:2e:b3:71:48:d3:fa:17:
64:64:e7:23:e3:07:f0:b8:cf:42:ac:0a:d7:fc:8c:35:63:0b:
82:3c:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:08 2025 by rpki-client