Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: wQwgc1BzV3kcqEi3VhwrMLdBgOMD6aVzeDmxpK8E81A=
Subject key identifier: F0:FC:92:5C:D3:22:E5:56:4A:0A:73:59:C1:C3:2C:80:54:0D:20:AC
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019659F0A346DCF3676FFFEE56F9EAB2ED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 20:01:04 +0000
Manifest this update: Mon 21 Apr 2025 20:01:04 +0000
Manifest next update: Tue 22 Apr 2025 20:01:04 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: 4JXU9luFbpTPNd7NpQ/0038wxiGJJcKfkUMzAOcY1ew=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:a3:46:dc:f3:67:6f:ff:ee:56:f9:ea:b2:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Apr 21 20:01:04 2025 GMT
Not After : Apr 22 20:01:04 2025 GMT
Subject: CN=f0fc925cd322e5564a0a7359c1c32c80540d20ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:78:a5:a7:1f:fa:48:07:d4:f5:bf:0e:13:
3b:79:54:7c:c6:34:9a:b5:da:7f:b9:f6:cb:ef:09:
ab:e3:c4:48:c2:98:2b:46:98:50:d6:3e:7f:45:a4:
a6:db:d2:7e:19:d7:c2:55:30:42:a2:5c:11:bb:ff:
d8:7d:35:67:58:39:99:46:5e:31:37:4f:44:0a:10:
3b:2a:8d:cc:43:67:45:3d:54:1c:38:b9:cd:92:29:
85:a0:70:51:62:49:65:6f:b4:99:5c:c9:1f:7b:de:
aa:65:f8:99:5c:a5:7d:cd:e7:e6:c8:cb:31:b1:11:
bc:95:51:b3:5a:6f:2c:77:80:09:2a:fd:fd:14:7b:
24:dd:42:2a:d4:95:a8:72:d2:e6:63:d3:fc:7b:2e:
21:18:6c:96:ee:ae:4b:55:95:91:45:87:e3:c7:9a:
c7:6f:ab:c6:51:ab:3e:2b:97:ca:6d:6c:22:33:1d:
bd:6f:b0:73:60:b7:d0:50:14:11:35:ea:e3:4c:3b:
54:92:ce:bd:1c:fb:7f:6f:a7:d2:60:c6:2f:4a:69:
b6:85:b6:8c:04:ea:79:a7:86:aa:56:4e:b1:b1:9b:
77:30:d7:55:c8:e3:5a:9f:fc:5c:80:52:bb:9d:0a:
9f:35:4c:80:ea:35:8f:44:4e:d6:a0:b7:da:cc:32:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:92:5C:D3:22:E5:56:4A:0A:73:59:C1:C3:2C:80:54:0D:20:AC
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a0:f9:98:61:84:26:02:dd:87:39:1a:8d:d3:72:66:63:77:
99:a4:7e:fb:03:51:2c:47:09:73:0f:be:9b:af:42:a0:86:de:
b9:3e:cc:33:9e:f3:61:c2:c5:2b:50:87:35:ed:87:fc:a6:8c:
c9:8b:83:13:be:be:29:f4:54:4c:6d:ab:fc:ca:f0:b2:92:36:
b7:ba:ca:f4:11:d3:04:d0:f8:93:e2:cd:6a:0e:63:ab:e1:d1:
61:74:2e:fe:30:40:b4:59:dc:ad:b6:8b:d8:11:8a:e0:6b:bb:
03:ca:6a:32:48:b6:17:83:a8:c7:8d:ea:20:7e:12:e4:bb:66:
b9:89:2c:f2:89:1b:1b:98:b0:06:a4:7d:a1:bb:64:da:72:e2:
84:05:57:a9:41:ee:5c:26:38:1b:1c:a2:b6:9d:84:1d:a7:37:
aa:08:c7:f0:cb:5c:3d:78:d8:6b:90:ba:d1:40:7b:96:b7:97:
eb:09:9d:9c:af:31:d3:2e:50:61:a3:6c:40:5f:1f:32:fa:8a:
ab:44:82:01:b6:ea:09:c7:36:bf:76:97:78:d1:b5:96:12:03:
43:ce:5b:23:35:7c:d6:64:dd:21:4a:d9:5f:7c:3c:ca:34:1c:
98:c4:4d:a5:17:d8:b1:01:13:0f:90:f2:6f:a9:a3:0f:00:13:
97:ea:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:47 2025 by rpki-client