Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: 6QPke+sGw6+UCFATfV8VyVOmzonFwpHCSPnH3ZgGrD8=
Subject key identifier: B3:AD:9B:EC:DD:D6:2D:2A:EA:85:DB:39:D7:F3:D5:AA:A0:82:9C:5F
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019654C9A724E3C2008591AD35CC27BB8F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 126F
Signing time: Sun 20 Apr 2025 20:00:23 +0000
Manifest this update: Sun 20 Apr 2025 20:00:23 +0000
Manifest next update: Mon 21 Apr 2025 20:00:23 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: THzfxhs523p0ZPwylzdTueLj29Vi9JDzs+OiXFWLrFA=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:a7:24:e3:c2:00:85:91:ad:35:cc:27:bb:8f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Apr 20 20:00:23 2025 GMT
Not After : Apr 21 20:00:23 2025 GMT
Subject: CN=b3ad9becddd62d2aea85db39d7f3d5aaa0829c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:48:57:8b:96:80:05:a9:ee:5d:bd:1a:d1:
f4:8b:00:e2:be:48:8f:41:ac:65:52:6e:d3:30:4b:
c3:8b:43:d4:80:f0:7a:56:1a:d1:c7:1f:a2:7d:4a:
a1:43:26:41:f4:dc:f4:48:31:20:90:14:2c:dd:30:
19:89:22:7f:91:50:85:88:e7:ed:f6:71:27:a1:29:
29:48:1e:45:d8:41:c4:a5:a7:67:46:b5:6c:df:3a:
9c:c7:d7:e6:9d:78:30:81:d7:b0:ba:4d:0d:5c:a0:
94:5c:29:a8:14:f4:6b:47:fd:a5:4e:eb:83:bd:00:
87:5b:9d:26:b7:a3:be:41:ba:3b:68:34:c8:79:19:
2a:97:df:3a:50:f9:8b:e4:42:51:cf:7f:68:37:5e:
ad:7b:2c:28:ff:b7:6b:33:34:c4:10:2b:fb:cf:a2:
12:8d:17:59:75:af:db:ed:77:58:2d:b3:a5:18:19:
03:1b:54:da:67:8c:44:59:64:b8:88:e4:b5:d3:0f:
8a:ab:8d:14:53:33:46:b2:ee:81:90:58:21:7a:d2:
8b:a4:b1:8a:a6:f7:0a:22:11:64:af:4d:1a:2f:fc:
6c:ea:e4:70:67:27:bb:9b:3c:8c:cf:49:4a:4a:99:
df:0a:e0:9e:e2:ef:bf:9c:3d:e4:fe:cf:92:ae:71:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:9B:EC:DD:D6:2D:2A:EA:85:DB:39:D7:F3:D5:AA:A0:82:9C:5F
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:ea:8b:94:cf:b6:67:01:dc:a8:03:db:ca:78:7f:2e:37:
df:70:01:ee:a1:e3:6e:e9:32:ce:b0:52:57:e7:99:c9:fe:25:
7f:96:82:cc:23:ef:20:46:46:7f:22:22:fc:61:4a:b6:8e:b9:
2e:16:b7:67:a7:ef:7f:ac:f7:54:f0:e1:dc:bc:dd:33:46:25:
45:8e:31:da:91:85:be:42:ad:8f:b1:c5:35:55:5e:3e:bf:c5:
4f:3a:24:84:f8:86:48:d5:19:70:70:07:ca:23:18:93:f0:95:
4d:58:74:0e:f1:63:95:16:a7:2c:60:af:99:63:ea:f5:0a:8b:
f0:77:d8:cf:1d:ad:08:d9:fc:5e:b7:45:e9:74:a4:b5:e3:1b:
9c:46:f9:83:f9:d9:bb:50:07:6e:7c:de:f6:e5:25:0d:6c:19:
0f:0c:1b:54:57:83:30:b1:90:56:97:6c:cd:12:ba:c3:e4:48:
f5:09:c5:33:c2:f8:9b:ef:60:70:8e:81:e9:5d:d7:a1:b4:c3:
32:eb:02:08:39:3c:84:ae:9f:67:13:d2:5e:23:b3:61:e4:9a:
80:b5:eb:83:bf:9f:cb:0c:79:55:33:02:b7:d8:0d:1b:f4:d4:
01:02:9c:94:b1:58:6b:9e:13:f2:a1:50:05:9e:9b:01:d0:b0:
06:ad:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:01:34 2025 by rpki-client