Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: tL4YE+u1JvWgO2mzVA9Ba/aQkl2RaTvzVVkDXqNxZKY=
Subject key identifier: 5F:19:67:8F:8C:C1:D5:E2:56:2E:19:8C:FF:11:1A:58:8F:69:B1:EC
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 01963CC137F3DCF7C9378B1A43E90D84DB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 14F7
Signing time: Wed 16 Apr 2025 04:00:17 +0000
Manifest this update: Wed 16 Apr 2025 04:00:17 +0000
Manifest next update: Thu 17 Apr 2025 04:00:17 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: lngNPgSxH8frxlY3F/7uy++54zniEV5M3flay7XUvEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:37:f3:dc:f7:c9:37:8b:1a:43:e9:0d:84:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Apr 16 04:00:17 2025 GMT
Not After : Apr 17 04:00:17 2025 GMT
Subject: CN=5f19678f8cc1d5e2562e198cff111a588f69b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:75:e6:27:9a:9a:c6:1a:b5:45:13:91:86:
2a:76:88:f9:68:a1:25:b2:8d:e2:2f:ff:ab:e1:58:
7f:c0:e6:00:9f:40:48:4e:b3:0b:69:96:7b:25:60:
bb:db:fa:39:79:02:76:b4:13:73:6b:1a:0d:7f:19:
db:f3:e9:45:58:b0:e4:31:34:9a:45:02:5c:0b:2a:
c5:a4:53:df:6c:d2:1f:96:27:1a:94:75:e2:ab:b5:
e2:62:68:c9:d5:10:d4:22:5b:8e:16:2c:fe:1a:b1:
71:fb:9f:11:d3:30:22:ff:fe:7a:10:a0:a2:fb:d1:
10:d5:2c:55:79:cf:b4:f0:b1:0b:e5:73:98:3d:3c:
32:47:f8:ab:c0:0a:17:cf:d5:dc:6e:22:08:0b:b1:
22:40:cc:c6:0a:44:b0:d5:fc:90:05:b7:37:65:13:
e8:45:51:51:d7:cc:5d:67:f1:68:06:d6:fa:e0:b9:
0e:52:df:5c:bc:4b:8a:1d:d6:e1:31:62:d0:45:cf:
04:dc:21:54:0a:de:f0:1c:2c:0b:65:69:0e:93:54:
a4:6e:1c:e4:2c:b1:db:81:8f:0b:32:28:8f:e8:dd:
4f:4d:e3:e6:47:e9:01:e7:a9:97:e2:7e:76:09:e8:
32:e3:b0:bf:2a:3b:43:40:f8:27:2e:f4:7d:64:a7:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:67:8F:8C:C1:D5:E2:56:2E:19:8C:FF:11:1A:58:8F:69:B1:EC
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:c8:de:da:fe:e9:08:25:22:1c:6c:48:8b:c8:5a:78:d7:
3b:4f:49:ce:b4:b0:41:8f:8b:38:1d:ea:60:70:3c:8a:94:41:
1d:a4:63:83:99:55:ef:9c:0b:d6:33:3e:76:a4:36:33:9d:56:
69:56:95:24:99:16:ec:ed:82:14:d1:98:82:17:4e:ef:89:15:
e5:aa:38:a6:cc:19:e0:eb:f8:a3:33:af:10:c3:e1:12:1a:28:
5d:15:31:73:16:95:d0:95:78:a5:81:c5:d7:6d:81:76:90:7a:
1b:cc:e5:f1:b3:35:cf:d4:4c:de:81:5b:62:69:01:74:99:1e:
a5:e8:d9:b2:d3:53:02:5a:37:8b:94:2a:43:b0:38:e3:c7:8e:
32:ae:ec:11:46:a0:12:7f:bf:56:42:00:5d:00:73:a6:1a:d1:
8c:8e:4a:26:e1:a0:0e:97:14:17:1a:79:a5:df:f1:88:41:1c:
fe:d2:cf:ec:4e:5e:c6:e0:f9:5f:f8:a0:f2:31:f5:4e:8a:cb:
90:06:b8:b3:32:47:de:16:ab:98:36:f4:b5:fd:a1:fb:d5:50:
d9:45:33:20:f7:1a:ae:34:22:aa:3f:4f:cc:a1:d3:a3:0f:4a:
e2:2c:90:40:ed:6d:ff:a0:8e:fe:b9:ea:57:b3:f9:c5:17:82:
c8:21:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:48 2025 by rpki-client