Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: z+vu3d9SJlG1tXh+b9o09uvr1nXPvogX/0w1MHISWx0=
Subject key identifier: A6:58:6E:01:65:B4:8E:BF:54:63:F8:FD:B2:7A:45:05:C2:97:D8:A3
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01965982F2AF623C1AC485D2586F0A59BBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 18:01:16 +0000
Manifest this update: Mon 21 Apr 2025 18:01:16 +0000
Manifest next update: Tue 22 Apr 2025 18:01:16 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: C5iMj6APUXDIFEQN7vFJdyYEuFPfwSjSOMFequ5jKwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:f2:af:62:3c:1a:c4:85:d2:58:6f:0a:59:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Apr 21 18:01:16 2025 GMT
Not After : Apr 22 18:01:16 2025 GMT
Subject: CN=a6586e0165b48ebf5463f8fdb27a4505c297d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:36:d9:84:9a:81:d1:3a:03:42:c0:b5:d1:
1e:4d:32:85:01:93:81:c5:36:c8:20:f9:7c:7b:20:
3e:ca:b6:74:9c:18:14:54:01:1a:76:57:9e:bb:6c:
75:03:7f:bb:77:4f:ff:63:53:fc:d6:cb:16:a9:d7:
f8:6a:b5:c5:25:ba:60:44:7f:4e:1f:c4:f5:be:86:
3c:c2:27:98:75:0e:26:4a:d2:3f:89:1d:54:91:c2:
a6:57:69:91:0c:78:ef:72:3e:ad:8f:52:90:b6:81:
68:78:56:95:1b:0b:b1:97:40:98:53:4f:0f:1b:6d:
78:47:63:9e:d0:49:18:39:d9:15:f8:6c:69:16:e4:
32:82:29:c7:c6:87:86:cc:40:be:92:31:de:70:0d:
8c:8c:b4:2a:31:f2:f0:63:c3:92:b3:3c:c0:1a:f8:
39:04:aa:43:f3:cc:9c:05:39:69:e3:21:5e:24:8e:
f2:4e:c7:39:97:50:ae:ad:f5:62:cc:b9:a6:68:1e:
b5:a7:0c:8c:c7:aa:8a:15:b6:e4:2a:a9:95:2f:ab:
ec:41:c5:a5:05:a0:37:8d:4f:72:28:8e:52:af:0e:
d3:bf:95:69:38:b9:14:bf:36:16:ac:58:dd:0f:fc:
4f:32:a8:74:18:a0:e8:4f:b1:44:62:d8:75:41:4f:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:6E:01:65:B4:8E:BF:54:63:F8:FD:B2:7A:45:05:C2:97:D8:A3
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e1:fd:cc:bd:19:5d:af:fb:93:e5:53:ee:08:4d:c0:c6:3e:
1d:e4:b8:1f:86:6a:0e:fe:c0:b4:9e:4c:29:89:12:ca:fd:92:
19:3c:02:70:11:c4:a0:75:dd:28:98:38:c4:be:d7:93:f5:95:
c8:e4:be:d5:02:5b:6c:01:a7:16:15:71:ef:e1:7a:53:31:61:
c9:b2:a9:6d:f6:96:a2:9c:5f:62:75:c1:fa:3f:6e:5c:6b:fd:
21:18:05:04:ab:e8:e0:72:a3:bf:8c:ad:cd:c7:ba:87:cc:2f:
af:cb:5a:d2:0a:e8:55:c9:30:ba:bc:a0:db:1d:68:57:b7:55:
00:e0:1c:98:74:ab:49:a8:8e:0b:ee:df:ee:3c:73:4f:69:e8:
e1:76:1e:71:e5:43:16:b5:d8:8b:8c:a6:6e:67:71:b9:09:f1:
dd:82:2d:ef:be:6d:71:71:f1:fc:6a:d6:6e:45:af:7a:f8:3b:
08:70:5d:60:99:06:27:fb:00:82:f9:27:f6:16:70:14:d0:8b:
bf:40:c4:30:5b:48:4e:32:d2:20:12:64:2c:1d:f9:47:cf:03:
4a:03:20:e5:f7:8b:00:53:c5:e8:fe:1c:eb:e1:9f:86:1b:56:
5f:2b:a8:9f:e9:7a:eb:10:cb:ab:5a:03:cc:a4:10:ed:dc:78:
43:c7:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:01 2025 by rpki-client