Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: fFBDvwpOz2oCQ0AYMVz5MydAxKk5aN+Cwsd5Csu0n/A=
Subject key identifier: 4C:4D:EB:E3:0D:14:14:99:9C:FD:BA:2A:2C:30:04:1A:C7:50:A3:0A
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019652DBA5CC5329E0A6991A502530D3B65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 11:00:48 +0000
Manifest this update: Sun 20 Apr 2025 11:00:48 +0000
Manifest next update: Mon 21 Apr 2025 11:00:48 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: gKzJUMxWe9mMx6zZ7DbJq1ZuyCPxwbn1fJD/XxL6x5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:a5:cc:53:29:e0:a6:99:1a:50:25:30:d3:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Apr 20 11:00:48 2025 GMT
Not After : Apr 21 11:00:48 2025 GMT
Subject: CN=4c4debe30d1414999cfdba2a2c30041ac750a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:96:46:b1:55:4d:0a:b6:05:8a:26:fd:f0:
9d:b8:38:3a:5c:b3:a5:98:1e:1c:05:a8:93:de:3d:
4d:8b:f7:87:cc:16:c7:8f:60:91:93:a2:a0:95:88:
f1:d9:91:5f:ab:70:7e:0d:8e:84:b9:ae:53:6b:d6:
4e:50:df:d3:6a:04:86:8e:f4:b3:e0:ba:77:5c:49:
3c:39:86:c0:0b:92:3d:51:11:aa:4c:47:c3:61:20:
1d:20:85:a6:9c:2e:67:e6:dc:a5:13:00:a0:96:d1:
5e:72:0f:18:57:aa:64:53:b5:25:89:80:a3:a6:cc:
45:e9:ef:7a:2d:1f:b4:3b:b0:fa:92:d3:58:b8:68:
a6:0c:17:61:64:8d:c9:de:68:2f:45:ad:4a:50:05:
d5:a6:1c:f2:db:f4:f6:e3:9a:df:0e:ff:19:10:c4:
02:85:90:29:f0:ec:d9:28:23:2c:64:2c:9e:d9:86:
d6:c0:70:a1:ec:17:4f:ae:d8:eb:9d:c3:fd:3e:c2:
4f:e1:13:a2:86:0e:41:f4:5c:5a:5c:73:3b:29:0c:
21:7a:79:ba:61:2c:e7:3c:70:0f:3b:54:82:dd:61:
b4:6a:68:84:67:5f:c4:0d:1f:5d:92:ec:f6:84:3b:
66:c9:b8:f3:07:66:de:47:c3:72:e5:db:c6:83:d4:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:EB:E3:0D:14:14:99:9C:FD:BA:2A:2C:30:04:1A:C7:50:A3:0A
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:76:d8:37:35:85:70:e1:2a:b1:8d:44:63:ad:01:67:93:
fd:9e:70:75:ae:3e:ec:6b:0a:10:6c:8b:35:45:82:9b:62:87:
a0:0c:81:54:e0:88:e1:30:cf:26:67:2f:ef:af:eb:02:5d:07:
6d:5f:82:09:fa:d0:4b:0b:51:61:dd:9d:2a:30:98:8e:e3:01:
5b:2b:df:5f:0f:c6:22:ef:a4:40:82:dd:76:48:e8:3c:36:b9:
1d:11:6a:af:0a:7d:d9:fa:b6:a8:c6:9b:8c:d6:8b:8e:7a:0c:
6b:01:0c:4c:73:4a:51:8e:0a:e1:7d:72:de:f4:82:77:b6:ef:
03:b9:3e:c1:75:49:35:cd:c9:f8:1e:7f:ed:03:ae:94:d7:f8:
8e:77:e1:ac:7e:0c:32:aa:6f:80:30:3e:e0:7a:e4:96:29:10:
f2:1a:ec:13:ec:07:f3:58:1a:62:28:99:9e:40:67:f1:a8:03:
ab:1e:bc:26:f3:62:46:54:89:3e:de:f8:7f:36:46:28:3f:47:
a5:84:d5:44:59:6c:22:8f:58:76:22:29:0e:5f:c5:d2:07:3b:
b1:d9:43:0c:21:0d:b9:b4:ab:22:07:03:0b:bf:6d:0d:af:2d:
19:02:b7:23:59:4b:dc:ee:f6:f0:d0:68:d6:4c:1e:0d:8f:28:
57:7a:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:39 2025 by rpki-client