Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: t9fFkte2V2y4AOqWYNcg2PecaDnngd5RmhIuPiiu8Kg=
Subject key identifier: 71:F8:44:9D:83:41:08:30:11:7C:29:63:2B:97:80:94:72:76:6F:16
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 01964F6D1852BBE733D0DCC3A2C1BD0862F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 11EA
Signing time: Sat 19 Apr 2025 19:01:11 +0000
Manifest this update: Sat 19 Apr 2025 19:01:11 +0000
Manifest next update: Sun 20 Apr 2025 19:01:11 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: 20vcyiqwhC35TtTrKSfmXnUFgwfM9h3keeTBgj+NMMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:18:52:bb:e7:33:d0:dc:c3:a2:c1:bd:08:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Apr 19 19:01:11 2025 GMT
Not After : Apr 20 19:01:11 2025 GMT
Subject: CN=71f8449d83410830117c29632b97809472766f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:aa:02:ca:38:7b:06:61:60:54:03:e2:07:
0d:49:23:20:64:1e:13:b8:e1:89:67:72:58:a7:ea:
ab:e3:0c:7d:92:ac:2e:48:31:7b:72:dc:7c:66:3d:
d1:58:ae:77:1c:93:95:31:96:ca:c4:91:a7:75:48:
4e:71:2d:8f:e8:69:1a:02:75:83:cc:5c:fc:a1:a2:
a2:fa:a1:3a:a7:93:2e:7c:d3:25:78:c6:84:97:e2:
60:66:28:3e:5c:1d:fa:82:66:6f:dd:ff:87:63:fe:
74:ee:c1:06:59:5d:dc:04:36:85:18:72:cd:8d:a4:
02:1c:45:99:56:a8:5b:65:5a:73:c0:ec:86:ac:b6:
c9:50:7e:46:69:07:10:73:17:eb:30:49:34:5f:30:
82:40:dc:b7:c0:ea:21:1f:0f:00:47:85:96:4a:60:
82:06:5b:dc:98:76:f4:ff:7e:be:a1:fd:8b:6d:a0:
55:9d:f6:27:11:c5:88:3b:f4:47:29:f2:19:61:58:
e7:ba:fe:3b:92:27:62:19:50:90:7f:a5:af:bb:c5:
f4:ac:3d:9d:44:3c:0a:e6:b3:f1:c2:a0:c4:c3:81:
25:fe:6e:64:48:f2:5b:55:d6:12:1b:74:bc:6b:79:
55:e5:f8:03:56:98:8c:1d:9f:df:97:8d:63:c3:e3:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:44:9D:83:41:08:30:11:7C:29:63:2B:97:80:94:72:76:6F:16
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:26:57:83:70:b5:76:a4:39:b8:97:27:4d:81:d9:4d:f9:4f:
1d:f1:3c:5d:d4:f8:2f:cc:56:24:a6:83:9a:0c:9a:fc:a9:3b:
ff:e9:88:63:5f:4e:47:24:af:f7:f7:4d:c9:61:3b:f3:74:35:
4a:3f:0f:1e:d7:22:e8:34:7e:bc:da:25:d7:14:61:9e:b0:b2:
4b:98:3b:3c:c0:29:e1:3b:75:d3:e7:54:4b:f1:07:73:cd:27:
1a:40:03:d5:db:2f:61:c4:22:96:1f:d6:44:9b:10:a3:69:52:
62:9f:0b:7f:06:77:29:33:f7:60:73:31:fc:24:8e:02:f5:c4:
a9:89:60:09:2d:30:57:72:27:23:a1:53:27:ef:3d:4f:a5:78:
e7:52:18:b2:05:1a:da:52:90:62:7c:00:9f:3d:90:03:ba:1f:
45:93:c2:51:c7:88:8c:87:3c:ec:1a:8b:0b:59:5d:ac:cd:9b:
28:66:1f:3c:5b:b1:8f:e7:5b:85:88:2c:1a:0d:4c:e0:8b:41:
9b:07:df:f0:9f:f7:70:d3:da:80:6b:db:41:b7:3d:b6:f7:22:
15:a2:ec:f6:47:36:ce:92:42:b9:f2:c3:63:e3:1b:0d:1a:71:
5f:4a:60:e4:71:25:0b:0d:5b:2c:45:69:37:27:69:35:07:45:
88:c2:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:11 2025 by rpki-client