Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: 1FsmbUa98E1L1wmfMfh+VAr7pZbu2tCePy78v2IumiU=
Subject key identifier: DD:A9:E7:5E:1E:8A:AC:D3:D3:E9:11:56:86:75:BC:BF:FB:92:74:85
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019651FF9A80C4CB1B263496B29917BCFFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 11F8
Signing time: Sun 20 Apr 2025 07:00:27 +0000
Manifest this update: Sun 20 Apr 2025 07:00:27 +0000
Manifest next update: Mon 21 Apr 2025 07:00:27 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: UOLjKfVXuzDqALtI21rZJ8KP3nOHLhGGYooQCh25ojI=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:9a:80:c4:cb:1b:26:34:96:b2:99:17:bc:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Apr 20 07:00:27 2025 GMT
Not After : Apr 21 07:00:27 2025 GMT
Subject: CN=dda9e75e1e8aacd3d3e911568675bcbffb927485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:08:93:83:c8:7d:4b:05:8f:1c:98:85:13:
bb:c2:0a:84:74:e8:7a:2e:b5:0c:9b:ea:35:84:86:
2d:4c:d5:b9:6b:8c:f8:6b:34:05:44:03:ba:e4:b8:
d1:89:d3:fb:17:32:17:3d:98:db:31:3e:a7:51:72:
f0:45:9f:27:cf:d5:ec:c8:0c:fb:de:7e:87:5b:b3:
7d:31:fc:17:15:01:4e:ef:5d:23:b2:97:aa:e4:2b:
12:27:c5:8a:0b:97:81:ac:ae:01:ef:d9:24:f2:76:
2a:0b:05:b9:cc:f3:52:55:c0:5a:40:75:f6:2a:ed:
e7:dd:3e:85:c5:0b:6e:e7:c8:ff:d2:b7:ca:78:37:
03:23:56:3f:f3:77:66:91:56:00:9f:79:d9:f5:e4:
d7:62:8a:6f:e5:ac:19:0e:0c:00:f5:f9:93:07:21:
bd:b0:72:1f:7d:c6:58:f3:0a:c6:b5:bc:d6:32:b3:
a0:3e:af:d7:99:f7:6a:59:22:36:ea:63:d4:97:e0:
65:28:b2:33:99:57:a2:60:4c:45:98:3d:d8:d8:9e:
dc:57:7b:ac:04:e4:d6:12:34:b6:28:98:75:34:92:
a5:3e:d4:de:de:6e:8f:1d:5e:b2:52:22:ae:38:36:
7a:9a:55:35:92:38:15:9a:31:7e:4a:10:4d:eb:0a:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:E7:5E:1E:8A:AC:D3:D3:E9:11:56:86:75:BC:BF:FB:92:74:85
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:ac:dd:73:f9:e5:46:a7:16:5d:2d:47:de:f4:1f:0e:a5:
e7:5e:89:05:93:0a:0e:fc:d4:63:51:7d:36:2d:55:ed:da:5b:
ed:a7:08:ed:40:48:75:38:a4:1d:1e:ed:22:23:dc:e7:e3:40:
f2:1b:ff:1a:2f:9d:21:8f:3f:9f:d4:5f:c9:2c:c9:b8:61:c5:
4c:6b:bc:9e:62:a3:f7:40:f4:d3:13:7e:b2:2c:16:42:a7:33:
bb:03:e7:06:46:36:eb:54:bf:0e:20:4d:90:40:66:0f:e2:7f:
9c:3a:91:ff:87:7e:6e:39:78:7e:06:2d:9b:ee:58:fd:0e:8a:
47:1c:57:9c:16:8b:d9:4a:32:41:a9:5c:24:85:f6:5b:b5:7e:
91:8a:73:d0:bf:19:15:3d:cc:83:1f:d0:19:ac:fc:3d:05:fa:
03:fd:ad:b4:58:86:b5:5e:28:4d:a3:f5:4f:fa:c3:f0:d6:23:
46:60:ac:b9:68:58:80:06:e2:2e:05:20:a2:ac:37:c2:e0:32:
1d:9a:11:f3:e4:13:3f:2d:d2:5f:08:d3:b8:6a:f7:9d:7a:da:
c4:23:14:43:e5:79:de:ab:3c:6f:a5:a0:9a:39:39:f1:5d:29:
cd:9a:fb:ab:2e:09:d5:74:6a:6b:36:a7:db:7f:48:68:42:08:
46:3f:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:05:55 2025 by rpki-client