Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: 9ftIAN/CCGMoY7GAyHaafcci2uI2qt4+2aON7kcc/MI=
Subject key identifier: CF:30:0D:CA:3A:60:26:73:14:52:5B:69:27:C8:12:BC:0F:B7:2C:AF
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019644B1B160DF3F48175BBEE71BC58F9641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 04C5
Signing time: Thu 17 Apr 2025 17:00:18 +0000
Manifest this update: Thu 17 Apr 2025 17:00:18 +0000
Manifest next update: Fri 18 Apr 2025 17:00:18 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: YnKx9QsyCcDXdp6HnAp5A5DfYDkwapLKtrsYz18kaCI=)
2: M9VdnF4uhv3S8ynJo1kTEBW1AUE.roa (hash: wgWraMBXBDnGqGgz/A6JsNtS6LmlDAkjX4m8FBkaGn8=)
3: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:b1:60:df:3f:48:17:5b:be:e7:1b:c5:8f:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Apr 17 17:00:18 2025 GMT
Not After : Apr 18 17:00:18 2025 GMT
Subject: CN=cf300dca3a60267314525b6927c812bc0fb72caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:74:f8:19:d4:1b:10:aa:88:3b:23:99:a3:
6a:23:f3:bc:2a:26:53:7c:5e:aa:7a:67:eb:b9:20:
8c:f2:5f:20:bd:64:e7:ae:fd:45:fa:5a:b2:0a:6f:
27:7b:6d:d2:db:cc:19:69:cb:6a:b0:f2:7c:b8:c1:
15:86:12:c7:30:97:5c:1b:df:7f:83:a3:50:9f:7b:
47:94:ab:02:8e:9d:f4:63:51:de:96:24:b8:45:2b:
e1:e5:e5:02:85:23:a5:c8:4b:43:bd:f4:75:94:3b:
a2:13:46:53:c5:ef:f8:44:4a:83:ca:77:70:0c:7b:
86:9e:7f:dc:50:b5:94:db:8f:9f:16:d6:43:0e:4e:
a1:6d:44:07:8a:87:0c:6d:30:12:b6:4f:0a:59:61:
ae:a3:c5:ff:22:0b:e3:db:da:8e:a1:d0:42:f4:6b:
1e:0b:8d:cd:8e:be:b4:c0:af:7f:21:f6:bb:de:a1:
ec:e9:56:a4:0c:13:c7:0d:42:6f:d7:9c:ff:1e:64:
a6:76:83:30:54:c6:a0:d2:d3:b0:72:c8:79:e8:c0:
59:7f:89:db:7d:67:6e:e6:03:6b:bc:8e:97:c3:17:
35:33:93:0c:e8:68:0d:e6:0c:62:a1:c4:9d:b2:14:
25:4b:f9:ce:9d:a2:f1:4d:49:a9:3f:f1:42:43:5a:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:0D:CA:3A:60:26:73:14:52:5B:69:27:C8:12:BC:0F:B7:2C:AF
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:24:5c:28:0c:78:59:84:6c:3c:db:31:9b:95:8f:b8:4a:
71:64:08:6b:7e:aa:04:50:7a:90:96:17:0f:22:bc:9b:fc:60:
70:f7:82:ca:4f:a2:6d:e5:a7:49:1a:4e:44:9b:59:c5:c9:ea:
5e:41:b7:71:9b:e0:fa:fe:5f:d4:b8:d2:d4:75:04:4f:7c:39:
9e:f9:51:6d:ca:24:9c:71:da:34:9c:33:55:0a:7f:1a:ed:a8:
96:02:43:31:fa:b4:c0:ef:ad:a1:eb:8f:03:b3:ec:ba:e5:18:
60:9d:97:98:e9:0b:63:58:1c:b9:55:a8:98:63:63:ef:e2:69:
5b:42:d6:22:64:5f:3b:3c:20:0c:30:17:b2:0a:74:09:32:7a:
b1:14:76:fd:a9:bd:49:f2:50:56:36:68:f5:70:da:35:f0:35:
26:96:2b:d0:83:17:d0:f3:86:f4:c8:9e:5f:23:2f:d7:f6:a5:
71:3d:9a:ee:69:c8:93:23:00:12:d7:bd:26:51:f9:77:78:82:
17:d2:12:1c:41:84:79:4a:02:94:26:04:67:19:c1:eb:cb:be:
3f:05:b9:c8:18:ad:6e:eb:a4:b9:0b:51:bd:13:65:61:75:87:
ca:92:96:21:f6:e2:ec:d0:32:68:fe:f5:04:fd:be:32:00:e0:
e5:2f:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:12 2025 by rpki-client