Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: me5GtQJEFXfxHUFVBrlEdOdkAqJNYU5eGOH526w/BSQ=
Subject key identifier: 44:5E:A6:78:F6:C1:2C:85:41:10:20:0B:B7:9F:8F:A5:1E:BB:C9:71
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 0196564A2440D41C841A35ADC24A99F6DC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 090C
Signing time: Mon 21 Apr 2025 03:00:21 +0000
Manifest this update: Mon 21 Apr 2025 03:00:21 +0000
Manifest next update: Tue 22 Apr 2025 03:00:21 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: JPngnKsJ0heSN2SyT19+imDADRBu6X1Kmocjz0wyDus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:24:40:d4:1c:84:1a:35:ad:c2:4a:99:f6:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Apr 21 03:00:21 2025 GMT
Not After : Apr 22 03:00:21 2025 GMT
Subject: CN=445ea678f6c12c854110200bb79f8fa51ebbc971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:ba:2d:94:5f:f1:83:6b:1a:96:96:a5:93:
19:86:46:60:8c:af:65:03:73:a8:35:ae:b0:af:50:
7b:6d:4b:f7:93:82:7b:c3:aa:46:5b:8e:66:26:d3:
27:fb:be:0e:e0:45:7c:b3:eb:cb:1d:99:75:35:19:
c9:5e:cf:f0:00:cd:10:ef:14:f7:91:19:df:e6:a7:
1d:6b:5c:8f:a4:54:13:45:5a:5c:23:4e:9a:28:7f:
cd:99:65:6b:c5:7e:7a:80:95:0b:d1:91:2a:29:a0:
9e:dd:a2:89:2e:e2:67:4a:ff:49:59:ef:0c:3d:a3:
aa:b8:62:07:d3:23:8f:6c:18:a4:a6:c2:0a:59:ed:
78:1b:de:23:6e:28:92:c1:f1:80:2f:1e:33:51:ab:
d4:12:7c:3a:d8:9c:ac:a1:47:d3:51:b0:5c:4f:2a:
66:2c:9d:f2:32:c8:bb:6d:3f:7e:a6:8c:22:91:6e:
a0:b4:e0:ab:60:dd:57:42:78:a1:ac:43:13:9d:96:
bc:ab:03:22:2c:40:3d:11:aa:b7:cd:f4:29:60:5b:
d5:60:62:4c:a1:6f:00:3f:b7:7b:52:0f:aa:a2:6f:
ae:8e:d8:52:44:8e:a2:9e:19:2e:59:09:35:90:31:
c9:d7:b8:7e:78:55:5f:cf:69:dc:3f:61:4c:95:b2:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:A6:78:F6:C1:2C:85:41:10:20:0B:B7:9F:8F:A5:1E:BB:C9:71
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:f0:a6:17:4f:b5:e7:ba:76:8d:bf:6e:d2:32:6e:ad:22:
81:34:fc:23:f3:a1:8b:26:5f:7f:55:90:82:59:c6:54:0a:a7:
b9:d3:89:bd:88:4d:97:01:a8:ce:e9:16:f9:be:13:8b:60:9c:
17:58:1d:d1:2e:b3:0d:0b:de:25:32:6a:9a:f8:a5:b0:e9:d5:
d3:bd:29:ad:5d:ce:59:d3:4f:bf:82:1b:8c:73:e4:7e:be:c4:
a0:f6:09:c2:1a:27:ba:bb:d7:3a:4a:ed:a9:80:6f:ac:96:b4:
f2:6c:09:e2:38:ab:03:df:50:d6:69:f0:62:0f:17:a4:70:8c:
bf:e2:5f:69:6f:03:d9:34:0c:41:9b:fd:59:9e:92:ff:5b:5c:
72:0b:64:20:b8:6a:ac:d6:21:03:2a:ea:61:8e:81:0b:04:a6:
83:7b:a5:02:f8:94:82:ba:7a:06:73:28:7e:4d:d7:56:27:1a:
10:76:75:0e:de:2a:81:73:1b:70:b7:fc:b0:94:c7:b9:67:3d:
ce:bd:65:a7:08:eb:3e:bf:67:6f:58:ba:24:dd:0a:82:ed:1e:
fc:d6:ed:11:4d:7c:54:1c:e0:6a:3d:2a:f5:6a:96:77:25:69:
3f:5f:ea:63:5f:99:2a:b5:28:46:f4:36:28:94:93:0b:ce:55:
63:f1:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:58 2025 by rpki-client