Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier: ycebnLlgvP75lsRAMVbIgDR/ViP+dQM1EBjKDzxJmWw=
Subject key identifier: 2E:7E:48:FA:7B:4A:9A:73:8D:E0:73:E4:2C:B4:5A:E8:A4:2C:DB:FC
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 01964FA35110BFD781876E11823B99DEC5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number: 0A53
Signing time: Sat 19 Apr 2025 20:00:25 +0000
Manifest this update: Sat 19 Apr 2025 20:00:25 +0000
Manifest next update: Sun 20 Apr 2025 20:00:25 +0000
Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: cUc9HEsvZod4dyKNyjkDp1ucdOru/gKEpyGG6vP6oqE=)
2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:51:10:bf:d7:81:87:6e:11:82:3b:99:de:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Apr 19 20:00:25 2025 GMT
Not After : Apr 20 20:00:25 2025 GMT
Subject: CN=2e7e48fa7b4a9a738de073e42cb45ae8a42cdbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:a3:18:ec:7a:d0:23:44:4b:51:cf:96:e4:
dd:70:5f:75:2c:b4:3e:5a:d8:2a:98:9a:d9:41:70:
6e:c2:ac:43:da:f4:92:58:d8:74:72:0e:16:a3:30:
e9:86:e1:44:50:17:2d:9b:9c:c6:5a:5b:96:9a:49:
45:3e:6f:4e:1f:3e:36:c1:ca:86:5c:af:fe:e2:b9:
fc:b4:35:84:be:cb:15:9f:07:a3:df:f6:a3:60:7c:
61:0d:0a:00:74:ab:54:1c:dc:77:f0:10:4f:f8:12:
df:a0:f2:dd:2b:a9:e7:25:ef:78:d2:ba:0a:c3:2a:
20:df:c2:ea:0a:eb:97:05:5f:2b:d7:81:e4:93:c7:
c0:9b:8a:cc:e9:6f:e0:5d:f6:d5:cd:41:1b:59:5f:
ee:cb:66:b3:0e:46:dd:e3:8f:35:9e:db:2a:d0:fe:
bc:71:60:f0:6f:23:4d:b6:69:b7:4f:72:0c:1b:44:
40:5c:08:aa:ad:e0:d3:cf:46:c9:7b:c0:a9:73:75:
5b:38:47:c6:5f:2e:df:67:c5:fa:57:e4:4a:0a:a7:
36:cf:ea:3c:0e:14:3c:25:fb:e8:2e:bd:4c:68:8a:
3e:93:71:96:d6:00:8e:80:65:3f:35:5a:59:31:91:
ed:c6:a9:fd:32:23:aa:3f:83:b0:93:44:3c:c5:1f:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:48:FA:7B:4A:9A:73:8D:E0:73:E4:2C:B4:5A:E8:A4:2C:DB:FC
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f7:1d:20:87:d9:23:bc:c7:39:cd:1b:09:6a:72:5d:83:15:
ed:49:63:ef:ce:64:01:f6:af:c0:1c:18:77:cf:8c:d3:c2:a6:
41:1a:30:0f:b4:68:71:51:f2:ab:75:10:d7:92:e1:6e:54:92:
d6:65:db:e3:84:78:d4:76:3a:b6:c9:b0:a3:07:76:a7:66:f9:
46:1c:b8:8d:b9:a4:d4:63:a3:a0:6c:17:7b:26:bc:30:da:fd:
e5:8b:89:08:bb:58:2b:dd:36:ce:be:c5:74:19:19:36:42:26:
80:b9:b6:e3:90:c7:bf:6b:75:d0:9c:9b:55:0b:97:94:8c:5e:
02:67:f8:73:e0:5b:82:6a:49:3b:7d:e1:9b:88:93:55:67:92:
44:7f:54:9a:4a:b2:f4:c1:46:c3:86:f6:c4:0a:4c:38:db:61:
98:2c:c8:93:96:a0:56:c9:0b:e6:31:0e:9a:7f:b6:57:45:d3:
3e:5d:7e:2e:56:0f:53:9e:bc:21:a8:14:a6:f4:ea:43:85:f9:
b4:4a:06:bd:2d:a7:b8:f8:54:97:f6:27:f7:e3:03:1f:84:ec:
0b:16:4c:54:01:68:a7:02:32:4a:01:da:c8:d3:9a:57:d3:28:
a9:1e:9d:e6:aa:a3:fa:d4:e4:08:17:59:80:16:fd:56:6b:5d:
3c:ba:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:59 2025 by rpki-client