Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: ULjzVs2tweTEbd5OkxeYmzxt/ogN9e/nweDmImFlhns=
Subject key identifier: F5:1E:E6:D8:F1:42:54:43:F9:07:B6:40:9F:00:D2:68:91:1C:73:48
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 0196545BC8E8DCE6E9188E6708828F4220C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 12E4
Signing time: Sun 20 Apr 2025 18:00:23 +0000
Manifest this update: Sun 20 Apr 2025 18:00:23 +0000
Manifest next update: Mon 21 Apr 2025 18:00:23 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: Cmyfv6rub3O9w21grX6Lu3SH8jTUBniumrYfLLEztSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:c8:e8:dc:e6:e9:18:8e:67:08:82:8f:42:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Apr 20 18:00:23 2025 GMT
Not After : Apr 21 18:00:23 2025 GMT
Subject: CN=f51ee6d8f1425443f907b6409f00d268911c7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:2a:49:f6:8e:7b:9f:9f:17:3a:91:60:af:
a1:82:e0:84:5c:36:de:13:34:b4:95:8e:d5:20:8c:
40:35:8c:b8:6e:0e:03:b8:34:9a:76:75:5d:d4:2b:
41:98:42:0f:cd:29:6c:a7:2b:27:f4:64:a3:b0:7b:
b9:7f:7d:dc:dc:ed:b2:58:58:23:9e:70:c7:34:67:
6e:fe:35:8f:37:81:a2:e4:9e:d4:2c:46:3a:61:c1:
c6:9f:d9:98:05:de:ec:c4:85:fe:60:12:ef:e4:d0:
97:a1:37:1f:ab:c5:e8:01:40:83:f2:62:1f:13:f0:
e1:e2:77:7f:13:1b:3f:9d:d6:eb:1d:e3:43:d2:5f:
e8:ab:c6:5b:59:f8:93:02:ec:63:35:0a:31:fe:46:
2a:65:7d:01:7b:bd:4d:41:18:c7:b1:bd:a0:65:0f:
35:0f:0d:b8:4c:ab:b4:db:31:9f:ac:e1:91:14:21:
c9:70:42:61:d8:9d:20:4c:f5:3e:19:ec:3d:9d:e3:
e0:88:7f:61:13:4d:5e:f3:68:1f:5c:bf:65:45:63:
7e:9c:67:06:fb:d4:e1:2b:98:8f:fc:c9:30:de:98:
6a:c6:80:74:a4:ee:22:9b:4b:c4:ba:af:ba:e0:ea:
25:b8:a4:ad:11:90:fe:f1:a5:87:2d:3f:64:4f:9f:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:E6:D8:F1:42:54:43:F9:07:B6:40:9F:00:D2:68:91:1C:73:48
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2a:bc:ce:cc:88:69:42:dd:c0:b8:d0:2a:56:ff:e1:7e:ef:
e9:02:50:d3:f5:50:46:d3:07:bb:bf:a3:d5:b5:b1:04:c7:4b:
20:d0:73:7b:ff:cf:10:c6:ff:4c:ee:f1:ab:e2:7c:01:82:60:
f0:7c:ae:71:01:99:a0:3e:c3:39:4e:c9:89:41:83:6f:83:bc:
b0:02:ab:db:5d:53:85:81:19:84:f6:bb:ee:bb:f9:ed:6c:57:
da:ba:18:29:96:4e:c7:95:e9:d7:25:df:50:0c:e7:69:38:3b:
59:fa:73:51:aa:90:ab:e7:9e:ce:3a:d2:7c:61:43:a9:b2:49:
3c:d8:72:0d:f8:8f:6e:0a:2e:6d:5c:0a:3c:36:38:a0:cf:30:
11:20:92:c9:96:32:20:34:8c:e4:13:f8:ca:d0:b8:54:09:bd:
13:32:a6:24:a3:e0:94:f3:7c:2a:6c:83:f9:a7:a8:09:b0:c6:
48:e3:2d:4a:21:2e:db:00:34:08:1a:d2:bb:c8:2e:11:84:f9:
8c:8e:0a:d4:9f:5a:21:68:3f:22:43:85:ac:28:56:72:54:4d:
75:07:82:d0:26:06:82:1d:e7:5e:ba:fe:bb:5c:8d:36:60:0e:
85:1b:68:e0:a0:77:68:00:09:9b:f1:52:1e:bd:49:39:24:93:
a0:95:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:15:58 2025 by rpki-client