Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: zjq0f66bcUGqn+Egw1q6xeAGwm3v3c8yvEpuSV3iHAo=
Subject key identifier: 63:50:D6:F5:E3:A3:EB:4E:57:75:3A:2B:8F:2B:EE:26:08:BF:97:62
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 01964CD975FE45778727540B4E225104B9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 045D
Signing time: Sat 19 Apr 2025 07:00:41 +0000
Manifest this update: Sat 19 Apr 2025 07:00:41 +0000
Manifest next update: Sun 20 Apr 2025 07:00:41 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: Jw+lwCjyjyLoExBoEsezFJIofgXeZhMufvow22LhmbY=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:75:fe:45:77:87:27:54:0b:4e:22:51:04:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Apr 19 07:00:41 2025 GMT
Not After : Apr 20 07:00:41 2025 GMT
Subject: CN=6350d6f5e3a3eb4e57753a2b8f2bee2608bf9762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:86:15:76:78:4e:7d:a4:f6:90:fa:4a:1f:
60:87:bb:a3:be:84:33:c4:5c:a3:d7:29:38:22:e2:
d5:28:d0:ff:02:53:ee:89:79:87:6e:de:85:8f:e0:
dd:ef:cb:1a:05:f7:53:c1:fa:7b:30:fd:29:23:66:
e4:cf:3a:1c:66:e4:83:f3:05:2f:b5:23:66:c8:07:
5b:f0:66:67:09:78:83:16:3b:7c:a9:f2:12:21:2e:
3d:89:f8:f5:94:44:cd:83:48:b9:b0:6c:30:f4:1f:
4a:01:e1:c6:7e:12:80:59:4b:14:75:b2:1d:78:dc:
9c:04:d3:f9:13:a8:b7:cb:18:bb:d9:36:cc:17:54:
05:c8:44:77:1e:c4:20:b7:ee:e8:71:4d:cf:09:2c:
90:31:fc:0b:72:16:df:5b:70:7f:80:56:6c:7c:0a:
e5:cc:e2:89:ed:ef:ab:af:ed:a3:75:fd:23:b9:b0:
19:9a:04:e2:1e:19:d5:f3:ee:3c:7e:ab:08:80:43:
51:b1:1c:57:fd:00:15:8b:7f:08:bd:dc:27:de:ec:
e4:56:63:7e:47:18:12:86:d1:0b:90:0c:10:9f:4a:
46:20:fb:30:95:03:c2:8b:a9:7a:38:f6:2e:40:33:
36:e3:a1:c1:9e:98:9e:b6:e7:bb:de:81:37:44:c8:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:D6:F5:E3:A3:EB:4E:57:75:3A:2B:8F:2B:EE:26:08:BF:97:62
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:ee:b1:d8:1f:f6:57:46:d9:a5:5f:b5:ea:bc:dc:32:10:
37:49:dd:aa:4a:47:70:37:e9:d2:f5:5d:e9:26:c0:99:9b:a1:
31:19:d7:67:a3:2a:94:77:04:40:52:c0:6f:8c:73:d4:9e:9d:
4b:62:66:e7:24:93:5a:d5:30:af:73:27:8a:70:4c:c8:de:c6:
74:e7:fe:90:fe:be:b1:cb:31:d4:9c:8e:76:c9:e9:55:f0:ba:
9d:31:91:79:1b:e4:b4:f5:22:1e:67:30:fe:7d:ba:f6:c3:21:
b2:41:59:12:a0:d4:03:c7:93:12:52:40:fe:dc:4b:24:7e:31:
a5:a2:76:54:43:ea:86:38:40:93:08:20:5a:a8:42:b0:16:fb:
fe:f8:f8:0d:4c:a8:b4:74:37:ea:54:20:b6:f2:f2:a9:b1:c4:
19:10:35:0c:a5:31:67:a8:b8:7b:b8:80:dd:de:90:0a:47:ec:
7b:af:d1:89:51:ac:b7:94:33:96:fb:7c:28:ec:d5:3a:7e:ce:
61:fb:48:f2:ec:b5:bf:e7:6f:47:e3:80:e5:f5:3f:a1:7a:35:
68:35:7e:5d:7a:29:39:c5:10:f3:c3:8d:3f:b5:73:10:3f:6f:
c6:cc:a1:49:c9:76:f1:b9:7a:70:38:99:f7:6d:62:9c:e2:11:
66:f9:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:20:16 2025 by rpki-client