Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: SApLWhHCVLdFfwkRJT8O+QmuN5s1xDLFAI7VXs3iRmw=
Subject key identifier: 63:82:AB:F7:08:E5:7D:61:25:04:9A:23:F8:27:1E:6C:37:A4:C3:BA
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 0194C3F5F149E59E380DE7B888867A17F408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0B18
Signing time: Sun 02 Feb 2025 00:01:02 +0000
Manifest this update: Sun 02 Feb 2025 00:01:02 +0000
Manifest next update: Mon 03 Feb 2025 00:01:02 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: ieysKUkQDgeAFD6yod+AO0Ox0ZHP1KoifSyD8wm9EKs=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f1:49:e5:9e:38:0d:e7:b8:88:86:7a:17:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Feb 2 00:01:02 2025 GMT
Not After : Feb 3 00:01:02 2025 GMT
Subject: CN=6382abf708e57d6125049a23f8271e6c37a4c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:8f:45:10:d4:04:b4:89:05:bf:9d:cb:8d:
2e:25:7e:1a:ee:9d:a0:0e:51:9c:f9:57:f6:c9:35:
17:45:10:40:07:75:36:e3:5d:91:3b:2d:c9:ef:97:
03:29:de:37:3b:b3:a2:e6:5c:16:6f:6b:71:a1:82:
2d:d6:98:23:37:a2:55:f4:a7:6b:23:09:10:8e:67:
bb:3e:9d:7b:79:f7:64:80:56:03:ea:1d:76:f6:ea:
62:ab:0d:17:58:3a:11:56:ec:ab:72:60:03:f7:fa:
e4:d7:61:ed:d4:af:59:00:d2:ac:a7:8d:5f:e3:59:
c8:a8:48:2a:d0:ed:a6:ed:c3:00:b2:42:1b:35:c9:
fb:58:79:36:fd:12:83:b4:65:a2:2b:12:78:a8:3b:
d4:c6:07:90:97:54:9d:38:36:ee:0a:32:b6:df:e2:
55:46:de:a3:e2:e0:80:17:95:bb:c7:20:6f:42:4d:
80:fb:05:2c:a9:3a:f5:02:db:8a:43:e3:1d:5d:cb:
ba:52:7c:54:5f:27:de:92:cc:89:a3:f9:c8:ee:eb:
03:05:ae:35:b1:28:7b:d4:fd:4a:47:00:95:43:2f:
91:77:67:82:3f:f9:05:08:67:31:df:88:89:08:56:
92:60:13:46:8a:f1:39:43:06:93:77:e1:74:a5:96:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:AB:F7:08:E5:7D:61:25:04:9A:23:F8:27:1E:6C:37:A4:C3:BA
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:56:26:bb:fa:4d:3c:a7:58:cf:c7:2d:38:b0:4b:43:51:
24:10:8e:3b:1f:ae:75:8a:fc:22:6b:3e:a0:8e:2c:e2:9c:7e:
2b:bd:0f:08:c5:3b:98:64:63:83:e9:b4:f2:f8:c7:47:c7:4b:
67:c2:79:7c:8a:e9:36:3d:be:6a:24:12:70:05:41:ea:e0:59:
15:43:19:7d:4a:2c:0e:9a:36:7c:26:2d:17:30:dc:52:54:b3:
99:a8:21:92:8e:6e:93:a3:ff:3b:57:2b:93:4e:46:f4:08:20:
ae:e9:c3:a0:60:1a:e7:d2:85:b9:38:6d:94:ea:43:6f:ac:7d:
2b:f8:37:42:03:94:42:9d:09:13:4a:af:0e:84:bf:27:de:d4:
ca:62:ca:b0:b6:6e:37:d7:40:51:4c:62:b6:e9:96:8e:b0:95:
b5:78:a1:60:0c:ce:5f:9b:12:1b:8d:e4:97:97:35:0b:c8:70:
e0:82:a5:ba:73:33:33:6a:62:fd:04:b6:e6:51:93:fd:a9:b6:
10:f2:72:80:06:4b:c9:38:95:2b:44:36:50:36:22:1a:c3:fb:
fe:4b:38:84:82:b5:92:09:cc:dc:cc:29:c8:8c:a3:d4:f9:a9:
c3:75:fa:5a:08:33:7e:33:3c:95:40:82:96:e8:c6:b3:5d:1f:
b4:7f:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:57 2025 by rpki-client