Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: jdJVdogKXUUnW+L+2bOyFToTQ6MRvVzEJKHZaKssZdU=
Subject key identifier: C5:1C:59:C5:24:28:A1:16:CC:C4:D6:0F:B0:54:E2:5E:9F:91:E6:CC
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01960E9FEA157F0428ADE1BAD534B3DC98CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 0F22
Signing time: Mon 07 Apr 2025 05:01:23 +0000
Manifest this update: Mon 07 Apr 2025 05:01:23 +0000
Manifest next update: Tue 08 Apr 2025 05:01:23 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: od4hzAkMho2fu+zQZd8G812uL9YnJ+Kl8XZ4qZ2NtQQ=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9f:ea:15:7f:04:28:ad:e1:ba:d5:34:b3:dc:98:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Apr 7 05:01:23 2025 GMT
Not After : Apr 8 05:01:23 2025 GMT
Subject: CN=c51c59c52428a116ccc4d60fb054e25e9f91e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:7c:67:00:c1:5d:2f:b1:f1:6d:5e:26:91:
fe:6d:03:e2:17:94:6b:34:02:ac:93:d0:94:4a:d8:
6d:2d:c3:85:87:f3:5c:3c:df:f9:8b:96:84:bc:cd:
04:16:d5:af:0d:62:70:9b:e4:ae:82:42:0e:ab:8b:
a5:dd:97:75:56:db:bd:27:b7:1a:dd:c5:52:00:a7:
5b:1a:2f:08:92:13:85:f7:6e:78:b3:d2:3a:5d:c6:
20:99:40:fb:1d:75:ac:cf:7e:eb:d5:98:9f:c9:eb:
5c:c3:63:5f:d1:47:81:90:ab:ba:3a:4b:dc:8a:17:
f6:39:43:0d:e7:dd:58:9b:ba:96:7b:b8:f2:b6:6c:
f8:9b:81:18:36:f8:ac:7d:cf:68:a8:5c:6b:75:35:
11:01:fd:d3:43:ac:13:f3:8f:d9:6e:af:9c:58:f3:
26:77:2d:3f:0f:26:c5:2e:01:29:15:44:bd:41:84:
b9:11:73:41:53:50:8b:85:2e:64:f5:d8:32:10:7a:
70:ad:d9:53:f0:6e:d2:0e:aa:aa:10:7c:a5:33:21:
5c:23:d9:cd:c4:87:5c:09:9b:8f:a0:8f:94:9b:ce:
82:ab:22:43:50:04:f5:14:ec:bc:37:2d:de:28:95:
7e:86:44:fd:7f:a1:b5:db:98:73:7e:31:48:43:82:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:59:C5:24:28:A1:16:CC:C4:D6:0F:B0:54:E2:5E:9F:91:E6:CC
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ce:ff:f0:08:96:3d:28:00:ff:ad:52:36:db:3b:45:2e:e9:
2b:61:bf:85:73:82:83:32:37:c0:e3:48:f1:08:36:7d:7d:85:
7b:c8:e6:1b:3b:c2:7c:f2:ff:ee:22:1b:b3:ec:95:0a:df:64:
18:49:1e:0e:f5:98:b4:6b:d3:23:46:d8:5b:9d:00:4a:53:b1:
1a:5c:ee:84:56:95:54:d7:2b:26:51:d8:78:8f:85:dd:9d:92:
80:ef:ff:0d:63:72:65:5a:30:ef:8d:b4:7e:c0:5b:8f:26:2a:
31:d3:84:bd:10:c5:0f:8c:ba:5c:85:75:46:13:c4:c9:69:4c:
8a:22:43:1f:2e:78:09:b3:1c:48:43:41:90:34:d3:26:d0:a7:
b2:48:8a:df:a8:37:77:b6:fe:f1:61:74:8f:67:ac:f5:0e:74:
fb:41:48:48:43:f3:10:c1:ec:b8:d9:0f:f0:d0:02:ed:14:00:
97:6b:bf:f3:28:82:76:7a:e8:be:9f:81:04:8a:89:b2:f8:5e:
0e:15:c9:16:f0:1b:fe:15:a3:b7:bb:2a:9a:64:29:ff:54:22:
3b:24:e8:7b:44:3a:ba:99:35:cc:b0:72:66:63:49:91:0a:99:
b2:74:82:22:d6:c6:5e:d4:6c:e1:90:5a:3e:46:56:46:9e:aa:
70:22:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:02 2025 by rpki-client