Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: HJMvkmmCBrHa9TPyV/rIhkeocNWRl0M4F5UnzmfyF08=
Subject key identifier: DB:25:DC:74:81:06:9C:B6:77:A6:FE:F8:A2:26:89:C3:62:FB:C5:25
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019648FC6C3D2E54790794DFFF66E4E68AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 12F8
Signing time: Fri 18 Apr 2025 13:00:24 +0000
Manifest this update: Fri 18 Apr 2025 13:00:24 +0000
Manifest next update: Sat 19 Apr 2025 13:00:24 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: LTVvjNkc55jFSAk2G6z1aIMDBX0dhTDwLcu46AgFbCE=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:6c:3d:2e:54:79:07:94:df:ff:66:e4:e6:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Apr 18 13:00:24 2025 GMT
Not After : Apr 19 13:00:24 2025 GMT
Subject: CN=db25dc7481069cb677a6fef8a22689c362fbc525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:aa:9a:de:70:14:cc:05:4c:ca:11:7e:ea:
81:a3:b5:28:f3:83:00:c3:12:9f:0e:c3:85:04:e3:
18:78:69:8e:5a:2d:b2:6d:92:a2:41:d4:3d:77:e7:
47:19:b9:2a:f6:59:68:38:08:68:9b:a7:b9:b6:99:
e7:f4:26:36:ba:ae:fc:5c:55:38:d6:da:1f:b5:d5:
50:04:31:72:9d:86:93:ca:12:40:96:ce:0f:87:c4:
9a:aa:79:7d:f5:3e:0a:97:0b:9a:ed:74:6c:50:c8:
ba:66:dd:31:c7:5a:02:71:d2:3a:4c:3e:4b:b1:95:
e1:58:89:80:84:91:14:4a:c7:47:4e:f9:74:23:c4:
51:d6:24:98:92:80:ee:dc:24:1a:f2:e0:ce:4d:37:
bf:e6:fb:8c:c0:b8:0a:03:e2:6f:b3:0e:44:1d:f4:
05:de:f9:74:73:01:fb:58:01:d3:8b:4e:cc:cd:9d:
c5:b5:b7:a3:91:9b:78:41:5d:26:ea:cc:e4:3d:66:
0d:44:a6:f7:9a:56:76:0f:3f:54:fd:3b:00:58:b2:
3c:e7:11:68:c9:e5:3b:70:61:c8:41:43:bb:3f:b6:
4e:5f:0f:21:71:72:80:7d:11:9d:a9:6b:6c:f6:f5:
f8:89:6b:17:ec:51:b0:a3:bd:66:9e:59:27:c7:e6:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:DC:74:81:06:9C:B6:77:A6:FE:F8:A2:26:89:C3:62:FB:C5:25
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2b:17:8e:99:8d:95:6b:e2:02:9c:37:35:8a:e8:0c:2f:c6:
f9:1c:82:91:4e:3f:86:1e:d1:79:56:67:99:4f:fa:86:26:4b:
de:56:1d:90:c9:c7:d2:a0:9a:d5:84:02:1e:b5:32:0d:d1:1d:
a8:4d:ef:1d:e5:f3:87:45:8a:c3:1c:ce:79:b1:28:e0:8b:82:
b3:e7:9c:76:b5:e1:9b:39:2a:bd:f9:ac:ba:ad:42:fe:3b:e3:
cd:1b:af:8b:8f:d6:b6:f8:a7:41:e6:10:44:6c:70:67:65:6a:
23:cd:b0:0b:97:3c:54:e7:cd:99:4c:14:e6:71:72:55:2f:a2:
3b:d9:06:a3:cb:c1:0c:af:59:20:9a:29:5f:8d:e2:4c:ec:0a:
2e:48:61:6f:ff:aa:25:44:67:06:71:73:5a:a2:2d:ae:5f:34:
70:e3:41:89:68:bd:fd:59:3e:ce:fc:31:fd:92:66:0d:15:0e:
11:c1:75:7a:cb:ec:20:3c:db:f6:76:17:94:62:4d:29:d5:a5:
2e:38:ae:ce:17:24:a8:7c:8c:86:46:5f:61:fb:2a:db:61:13:
ba:a6:57:9c:87:6a:98:34:6a:1d:17:ea:3f:31:71:54:04:68:
41:dd:6b:b5:1b:4d:b7:a5:41:f3:5c:b5:15:13:34:54:ad:f6:
01:ba:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:11 2025 by rpki-client