Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: VhG1zTGayFEjA2Prb7yNQGeDiAt57rx4BN6QCBRoBdY=
Subject key identifier: 4B:A5:80:48:32:A7:49:59:80:C4:DC:B7:A5:FB:CC:D9:49:4A:B3:1D
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 01964C34E04AFF9A1CAE3E25CD6B8FC812E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 145B
Signing time: Sat 19 Apr 2025 04:00:55 +0000
Manifest this update: Sat 19 Apr 2025 04:00:55 +0000
Manifest next update: Sun 20 Apr 2025 04:00:55 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: FPmkvT39XfukhSm5rqDHxzvTkxmXvgitHeHwGOhHrzw=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:e0:4a:ff:9a:1c:ae:3e:25:cd:6b:8f:c8:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Apr 19 04:00:55 2025 GMT
Not After : Apr 20 04:00:55 2025 GMT
Subject: CN=4ba5804832a7495980c4dcb7a5fbccd9494ab31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:27:2f:07:9f:ca:3d:35:38:03:5a:46:b7:
10:c9:91:7c:c6:03:f6:61:3b:9a:1c:e5:fe:63:78:
8b:4c:c6:0f:5f:ff:09:4b:b1:99:6d:5a:b6:30:e9:
69:17:56:00:f8:cb:76:6a:91:40:8c:77:23:19:76:
7e:b7:99:bc:8d:b5:2c:21:0d:7a:98:92:f8:37:e8:
91:5b:08:d0:b5:69:32:a9:47:57:a5:67:c3:a3:4c:
63:2e:ca:1c:3f:31:52:f1:f8:4f:30:44:0f:15:ac:
e2:33:13:54:87:50:b4:63:94:2a:22:07:7d:7d:af:
57:af:86:8d:b6:a0:0b:4d:e6:d1:04:34:7d:9b:2b:
31:28:84:a2:cb:3d:42:de:9d:61:40:1f:01:87:c9:
52:57:27:6d:96:37:e7:39:32:49:43:a4:48:fc:6d:
04:25:cb:fb:93:e1:92:c5:c0:56:7f:06:c0:44:04:
b2:99:5c:0c:90:e1:3e:f5:33:5f:58:de:c9:66:7c:
ab:32:8b:ae:c3:5d:0a:10:3e:4b:74:37:ae:d7:d0:
b4:59:03:f3:07:62:35:c4:5e:9d:6a:e9:3a:47:d1:
fd:13:ff:74:29:64:6d:26:de:31:83:20:9e:b1:f8:
66:41:78:00:a6:79:72:19:2a:61:f0:7e:a3:dd:bf:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A5:80:48:32:A7:49:59:80:C4:DC:B7:A5:FB:CC:D9:49:4A:B3:1D
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d7:e6:e7:05:6a:65:80:12:5a:17:eb:06:1b:b6:0d:69:97:
22:29:21:d5:2f:55:1e:d4:e4:f7:76:1e:0c:20:dc:5b:f0:d5:
4c:f7:0b:8a:af:14:33:40:c3:79:1b:6b:1d:25:50:80:b0:5d:
ad:a0:cd:03:4c:40:12:10:c5:b4:ff:47:7c:0d:ef:72:bf:95:
bd:78:7d:2c:42:63:95:0e:b0:cf:af:30:83:45:b8:df:ac:a0:
aa:67:50:52:e4:14:91:bf:45:23:d7:24:56:d8:28:be:39:ed:
03:82:6b:c5:48:11:5a:19:2d:d5:6a:8e:29:48:54:da:0d:e8:
91:43:4c:56:fe:73:c2:3e:46:c6:19:8b:9e:dc:00:14:27:96:
66:68:70:2b:c8:6d:83:b5:79:52:a6:4c:e1:0f:15:b3:98:fe:
20:01:3e:8b:21:8f:ab:1c:fe:49:f4:b1:52:36:47:b3:00:63:
79:ec:18:11:25:d7:89:8d:ca:d9:77:5a:ed:3f:2e:70:82:2d:
a6:d0:ab:99:d5:a1:53:e9:ad:69:86:b0:c5:ba:55:89:91:7c:
f6:03:41:43:f2:35:e7:43:07:3f:3b:ab:e7:6b:cd:d0:e7:6c:
32:cd:e9:35:32:8f:66:5c:dd:cc:e4:c1:57:1a:19:b6:7d:6c:
bf:6c:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:23 2025 by rpki-client