Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: iBLNTssHCT2jF14l2giY1FRl+6HM+2GT4yzDXDufOe4=
Subject key identifier: D3:3B:2C:1E:D1:AB:C0:27:7B:0A:FC:EB:03:1D:BC:5A:FD:FC:C7:B9
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 01958B16DB93979224461D243478FBFF7570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 0416
Signing time: Wed 12 Mar 2025 16:01:25 +0000
Manifest this update: Wed 12 Mar 2025 16:01:25 +0000
Manifest next update: Thu 13 Mar 2025 16:01:25 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: PmAWrhdxO07srs24QE1rS+hlg60vCvSzr6jLGaHNPIg=)
2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:db:93:97:92:24:46:1d:24:34:78:fb:ff:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Mar 12 16:01:25 2025 GMT
Not After : Mar 13 16:01:25 2025 GMT
Subject: CN=d33b2c1ed1abc0277b0afceb031dbc5afdfcc7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:ac:9c:95:22:49:a1:20:72:0c:12:2d:63:
92:ec:3e:08:e6:c7:18:8d:2e:b8:2c:9b:9b:9a:22:
64:5a:1e:06:00:8b:35:c1:f9:f4:a5:4e:20:00:a2:
57:14:79:09:8f:4c:81:bf:89:1e:19:ad:b8:14:31:
14:74:fa:42:b1:72:6e:77:ae:e1:6f:e4:b9:f1:b1:
d6:6b:9a:e2:eb:04:f3:9d:4e:09:ec:62:83:b8:a2:
95:9a:cc:60:8c:1c:32:f5:3a:b9:78:50:57:a7:05:
7a:f1:3a:5b:cf:6c:2e:9e:32:40:aa:72:aa:d8:62:
f5:ef:38:35:a5:a2:d7:ac:9d:86:2f:d6:a4:2c:2e:
61:44:98:53:53:86:d0:c5:88:0a:08:2a:f7:5d:e2:
31:75:d0:e4:1a:c2:c4:7a:2d:a4:63:86:f6:a3:cc:
b3:d6:dd:8b:0a:69:d9:24:ee:e3:4f:1d:14:10:89:
cf:4e:0b:ec:b3:32:e0:1f:dc:9e:64:50:35:95:16:
cb:e6:56:b5:03:23:95:f9:06:7d:c3:81:b4:6f:c6:
2f:9b:61:e2:8f:9a:3c:f6:9f:70:43:20:cd:5d:d7:
cf:5e:19:e7:67:e1:ea:de:df:df:6d:f2:b4:3c:59:
0d:0c:e8:66:ae:3e:19:65:5f:a5:b7:42:5e:d0:7f:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:2C:1E:D1:AB:C0:27:7B:0A:FC:EB:03:1D:BC:5A:FD:FC:C7:B9
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:ba:e4:d7:0f:bd:e4:62:5a:f9:ac:ab:ce:ad:5a:62:ff:
f2:7e:f0:77:c4:fd:12:c8:30:36:9d:ef:fc:9d:7a:c5:c4:df:
ee:b8:2f:85:5b:97:47:52:18:39:c3:01:1c:c9:6a:46:5a:0a:
25:80:c1:3e:33:7f:a0:e6:c2:70:4d:28:b1:bf:f3:92:3f:7a:
5d:66:d4:6d:f2:79:5e:7d:1a:92:9b:7e:8b:6b:45:71:cd:0f:
24:17:ab:03:62:5c:d8:1a:e9:5d:b2:3b:c0:ee:7b:bc:15:78:
78:56:c6:4d:13:b6:28:b0:55:4b:02:71:9b:1a:fe:b7:c9:fe:
aa:7f:8e:e4:82:b2:3b:f2:4f:85:3f:77:11:0c:17:c0:8a:ee:
53:be:ba:11:cc:29:c0:32:fd:02:00:26:18:45:cb:00:43:e9:
ff:49:b4:5a:d6:3d:9f:b7:5f:d9:02:01:83:7a:c2:a5:27:fe:
52:a5:68:b5:ea:af:44:f3:ba:35:2e:68:9a:68:03:67:d0:ee:
e8:e4:e8:60:e7:de:a4:d4:ff:48:7c:5a:28:00:c7:60:c6:91:
41:51:58:a5:8f:90:6c:94:de:49:fc:42:b0:ba:34:d6:1b:08:
de:07:53:6b:01:a1:5c:ec:50:45:c6:56:4b:c7:10:ab:3b:5f:
61:e8:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:08 2025 by rpki-client