Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: Zn6O0SyUrxhowSzMVKC189cCyHH6e6Jkgp+f/lx8KNA=
Subject key identifier: 70:68:83:72:F5:B8:44:DB:36:E4:C0:C3:DC:58:2F:0C:F0:45:55:9A
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019652DB48A52678BFB5F22D06F35E05C079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 11:00:24 +0000
Manifest this update: Sun 20 Apr 2025 11:00:24 +0000
Manifest next update: Mon 21 Apr 2025 11:00:24 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: vFCDke+gU9gDCHxpiXfPijic+1qSDjdZWUjhoqAKsTI=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:48:a5:26:78:bf:b5:f2:2d:06:f3:5e:05:c0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Apr 20 11:00:24 2025 GMT
Not After : Apr 21 11:00:24 2025 GMT
Subject: CN=70688372f5b844db36e4c0c3dc582f0cf045559a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:e3:eb:c0:29:9a:95:93:0f:a7:e2:92:bb:
4b:dc:bb:c2:fa:11:e8:58:24:d6:67:e0:c2:ad:be:
69:00:84:f3:b1:8f:10:40:74:57:c0:61:21:f7:39:
b6:1d:5a:b6:47:ca:22:f6:2c:69:41:44:3f:3b:4f:
5a:33:c9:91:f1:11:72:1b:4c:2f:59:03:b6:9c:af:
90:c4:17:f8:22:3f:fd:7e:64:6a:2a:7a:59:0f:84:
26:55:41:8c:a8:f2:78:e0:a5:3a:79:50:55:fc:9f:
96:59:ed:ee:12:8c:28:76:6f:ba:4a:90:ad:86:41:
f1:fd:60:4c:1e:7b:9d:b0:5a:17:9a:d3:73:7b:87:
82:a1:d5:12:b9:13:9f:a6:c6:38:51:2c:30:0a:ec:
05:9d:8a:6e:ea:86:3b:74:1d:be:7c:79:8b:00:75:
e4:13:06:e8:85:79:58:9c:1d:fd:d3:a5:ec:b8:04:
58:f2:03:65:5d:9f:d1:09:f8:23:66:90:c0:15:ea:
3b:59:8a:b0:b5:5e:0b:7f:0e:31:88:2e:0a:8f:fd:
b8:df:38:a6:41:9e:63:3e:b4:0b:ca:39:23:54:6b:
96:73:6b:6d:7d:0a:ac:de:61:2b:79:e1:74:91:e6:
d3:10:10:c4:b6:db:0b:db:61:d1:42:f9:18:ff:04:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:83:72:F5:B8:44:DB:36:E4:C0:C3:DC:58:2F:0C:F0:45:55:9A
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bd:c5:57:b4:7f:24:af:49:36:39:60:24:e9:f0:44:52:92:
e0:5c:47:62:6f:48:96:f1:8b:ee:65:0b:01:ad:71:25:f0:9f:
39:ae:8e:56:9c:d7:15:2b:65:5f:f1:da:70:d9:5e:70:2a:76:
64:5c:f1:6e:cd:80:0d:7d:24:ec:c9:68:62:f0:54:a4:af:c8:
a3:48:f1:a1:0b:5d:19:40:1d:a1:d4:01:a9:6a:94:71:29:86:
e1:19:e0:e8:ec:dc:56:2a:8b:8f:43:0b:11:7e:fa:dd:24:ca:
1f:07:03:d5:0f:0f:8a:9d:9d:ff:9f:7b:d6:32:14:59:ae:68:
a4:06:c0:cd:70:3c:c7:b0:e6:61:8d:6e:98:57:99:78:3e:06:
89:ce:da:f7:07:94:34:39:ba:b0:7e:ae:81:82:72:4a:0d:0d:
20:db:32:74:27:3c:40:c7:1a:3c:dc:7f:6e:a3:63:e2:36:f2:
aa:ac:5e:3b:cf:4b:b0:74:bf:d8:8a:3c:2b:9d:25:8e:6f:11:
9c:6f:24:f8:fc:6d:bc:9c:c0:ca:4c:1d:1b:b3:10:22:e0:b5:
53:e8:28:6e:33:6a:29:72:b3:a3:d1:79:f0:c0:73:13:59:d0:
9a:d1:9a:3e:20:54:1c:af:9b:d0:b3:b4:e5:b2:6d:6f:01:86:
c5:78:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:28:09 2025 by rpki-client