Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: ZZ2tk3VGVKY11XgBMWS/nKQryol/+t9nMHb6FXadr5M=
Subject key identifier: 8D:7D:69:F0:A6:F6:75:67:AB:F1:A6:AA:C9:E6:B5:B1:30:32:25:93
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0196515B44683172C641526B18D256788EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 148D
Signing time: Sun 20 Apr 2025 04:00:57 +0000
Manifest this update: Sun 20 Apr 2025 04:00:57 +0000
Manifest next update: Mon 21 Apr 2025 04:00:57 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 2MS8rPzq0ZnA13SXgUD6Y4wmtPLcMRVx6jLiM9Zwsdc=)
2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:44:68:31:72:c6:41:52:6b:18:d2:56:78:8e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Apr 20 04:00:57 2025 GMT
Not After : Apr 21 04:00:57 2025 GMT
Subject: CN=8d7d69f0a6f67567abf1a6aac9e6b5b130322593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:ea:83:92:6d:5a:61:a6:04:a4:9d:79:7c:
b2:74:aa:34:04:fc:9e:4c:54:7c:62:fe:c8:ad:0d:
d0:6e:e6:16:c8:6c:fb:0b:2a:28:e2:f3:6f:fd:1c:
a3:2b:a9:4a:78:16:40:78:72:16:e0:ff:25:39:38:
53:48:07:fd:0c:9f:de:5a:f3:ff:90:54:6e:b2:5e:
8a:68:83:69:10:64:4e:c7:37:0e:fa:69:d3:1d:88:
47:b4:ad:60:41:09:9c:8d:bd:7c:5e:8f:e5:d4:6c:
6d:4d:41:5b:86:61:1e:ec:06:5b:24:ce:c6:26:57:
73:ff:be:e1:34:54:47:5c:17:e6:58:fe:69:a8:a4:
69:e9:11:94:4f:1a:64:b8:ef:97:f4:24:3b:ac:13:
5d:2c:d7:48:45:9a:59:3f:b6:37:4a:46:f0:c6:0e:
17:de:85:52:ca:b9:e5:59:86:9a:32:b1:c4:fc:74:
c9:00:a7:a0:fe:97:34:e3:7a:dc:16:b6:13:6e:e9:
9d:fc:65:9f:9b:82:4e:4f:d5:b6:66:c8:48:26:ae:
d6:58:dd:ac:96:a5:70:55:1b:e7:69:df:13:d7:73:
ef:e1:03:af:50:29:33:ec:db:a8:61:df:b6:c4:70:
87:ff:b5:a7:68:29:58:03:b9:f6:88:88:93:b8:73:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:69:F0:A6:F6:75:67:AB:F1:A6:AA:C9:E6:B5:B1:30:32:25:93
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:9f:d8:a2:25:99:5b:77:d1:93:4c:97:bd:60:9b:fe:19:
f3:b8:88:1c:5d:dd:5a:68:56:13:44:61:ca:de:68:b0:42:16:
25:56:12:41:54:56:06:e8:07:cc:05:32:dc:18:8d:b9:02:74:
77:d7:db:c0:96:79:16:68:83:f3:b5:6b:56:b8:c1:94:69:5a:
ff:8b:32:dc:66:6e:bc:fe:dd:08:9b:94:40:06:88:09:b9:8b:
26:1a:1c:86:44:ab:b8:8d:82:fe:de:b5:9d:44:d0:31:7f:99:
c8:1c:8a:67:76:00:d3:2f:05:70:b3:16:bd:2f:cb:21:9b:6c:
c6:ed:ef:82:6d:66:8d:02:a7:18:c3:a4:30:c3:6d:2a:91:cd:
f7:b8:17:66:7f:a2:9f:30:15:cd:db:bd:f7:ec:64:68:d1:bc:
a2:fa:2d:ea:f6:cf:1c:a3:13:af:e3:38:a3:30:9d:b5:36:59:
1a:aa:03:64:66:f9:9a:ee:dc:bd:06:7f:c3:10:3c:07:8c:f6:
b4:01:07:48:06:c3:c1:86:7c:ee:75:20:87:a2:d1:ef:64:37:
92:dc:af:a0:d8:09:da:28:30:64:b7:bd:92:00:fd:bb:d8:a2:
30:bc:95:69:6a:03:79:a1:21:39:2b:c5:7e:cc:6e:21:f2:be:
08:9b:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:10 2025 by rpki-client