Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: +0/Aeco6s4QlUw3VE8XRWN0qeIsVRqPg+oKvu5a331I=
Subject key identifier: D3:83:BD:ED:F2:C7:63:04:97:5A:68:B3:B4:FF:C0:B3:79:28:E7:CA
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01964F6C2E4D244CA071C3399B1C99B2CC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0CE0
Signing time: Sat 19 Apr 2025 19:00:11 +0000
Manifest this update: Sat 19 Apr 2025 19:00:11 +0000
Manifest next update: Sun 20 Apr 2025 19:00:11 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IhQKj6UiQS-W5EmNKI0dkpCOs90.roa (hash: dOyH8r0Q3jqdPxzWjgiYUrfy8XskQY+sMtZqebKaaBc=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: zy12b8xAqm9q0T4RX/gV8kk4B29mlZwobuIbR8ChVco=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:2e:4d:24:4c:a0:71:c3:39:9b:1c:99:b2:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Apr 19 19:00:11 2025 GMT
Not After : Apr 20 19:00:11 2025 GMT
Subject: CN=d383bdedf2c76304975a68b3b4ffc0b37928e7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:13:16:00:25:86:0e:f0:7b:64:ba:47:48:
72:19:c3:d6:eb:c9:96:e8:e3:79:bf:a7:c0:68:ad:
d9:cc:b7:57:2a:c0:97:cf:e1:3b:99:50:8f:22:e6:
c3:f0:fd:53:84:d6:6c:32:ff:ee:63:a2:60:fd:bb:
a2:b1:d7:00:ed:3d:80:32:56:ca:c4:23:7c:ee:dd:
70:4b:bc:ad:48:c0:e5:e3:a3:14:57:72:41:21:c3:
d8:c5:8c:c2:20:e8:ce:a8:68:1a:2d:84:c9:94:8f:
14:37:5f:4e:0b:9b:ab:9b:d0:1f:e9:ba:0e:53:4e:
01:bf:c8:1c:8f:83:72:ea:10:92:04:37:86:5c:b1:
de:4a:28:5e:c1:36:bf:a8:0a:d8:87:26:3c:5e:2a:
67:47:e7:1d:9f:a3:a2:93:c2:af:d6:83:9d:b4:7f:
7c:6e:7f:54:37:75:ed:dc:88:74:e0:47:5d:15:9b:
3a:14:67:d2:d6:4b:3c:bc:8d:24:8d:12:55:60:2c:
ff:16:1b:1b:17:a6:9b:37:ae:8f:f8:ac:5d:9f:0b:
a0:e3:42:2d:a5:dd:a3:40:f2:5f:36:df:23:51:ec:
ab:28:a7:cb:c5:b3:d4:1f:4e:0a:18:11:c5:4a:36:
c9:9b:a2:fc:11:82:87:fb:c6:73:a0:ab:8e:36:22:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:BD:ED:F2:C7:63:04:97:5A:68:B3:B4:FF:C0:B3:79:28:E7:CA
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:2b:4d:3e:e9:4a:43:83:d5:31:8e:43:e0:19:5f:a8:f8:e6:
40:44:f4:d6:94:df:ad:e0:bc:d2:ae:4f:b1:d7:70:f2:0f:79:
2a:10:47:a6:3b:39:ff:dc:c7:c6:46:2c:05:32:5e:2b:10:c6:
5a:5e:cc:50:3f:c2:3a:ce:e8:96:c9:d5:83:4b:37:ea:7c:1c:
6c:82:85:91:c7:00:ab:30:ea:5a:4b:00:6b:35:b8:9a:f2:f8:
04:0b:be:d2:1f:bc:48:1d:d9:51:ad:73:66:9f:5e:b5:00:3a:
a3:a6:f4:09:dc:24:08:df:88:cb:2c:b1:23:b4:a1:ed:4a:aa:
10:c6:81:9b:05:a6:ba:99:e0:8c:e0:a3:2d:89:f0:92:b9:bc:
49:ba:99:b9:1e:4b:1a:eb:b4:e3:47:5b:1b:3c:3c:4a:a5:b0:
b4:a0:53:34:49:82:a1:d7:d6:15:e5:af:17:4b:15:55:6f:4b:
60:55:18:76:53:a0:a5:ee:03:b0:db:be:03:db:64:12:0a:bb:
c9:37:96:ac:33:70:ac:82:e2:30:80:2e:31:a5:03:8c:c5:6c:
13:4c:dd:72:9e:3e:ca:ce:0b:8f:f6:2b:0c:a6:42:e0:e9:98:
37:c0:32:fb:06:ea:0c:8d:06:d3:2b:69:6b:08:1a:9a:fe:4a:
0d:31:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:50 2025 by rpki-client