Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: W1rVO5NFYGbchGtgXGFK/xEC7vGr5748sdab4I4cy4M=
Subject key identifier: 55:0E:19:73:B4:BC:83:0C:3A:40:14:2B:0B:0B:58:79:31:A0:3A:C4
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01958B16ED17750C47773D0C17E371FBED14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 112A
Signing time: Wed 12 Mar 2025 16:01:30 +0000
Manifest this update: Wed 12 Mar 2025 16:01:30 +0000
Manifest next update: Thu 13 Mar 2025 16:01:30 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: XysT654bVuF/bcswkRrlRRet8fExwF5IoMyWZAmNYnM=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ed:17:75:0c:47:77:3d:0c:17:e3:71:fb:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Mar 12 16:01:30 2025 GMT
Not After : Mar 13 16:01:30 2025 GMT
Subject: CN=550e1973b4bc830c3a40142b0b0b587931a03ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:48:5e:00:79:61:82:e8:d4:96:ed:07:f3:05:
8c:e3:9a:12:c8:8d:ab:a6:34:bd:75:ec:78:29:2a:
66:85:8d:18:54:9c:f3:22:c4:e9:bd:e0:15:8b:9d:
06:9b:d7:99:f5:1a:3c:e3:61:3f:d0:9c:f3:92:f0:
f4:00:fd:f8:bd:8a:eb:32:ee:7d:5c:6c:4e:76:c3:
54:b8:7f:9c:92:e5:85:bf:23:d8:41:58:34:77:30:
fc:70:71:16:e4:77:58:08:c8:0f:cb:b3:73:2e:32:
26:0d:e3:7a:bb:14:55:d0:83:86:3b:23:10:44:9f:
56:0d:af:82:d3:ec:2f:9f:71:5d:1d:e2:e1:0e:61:
40:0f:67:71:38:58:2e:4c:07:0b:5b:84:b2:a9:e5:
ea:16:c2:62:88:39:bc:80:a8:a1:58:a6:08:25:14:
5c:15:11:6d:f8:3d:af:11:ec:88:14:87:eb:92:71:
56:e1:04:f9:62:1a:74:19:89:c9:d6:27:d7:20:f6:
91:3a:d8:b7:1b:95:f6:33:d8:b1:21:f5:bb:a5:30:
70:b0:c1:0b:e7:b0:d4:db:2b:4f:3c:a7:99:66:e7:
e3:bc:62:c5:34:81:13:c8:c3:62:09:3b:e2:a7:ff:
8f:70:fa:04:b4:ec:60:c7:8c:02:a1:61:ce:e7:bf:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0E:19:73:B4:BC:83:0C:3A:40:14:2B:0B:0B:58:79:31:A0:3A:C4
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:90:e8:33:29:a3:cf:07:9e:7b:50:f7:93:d9:62:5c:09:
9c:9f:5c:2c:1a:96:ce:91:25:6e:34:d2:04:30:a9:11:77:48:
82:e9:a3:53:c9:97:0c:1a:b4:22:60:39:27:e7:77:56:d6:28:
bd:3a:77:c7:ec:e0:8a:7a:ca:f1:31:74:64:65:32:38:98:b4:
9c:b9:2a:b1:fa:ce:d0:db:e0:10:dd:b2:dc:a4:18:98:ed:47:
b7:ec:cc:d7:17:d1:40:db:98:49:85:bc:cf:f5:74:5a:53:ea:
b5:36:f5:e2:58:22:7f:0c:d2:08:47:20:dc:ef:4d:78:71:61:
41:fe:8c:d1:7f:27:1e:c2:78:4a:0f:10:0f:d3:ce:ae:77:d6:
fc:a8:f1:b7:c3:3a:f2:ec:05:f8:f1:0b:21:c6:27:4d:f4:f9:
7a:19:e9:0c:30:3e:32:ec:82:51:1c:c6:4e:70:3b:61:a8:ee:
13:6e:aa:e5:34:83:31:01:fd:ed:6a:38:b9:c7:d3:b1:d0:64:
c8:13:07:1e:76:50:ff:d7:d7:5e:58:c9:2c:22:f9:18:e9:ea:
c9:d6:21:07:0a:b4:48:67:93:f8:57:c5:b6:34:9b:59:c3:11:
a3:7c:15:ce:a9:03:48:0f:bb:61:43:ea:f7:ad:7d:d9:05:65:
dc:8f:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:58 2025 by rpki-client