Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: V+Lnv21qSEfaziw6qRC5g5jIz5xy+aS+UNMtA4vo8es=
Subject key identifier: DD:CF:77:D1:B5:1E:EB:87:9D:67:8D:07:BF:74:D2:B7:07:D6:5C:65
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01962D4EDDCD49D293D126C025730F921A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 117E
Signing time: Sun 13 Apr 2025 04:01:05 +0000
Manifest this update: Sun 13 Apr 2025 04:01:05 +0000
Manifest next update: Mon 14 Apr 2025 04:01:05 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: EU6hbLO8/wX/WvYpeFoz70ut/RYWLG7yU9Q2s/ZM6K8=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:4e:dd:cd:49:d2:93:d1:26:c0:25:73:0f:92:1a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Apr 13 04:01:05 2025 GMT
Not After : Apr 14 04:01:05 2025 GMT
Subject: CN=ddcf77d1b51eeb879d678d07bf74d2b707d65c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:cd:db:ef:14:c7:1c:27:29:6a:79:9e:1f:
1e:bf:17:3f:1c:d4:00:ee:c7:d6:8b:45:d9:22:be:
24:93:fa:d4:00:40:cb:b9:68:86:cd:d4:cb:ea:f7:
31:fe:a6:94:ce:ac:ef:16:6c:56:87:43:b8:a6:8a:
53:7e:de:53:d4:d5:d1:08:23:a6:fa:96:ac:07:59:
5b:1c:de:07:15:19:3b:d5:a9:ce:29:3f:4f:d9:d0:
9e:f3:8d:ca:4f:13:8a:2d:61:fc:75:13:8c:95:a1:
7e:9a:4d:03:3e:cb:4a:1f:9f:7d:e4:64:21:a9:f4:
32:00:e5:9f:62:4c:23:32:43:7d:4d:0e:17:f9:1a:
11:60:60:da:68:71:8b:ad:5b:05:9a:41:75:ad:92:
51:de:15:60:ee:a1:95:a2:c1:e9:f6:5e:ad:87:62:
ff:0f:c6:e1:72:8b:1a:c8:08:9e:b1:c6:fc:c2:22:
b4:ed:aa:99:a5:a4:91:7f:eb:96:1b:3c:b8:2a:ef:
90:81:91:63:87:69:e7:83:32:91:65:73:e1:5d:ec:
ba:57:62:86:78:2d:24:91:0a:94:d5:c9:1f:b7:6a:
60:31:2f:7d:89:ea:75:11:15:60:ae:94:ae:ed:bc:
70:34:29:9f:03:a0:80:87:eb:ed:7c:cc:83:04:a4:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:77:D1:B5:1E:EB:87:9D:67:8D:07:BF:74:D2:B7:07:D6:5C:65
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a3:44:a5:6d:27:8c:00:c5:20:ef:0f:2f:ac:92:f8:0d:50:
08:cc:c2:50:da:7a:ea:cd:94:25:ef:b5:36:69:4b:c8:16:d1:
c3:d8:15:b3:1e:39:0b:a3:ff:e2:2a:c4:fe:45:21:e7:55:68:
86:32:70:68:4f:49:b3:20:8b:66:0c:c6:17:30:bc:97:61:99:
16:d2:80:e7:9f:9d:e6:31:64:cb:c2:e2:ee:13:ac:74:1c:8d:
88:d8:76:62:b4:26:ae:60:66:ab:69:95:72:72:c4:36:e5:0f:
8b:b1:f8:29:71:30:00:a8:d1:e9:1c:ff:13:5d:31:bf:61:e2:
63:93:df:fe:df:2a:66:5b:e6:d1:e2:d0:36:9a:67:e0:c6:f5:
12:e3:a8:09:42:50:bc:86:0a:5d:bb:a0:7d:81:c2:4a:fc:8c:
48:ec:54:4e:0c:b1:49:5c:ea:e8:90:60:7a:f9:33:60:9f:c7:
79:06:15:b4:3c:84:18:e7:33:e0:e7:3c:cc:8a:6d:03:6f:99:
4d:8b:d9:5c:6b:dc:23:78:7b:c6:ac:35:f1:9d:f5:b5:bb:39:
bd:95:f8:00:ed:3d:15:b4:77:eb:98:1d:0d:ca:f2:26:fa:35:
1a:0b:11:82:af:82:a6:04:44:95:bb:10:24:0f:f4:79:88:fb:
8a:4f:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:55:49 2025 by rpki-client