Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: uzG3aI55wuXqM8VVTtYCERMoxL14CCODn2XNvXRbmd4=
Subject key identifier: 03:A1:56:C8:D6:03:38:15:35:C8:F9:DE:C7:6E:98:C2:FC:5C:6E:00
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01963FF9F835C478C52E25657BE94808312F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 19:01:08 +0000
Manifest this update: Wed 16 Apr 2025 19:01:08 +0000
Manifest next update: Thu 17 Apr 2025 19:01:08 +0000
Files and hashes: 1: gl5jVkYAoBFN7cdrLnkDFxT9xzs.roa (hash: DKhlihYjJGtiikGfA1O1zHxswQCNAc4gtqIYH1Qddqc=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: KUtpSV4rmfYEwCm8ixLC4Y6VFX50PojXWIOafZVIc68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:f8:35:c4:78:c5:2e:25:65:7b:e9:48:08:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Apr 16 19:01:08 2025 GMT
Not After : Apr 17 19:01:08 2025 GMT
Subject: CN=03a156c8d603381535c8f9dec76e98c2fc5c6e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:d0:cf:dd:39:a3:af:5d:e4:9b:5e:ea:c6:
37:68:6b:6d:85:ff:b8:2a:57:cb:3d:62:78:57:21:
84:52:29:fe:ef:ba:e1:17:85:bc:47:87:54:6d:f7:
b5:76:e6:25:3f:93:a6:d3:22:6a:2f:4e:5b:de:f1:
56:e9:5d:5d:1d:bb:27:f0:74:44:48:1f:97:b2:e7:
73:c8:c0:e0:7a:ca:34:e3:0a:7a:dd:2c:47:6f:1c:
eb:30:2f:ea:0b:ef:0d:97:82:25:5a:4b:18:5c:5b:
c2:e8:de:48:e2:18:6e:1e:63:68:54:49:a4:3b:8b:
db:6d:fd:7d:1b:0e:2c:23:d3:2d:10:5a:0b:b8:b5:
67:58:95:ec:e5:31:fd:8f:65:cd:b5:26:a2:56:4d:
ea:ae:14:a8:30:ad:fa:58:a2:26:fa:bf:bd:37:80:
e7:42:54:2d:3d:40:cf:56:62:83:65:87:42:75:9e:
72:5e:9a:77:a7:d0:b3:22:21:7e:f0:49:9b:99:7f:
72:b1:ea:b7:de:65:e1:e8:91:7c:27:8a:87:59:9b:
5b:c4:c2:ad:c2:a7:a2:73:90:2c:ea:0d:58:82:4a:
39:7f:27:e6:f8:b2:7c:d7:aa:b9:fb:b1:40:e0:f9:
90:c3:a6:fc:25:5a:68:44:d2:5d:a1:c0:1d:c7:86:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:56:C8:D6:03:38:15:35:C8:F9:DE:C7:6E:98:C2:FC:5C:6E:00
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cd:db:4f:a0:b4:02:a6:d4:16:36:c4:c5:bf:94:ab:3a:0c:
dc:cb:7d:ee:47:b0:48:55:70:34:6a:8c:f3:8c:bc:80:d7:20:
63:28:94:b4:34:35:c1:ff:17:70:b1:30:81:a8:53:76:7a:5f:
d3:41:8d:de:10:8b:c3:d3:3b:73:44:21:63:5b:19:f2:c0:4f:
39:83:5d:7a:72:84:f3:c3:d6:03:1b:e7:0c:0e:d6:4f:c3:9e:
e6:5b:1b:3a:8e:01:91:ed:37:65:f9:97:2d:d3:fc:a1:53:b5:
6c:7f:14:fb:64:68:e5:26:75:17:46:da:ec:29:bf:bc:32:b7:
b1:8d:92:1b:94:9b:7c:12:ea:ca:a5:71:bf:ae:76:13:89:15:
c4:13:2c:3e:96:a5:fa:ef:af:09:82:e8:a6:9a:d2:82:e3:77:
5c:ac:bc:18:e9:33:85:5d:82:5d:e7:80:2c:61:61:63:11:94:
21:37:30:2a:46:ca:a7:2e:61:83:5e:46:49:b7:e8:2a:38:2c:
b6:68:0f:11:80:f7:3d:ab:73:a1:a0:11:46:d0:ad:86:d4:8a:
07:6d:1e:33:99:e9:a9:fd:cd:eb:7b:fa:46:1e:cc:b7:6e:ca:
c3:3f:3a:60:c0:72:84:2b:e7:e2:5e:15:80:a0:f3:6f:60:bb:
dd:ef:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:23 2025 by rpki-client