Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json)
Hash identifier: FShXKKpguCIfm1lkD/HUabFHfVVqfNYjAu/NF3Ab7nY=
Subject key identifier: 69:31:06:7E:3B:E7:03:08:54:5B:B7:6E:EE:7A:F9:25:C3:6C:97:DA
Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Certificate serial: 01965FF24EF61C7ECABC2377BA5B25B43AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
Manifest number: 12A5
Signing time: Wed 23 Apr 2025 00:00:37 +0000
Manifest this update: Wed 23 Apr 2025 00:00:37 +0000
Manifest next update: Thu 24 Apr 2025 00:00:37 +0000
Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: COuRydgLsgP+StAAGjSZQHU5cZCoV5tWsHnvQpEuYco=)
2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:4e:f6:1c:7e:ca:bc:23:77:ba:5b:25:b4:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990
Validity
Not Before: Apr 23 00:00:37 2025 GMT
Not After : Apr 24 00:00:37 2025 GMT
Subject: CN=6931067e3be70308545bb76eee7af925c36c97da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:2d:37:59:76:dd:84:10:a6:ce:03:0c:49:
15:ef:c9:8f:07:af:40:52:3b:8f:cd:0a:66:0d:7f:
4a:c1:2b:ba:ff:91:5a:7f:92:b5:ee:eb:6c:41:94:
86:b4:09:f9:63:15:8e:6a:b7:8a:8d:cf:a7:05:d9:
fd:96:35:58:4b:ca:6c:d4:a8:3c:03:1c:2c:40:9c:
b1:f4:ce:00:75:37:ea:69:17:0e:40:48:90:c6:f3:
63:45:8f:08:54:06:61:6c:5a:0a:0d:c2:da:b9:e5:
da:8f:85:ff:cb:02:ad:7d:a6:a5:da:ed:87:a6:72:
46:f2:db:80:87:f9:f5:ea:4a:68:60:21:10:ef:df:
a0:5b:14:e4:38:a8:76:d8:c2:54:fc:c5:95:78:da:
cd:a8:86:f0:9d:25:53:e1:64:81:c7:9a:d9:04:a8:
52:69:4f:d5:2b:15:5f:28:48:9d:b9:13:73:5c:cf:
a3:ba:32:52:c4:69:be:94:04:cd:75:5d:97:ac:0a:
42:3d:8d:0b:5b:35:cb:49:91:be:06:c4:ad:23:13:
93:95:74:e1:bc:50:f0:34:89:c3:5d:e4:3e:a4:d4:
c9:6d:2d:bd:93:d5:ed:ac:6c:af:0d:10:82:7a:1d:
66:34:22:89:e4:2d:70:93:c7:1f:02:80:39:f2:35:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:06:7E:3B:E7:03:08:54:5B:B7:6E:EE:7A:F9:25:C3:6C:97:DA
X509v3 Authority Key Identifier:
keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9e:cd:80:50:e4:16:72:62:fa:63:ba:d8:41:c2:ac:de:df:
62:09:1a:03:53:c7:97:98:f2:0a:88:76:64:bc:3b:55:51:c0:
06:16:75:7d:b9:1f:c8:2c:92:12:9c:20:9e:01:cf:ca:5d:03:
f0:f8:a8:7b:b7:c5:fb:6c:91:d9:be:63:bb:38:e4:10:ae:2e:
e2:0d:af:12:da:ee:82:38:88:02:c1:10:4d:c1:eb:6d:6d:6f:
59:90:bf:05:20:06:58:06:ce:fe:89:e8:e9:a6:f0:05:a1:a3:
6b:7c:61:0c:6b:14:92:77:38:0a:fd:3b:03:e1:48:c2:ae:a3:
59:1e:69:48:26:ac:10:ac:06:6a:29:c9:65:7c:12:a0:c1:96:
b2:fd:1b:82:eb:a7:75:7d:f3:53:5b:fd:86:a3:ce:fb:29:83:
b0:56:74:9c:c4:1e:a1:b6:9d:72:d9:e0:7d:5a:1c:1a:d3:60:
f4:23:12:2d:b3:5b:43:20:14:71:30:96:48:50:c0:97:0b:40:
ba:3f:b8:56:76:0d:2e:e7:20:d9:10:cc:b4:ab:bb:cf:fb:2c:
2b:a5:1d:9f:bd:aa:c6:85:ab:2d:ee:39:11:23:fd:54:98:8a:
10:aa:66:39:c6:18:4d:72:dd:93:b1:fb:09:b6:ef:4b:9d:4f:
c5:3f:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:16 2025 by rpki-client