Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: QZ3XsniTTj/9QJwm71QRCbwsayBne8NKhvt3NNeuo1A=
Subject key identifier: 24:B3:A7:07:D4:74:26:83:CD:D8:56:13:B8:80:A4:57:88:27:78:7C
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 01961923413EB6CB3644615D37B0D163AA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 14E5
Signing time: Wed 09 Apr 2025 06:01:02 +0000
Manifest this update: Wed 09 Apr 2025 06:01:02 +0000
Manifest next update: Thu 10 Apr 2025 06:01:02 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: mj/gIg/vyBkJcFHZASkO0uLgpm1Zpg+3JVoW8ArJbXY=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:23:41:3e:b6:cb:36:44:61:5d:37:b0:d1:63:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Apr 9 06:01:02 2025 GMT
Not After : Apr 10 06:01:02 2025 GMT
Subject: CN=24b3a707d4742683cdd85613b880a4578827787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:12:67:c3:93:84:10:e6:6c:ce:f2:83:74:
1f:09:ac:86:c9:c5:bd:33:00:52:4a:3e:dd:be:bc:
85:26:ff:d0:de:05:e3:a2:5e:98:31:94:92:af:e2:
d5:ea:f2:2f:ee:35:e2:6c:f1:d1:fb:8f:45:f0:98:
2b:96:3e:a3:46:ea:8a:97:c8:1a:15:ee:94:62:ec:
26:6a:ee:fc:88:b9:76:c6:8e:30:40:e2:b0:8f:13:
43:f2:ef:29:4e:53:1e:3f:2f:89:18:33:66:bb:99:
e1:ce:1a:3e:d2:05:d6:c9:df:28:69:9e:73:99:64:
5f:18:9e:dd:08:14:62:16:c4:4d:05:a5:e9:9c:64:
fb:27:97:8e:60:48:e9:3f:16:cd:71:76:a4:6f:a8:
47:df:35:f0:a3:af:cc:e7:ca:17:41:3f:0f:99:4d:
06:66:2d:08:25:05:59:75:d8:82:d1:76:f7:86:bf:
9b:2b:7c:35:22:9b:fd:58:bf:fe:4f:44:14:34:d9:
44:8d:d0:99:e0:c6:00:58:9d:51:5f:99:85:e5:9f:
8f:46:32:7b:33:ad:a1:f5:6e:7b:7e:83:1d:ad:99:
1d:6e:b3:87:5a:d0:57:96:8b:48:95:22:ad:51:1d:
f8:d1:52:78:15:7f:7f:3e:29:4e:d3:eb:5c:bd:cd:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:A7:07:D4:74:26:83:CD:D8:56:13:B8:80:A4:57:88:27:78:7C
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c1:aa:05:88:15:c1:87:1a:26:68:a9:8d:6f:4a:35:f6:b7:
93:8d:c9:d7:3c:57:70:60:4c:07:d1:6c:bb:d7:1d:68:26:78:
b3:ba:49:e4:a9:c1:b9:7b:23:37:67:c6:f5:09:77:74:69:6f:
0b:64:28:2a:3f:b3:cf:e7:d9:17:2d:0c:da:b3:26:17:7d:2a:
be:e2:e1:f7:a0:be:d4:58:12:8c:66:d5:7a:f3:3e:41:b7:a8:
d8:50:e1:d2:f5:e5:59:17:ed:9d:3d:ee:e6:dc:f1:4a:d0:69:
bb:59:0e:84:07:cf:58:38:e9:96:3c:33:6c:48:13:26:c2:60:
2e:80:1c:53:0e:a1:99:3d:84:d3:ef:3c:43:4b:60:b5:b5:cb:
e4:b3:c5:d4:35:50:b6:6d:8a:29:99:74:29:b5:08:53:73:b7:
80:31:11:7f:ac:99:ef:49:c4:24:14:b3:b4:7e:0e:09:8e:dc:
67:bf:c8:ed:9a:fc:ff:e6:39:5b:6a:f4:76:38:3a:a1:1b:fe:
18:8f:31:80:3c:dd:81:4a:ea:15:7b:e9:dc:76:10:98:3e:2a:
08:0e:02:54:f9:42:30:b7:86:40:af:3d:33:b8:59:25:b7:52:
93:74:9e:10:8b:8d:68:e9:87:b8:d5:90:69:54:fa:18:80:78:
3d:c5:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:43:23 2025 by rpki-client