Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: FF7WJW9dL3GLeJTNFcmc1vYKV8hl5moJlu/k1gcOWmc=
Subject key identifier: 76:C8:2D:DD:9C:74:C6:D3:0D:8B:D6:19:0C:17:DA:23:BA:FA:C9:02
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 01963EAFE314E5B0DB6D284C6BC19DE3C22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 13:00:36 +0000
Manifest this update: Wed 16 Apr 2025 13:00:36 +0000
Manifest next update: Thu 17 Apr 2025 13:00:36 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: JzIJQWaMg2DSi6asP5eKMZl7lIrytzEn5Cz9p9y5voA=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:e3:14:e5:b0:db:6d:28:4c:6b:c1:9d:e3:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Apr 16 13:00:36 2025 GMT
Not After : Apr 17 13:00:36 2025 GMT
Subject: CN=76c82ddd9c74c6d30d8bd6190c17da23bafac902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:48:fc:f2:6d:a8:0c:56:14:f5:09:72:41:
48:a6:41:68:db:f0:3c:4d:4f:1d:85:23:88:d6:7d:
8f:83:2b:ee:7d:a1:c4:95:b0:41:f2:02:b8:17:82:
cd:34:fe:79:74:95:7e:ee:62:9e:26:b7:67:c6:07:
87:74:d7:f4:0e:25:6c:29:62:ac:ef:43:2c:45:08:
d5:d1:0b:87:cc:71:a0:78:39:a5:8a:c3:3e:7a:f1:
2c:89:ed:1e:d0:3c:d0:11:a8:2f:2a:e4:74:60:4e:
3c:63:e1:f4:f4:d9:d5:99:74:65:23:ee:d6:3f:d1:
e2:ce:89:96:3b:13:fd:b8:8c:96:f4:5d:15:ae:85:
2b:39:02:9f:03:e3:7d:35:e6:17:4e:b6:3d:fd:03:
c2:e1:cf:11:c2:0e:38:b7:c7:e3:64:2d:e9:d8:db:
69:08:bd:e9:c3:ea:92:1b:ef:a6:9b:cb:9e:cc:73:
d7:71:6e:62:9a:96:c8:15:bd:51:89:cf:c9:68:1f:
90:69:f8:15:85:ef:4c:8d:55:2c:aa:c3:0d:1e:42:
39:ee:73:5e:ff:a0:91:7c:92:3e:a2:99:6d:d1:2c:
68:6c:f2:4e:2c:6e:30:de:c6:da:c9:12:4e:cb:02:
c9:7a:02:3b:4c:99:79:9a:1c:00:57:86:d5:62:14:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C8:2D:DD:9C:74:C6:D3:0D:8B:D6:19:0C:17:DA:23:BA:FA:C9:02
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:e7:3e:a6:32:3e:d8:fd:e6:d9:49:78:bf:f3:6c:70:2e:
db:67:5c:c1:6e:b6:b0:d9:e1:d8:23:9e:73:d9:31:b7:20:45:
b2:65:c0:2e:ee:db:5b:db:2b:c8:fa:e1:cc:55:93:17:91:66:
b3:cd:ca:6d:b9:8f:80:50:ef:f2:b9:9a:a5:85:84:a1:cf:0f:
93:61:a9:57:4b:6b:7d:17:a8:da:4e:4c:22:39:17:52:42:ac:
a9:a6:fe:e4:5c:b5:dc:2d:59:9a:03:65:ee:b6:7f:fa:9f:d5:
98:f0:98:d9:16:d6:bb:45:1f:00:f6:5c:97:27:c1:43:0c:dc:
95:45:45:9f:28:21:04:4b:52:16:a4:e8:bd:b1:14:78:f5:81:
74:ef:e5:00:aa:cd:51:5b:95:37:66:1c:c1:34:56:07:5e:36:
df:92:63:f3:2d:29:8a:b4:93:ac:6b:c3:53:be:58:c8:86:94:
67:d9:47:4f:c7:f4:db:f5:fe:f1:34:61:ad:ff:af:0c:7b:49:
6b:7b:89:77:10:0e:e8:9e:53:2e:ae:b4:6a:b7:c8:1d:10:88:
1d:5c:a3:5c:dc:89:21:4c:a1:82:1a:5f:34:01:cb:61:95:49:
cd:50:b8:1d:90:e1:d3:c9:d7:8d:36:69:58:db:49:70:5d:65:
2b:14:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:43 2025 by rpki-client