Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: aLdaN8Mw/VZRx0JGNeRQsLUFEDMaU/0zZrwgOfPid18=
Subject key identifier: 55:28:DD:5B:DC:63:18:EA:93:5F:E9:8D:8C:CC:CD:CC:56:4D:CC:FA
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019654C987D14556B9ACC75B4D675C844C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 20:00:15 +0000
Manifest this update: Sun 20 Apr 2025 20:00:15 +0000
Manifest next update: Mon 21 Apr 2025 20:00:15 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: NfMkzNWxT7ZTIpJAApa/jDDXu+eIiBVDPIk0AFYrUe8=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
6: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
7: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
8: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:87:d1:45:56:b9:ac:c7:5b:4d:67:5c:84:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Apr 20 20:00:15 2025 GMT
Not After : Apr 21 20:00:15 2025 GMT
Subject: CN=5528dd5bdc6318ea935fe98d8ccccdcc564dccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:d9:31:a1:6f:0b:88:16:a0:73:be:8a:9a:
fb:83:4d:1c:aa:b0:98:14:73:26:4e:a2:34:cb:a5:
c3:5f:e1:64:f1:d4:7e:74:c9:3e:ad:38:8a:eb:b4:
41:d3:2c:cb:1a:97:6d:9f:9b:09:5d:a2:43:52:a6:
f2:86:5f:17:85:52:16:16:2d:8f:4b:88:3b:d5:54:
6a:15:73:68:31:a9:4b:d9:dd:66:22:4c:a5:14:9a:
30:5c:af:10:4e:e3:cb:0f:15:2b:b3:a8:71:13:8e:
2d:3f:76:68:6f:99:e7:a1:6f:b3:04:77:a0:14:e5:
dc:03:7e:b6:ac:6f:9e:8b:f9:d8:5a:79:9a:e0:ba:
d9:d8:f6:f2:9e:83:1a:59:60:4d:ba:c5:78:3d:c2:
74:b3:c3:c1:37:29:62:b1:98:18:47:55:0f:be:b7:
4c:71:c0:15:7f:3c:df:a2:d5:e0:0c:25:77:1e:8d:
29:e3:7b:e1:4b:29:f3:7b:78:c0:e6:80:c6:87:52:
da:35:23:01:26:44:5a:88:94:69:62:8b:38:ba:73:
fc:5a:29:d2:75:28:fe:37:84:96:99:2c:99:0b:e7:
8c:48:d7:7a:06:e0:7b:d2:13:41:05:88:ec:47:04:
bf:1a:dc:a4:4c:84:16:c6:10:83:83:05:3e:6f:9c:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:DD:5B:DC:63:18:EA:93:5F:E9:8D:8C:CC:CD:CC:56:4D:CC:FA
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:31:e3:d5:af:65:12:ea:f4:19:d2:d0:3e:45:e6:8a:95:
ca:09:95:a8:b2:29:4a:48:c4:69:69:2d:95:10:bd:28:d3:94:
2f:39:89:8c:0f:6a:07:61:0c:9a:c5:3e:59:d4:37:68:13:fd:
94:19:ce:91:57:83:0c:27:25:ff:78:99:17:8e:12:01:04:b6:
d2:eb:dc:7e:fa:6d:d9:79:6e:22:10:2b:5f:dd:c8:ba:47:70:
dc:d7:e7:7a:58:5b:27:51:d4:52:f9:6d:30:03:8e:77:85:28:
8f:d5:4f:76:d9:d2:3f:7b:92:9e:af:bb:3d:1f:58:cb:66:3d:
76:c4:ab:1e:bb:ba:1d:29:17:03:bd:85:90:f5:fa:8d:90:58:
47:76:42:25:53:b9:30:25:72:1d:d1:15:b4:bb:41:9f:a7:b2:
81:a9:f7:5d:f1:01:42:09:c5:98:8d:0e:6e:04:ba:ce:1d:8c:
fb:8e:cc:2d:19:6d:8f:ae:2f:7a:91:61:e8:e3:b7:90:4a:b5:
c5:62:3a:0d:a7:f1:a2:e4:8c:53:75:ce:12:4d:67:d3:03:50:
af:56:39:83:cf:fe:ab:09:dc:61:10:07:ba:6f:fc:71:0b:78:
95:98:5f:fe:fb:48:92:84:ab:9f:d7:15:c4:19:6f:23:67:1d:
9a:e0:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:16:25 2025 by rpki-client