Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: 3DSDfq48Hc4wUIhRQXsyuGId5nVHZXD470f2Np2iRTo=
Subject key identifier: 42:37:4D:D6:56:AD:58:B7:E4:01:6F:AB:5F:DE:A7:E8:56:AC:33:70
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 01963CF83C6402BFDAC50F8A38512171CFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 05:00:23 +0000
Manifest this update: Wed 16 Apr 2025 05:00:23 +0000
Manifest next update: Thu 17 Apr 2025 05:00:23 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: 88iSsMZ8sJ7xEY7nt2h8IE33N0SzmhWAOms5wBLavV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:3c:64:02:bf:da:c5:0f:8a:38:51:21:71:cf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Apr 16 05:00:23 2025 GMT
Not After : Apr 17 05:00:23 2025 GMT
Subject: CN=42374dd656ad58b7e4016fab5fdea7e856ac3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:b9:c3:13:df:07:5b:eb:0b:71:a5:37:2c:
67:bd:2e:e8:cf:70:66:6f:6f:62:c9:bb:56:4e:8c:
06:f3:a7:6e:93:36:58:77:f4:50:2b:5e:88:28:fa:
be:22:f6:3e:03:5c:cf:5c:82:b8:ef:96:50:97:ca:
fd:11:8c:7e:ed:90:50:e4:e5:77:6e:2f:d0:80:83:
d2:ed:6c:e6:11:8f:0d:7d:40:40:97:31:9a:4e:2c:
4d:3c:58:ec:bf:6a:5d:7a:f8:75:c5:95:cc:0e:3b:
3a:2e:b8:ad:91:b5:ab:b4:d9:76:38:3f:34:a0:87:
d3:db:a2:ce:6c:fc:24:e8:a6:19:a4:7a:b5:08:48:
f5:6e:eb:a8:d5:be:03:73:11:df:cf:f4:eb:78:1f:
c3:c0:04:3e:dc:61:e8:ac:71:f6:86:c1:f4:1b:1b:
e7:82:56:da:a6:6c:9c:ab:9a:6c:9a:86:6a:74:d6:
79:03:99:32:75:9f:d3:23:6b:91:f5:9e:93:e8:41:
77:01:7d:9c:03:85:b6:df:3f:ac:45:8c:9e:d2:45:
2e:0c:3b:c9:6b:e8:ed:39:c2:0f:74:73:70:08:95:
53:fe:11:81:57:48:be:5e:45:fe:c9:4b:58:44:45:
79:ab:5a:a9:1b:a8:1b:37:23:87:b5:04:b7:e5:9a:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:4D:D6:56:AD:58:B7:E4:01:6F:AB:5F:DE:A7:E8:56:AC:33:70
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:fa:01:ce:7c:e9:fb:60:30:b9:bf:5e:82:11:71:9c:eb:
3e:b2:d5:52:7b:e5:9b:b5:59:51:9d:cd:a5:2b:8a:1e:90:df:
9a:b4:c5:8a:c3:ab:61:1c:65:7d:3f:5a:6d:87:b6:49:c1:88:
7e:ed:75:2d:b4:15:77:77:ce:2e:5b:32:9e:21:c5:34:a7:ea:
cb:44:b3:4a:0a:18:e6:d4:04:a5:5c:44:48:a5:2b:c6:75:40:
8e:a3:e5:72:6d:78:f4:48:d6:04:b2:f6:80:d0:4f:d1:ab:76:
60:75:6c:89:cd:af:bb:b9:8a:a1:aa:51:0a:8e:e1:82:31:55:
76:12:35:5b:9f:79:27:d3:1c:9a:6d:74:f6:cc:c5:0e:3f:02:
1f:75:c8:fb:dc:cb:bd:36:60:11:51:73:4b:7a:bc:46:45:94:
d2:8d:c4:66:4f:dc:58:3d:00:52:9e:1d:d5:27:d7:75:de:21:
35:30:af:7b:8e:8b:96:34:81:ed:f1:35:3a:cc:af:28:5f:c2:
e6:01:60:41:42:f5:e9:16:c1:c1:93:b4:a3:9d:10:ca:fe:ff:
88:41:67:4e:d6:55:21:0f:8e:12:dc:ba:63:ea:ef:54:d3:3d:
b0:76:9f:57:fb:a8:eb:72:67:ef:4e:c3:6f:94:8b:69:f1:3f:
d3:11:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:32:15 2025 by rpki-client