Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File: iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier: qxuRH3Vy6JVXojkHcsW2OTIIFdmvY41N2w0g/oVROuw=
Subject key identifier: 72:20:14:B4:DB:F3:6F:71:99:D8:29:85:98:D8:36:C6:9E:E2:28:A5
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer: /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial: 01958B4DB960077EED7103537E3A41DB5C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 17:01:21 +0000
Manifest this update: Wed 12 Mar 2025 17:01:21 +0000
Manifest next update: Thu 13 Mar 2025 17:01:21 +0000
Files and hashes: 1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: 6VNcbAk1u12Phj6vM/cjm33cABwr8ClhHPb+XDF0wt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:b9:60:07:7e:ed:71:03:53:7e:3a:41:db:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Validity
Not Before: Mar 12 17:01:21 2025 GMT
Not After : Mar 13 17:01:21 2025 GMT
Subject: CN=722014b4dbf36f7199d8298598d836c69ee228a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:21:52:cd:7b:34:ad:2d:04:4a:5c:b6:5f:
1f:cd:20:2b:dd:9a:f0:1e:1f:f0:1d:7c:a0:5d:52:
55:3d:a0:4d:f8:a9:76:51:b3:2f:fd:a7:bf:54:93:
5c:e3:ef:9a:31:6c:77:a6:03:04:b4:ab:bb:b3:e1:
5d:7f:0f:7a:ca:86:0f:93:09:6d:93:7b:68:e6:e7:
82:90:e9:ac:6c:89:3e:6e:8a:93:c9:55:ba:e1:85:
41:35:9e:b4:8f:e5:c0:00:00:9f:56:a5:76:ac:24:
41:86:84:45:71:4d:90:60:25:3f:e4:c5:0c:9e:7d:
2c:0f:ff:90:33:de:b7:e7:27:9e:ba:ce:49:36:8e:
b8:bc:0b:a0:9b:7e:e0:57:c0:20:54:29:c5:84:20:
c4:4a:a1:69:80:d3:ea:d8:36:82:a2:4b:9c:18:2c:
41:da:e5:59:2e:3f:26:ad:98:b4:57:09:3b:60:aa:
ff:e5:66:7d:57:66:00:aa:5a:47:ad:c2:9f:c1:f0:
43:03:21:df:21:5e:d3:11:c1:9c:c7:12:1e:e8:20:
a3:36:bf:33:ca:a8:9c:54:3f:3a:70:eb:e5:18:1b:
d0:3e:a2:a8:0c:0c:d9:42:64:ed:78:72:9c:7d:ca:
69:de:4b:23:13:3b:28:97:e9:03:29:39:ef:46:7c:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:14:B4:DB:F3:6F:71:99:D8:29:85:98:D8:36:C6:9E:E2:28:A5
X509v3 Authority Key Identifier:
keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ec:c2:26:a1:c3:d6:6a:de:59:4a:f4:4e:5a:87:9c:7e:0e:
7f:c9:d1:d3:de:4b:e6:ee:e1:bd:94:07:cc:9f:20:55:39:09:
a8:cf:e3:a8:c2:bb:42:c1:e7:b4:eb:e1:92:73:e7:c2:9c:8c:
c0:92:08:42:ba:1c:5f:f3:58:76:6f:ae:21:b7:33:b7:d5:6f:
89:67:b5:0e:99:36:86:d8:d1:f5:92:4a:df:07:0f:9c:05:98:
4f:2f:c2:0f:4a:3c:1f:43:9f:f5:fa:53:3a:44:06:9c:1d:70:
eb:f1:b0:cd:5f:fd:6b:af:8a:d4:f1:cc:57:22:0a:ec:a6:4e:
5b:4d:4e:2b:39:32:f5:59:2e:ae:da:4d:eb:b0:10:43:32:01:
2e:90:e9:0e:50:6d:89:8f:41:3b:fa:cc:2c:b1:fe:97:d5:6f:
f0:8c:ca:c7:b0:39:67:57:72:fb:e2:17:c7:36:9e:92:39:aa:
7d:dc:49:dd:92:19:e9:8f:78:f7:01:80:c3:c0:f2:fc:ce:0e:
01:57:87:4a:92:83:c5:54:b7:3f:29:92:b0:48:8d:82:dd:e5:
70:ee:dd:87:42:cb:d7:68:a1:22:10:92:ab:bc:15:7b:f4:db:
00:3b:21:67:a5:da:61:06:65:d0:a9:a8:4e:fb:7f:3f:eb:a6:
cd:b1:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:46 2025 by rpki-client