Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: Rkkm5EDwNQ78X6FyYaxzjdP0tEtWAvMNCxprGVRl4ls=
Subject key identifier: 89:56:65:96:FE:18:1C:56:68:C6:BF:40:03:98:E2:B6:6B:9F:C8:05
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01964A7D958913E5C72E46A250A16C5D04A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 20:01:06 +0000
Manifest this update: Fri 18 Apr 2025 20:01:06 +0000
Manifest next update: Sat 19 Apr 2025 20:01:06 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: Q4N0XS2nhGYFWcUDUGVKVxQ10mNEyPcB88F6iX8oaPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:95:89:13:e5:c7:2e:46:a2:50:a1:6c:5d:04:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Apr 18 20:01:06 2025 GMT
Not After : Apr 19 20:01:06 2025 GMT
Subject: CN=89566596fe181c5668c6bf400398e2b66b9fc805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:36:f2:03:78:96:1b:b6:04:54:85:a1:b4:
0e:93:60:39:1e:e5:1a:0c:4d:71:90:d7:f5:b5:2b:
54:ec:86:a6:23:7a:12:9f:71:93:5f:da:ef:5a:35:
1e:4b:ce:3a:b1:b7:78:c7:48:53:af:f5:da:d0:06:
57:9e:2c:89:2d:a6:a5:c1:f4:41:89:6d:ff:1e:ff:
27:9f:4d:39:11:98:ca:5b:1d:87:f6:f2:68:82:9f:
9e:68:65:d0:e7:c8:bf:da:45:59:7f:04:39:3e:f9:
39:58:f3:92:76:54:ea:91:f6:6f:d9:aa:06:f8:bd:
db:e5:60:20:11:eb:73:52:63:f1:5b:dc:d3:0b:77:
05:ed:e0:fe:a5:e0:b0:8e:e0:f2:f2:5f:18:2c:8e:
2c:da:b0:4c:35:3f:3d:d4:a7:f6:d9:47:5b:91:4e:
1d:7c:32:15:72:95:9b:db:1b:bf:b2:e3:d1:bc:3a:
84:8f:ce:66:18:4b:48:18:19:1e:be:1c:fb:71:57:
77:4d:29:f2:cd:f7:14:ff:17:76:37:ba:9e:7b:7c:
f3:2c:a1:7f:6a:db:05:82:11:b0:da:3f:ad:d2:c8:
b5:48:dd:07:ed:6e:17:ed:1a:bb:56:7d:03:9f:97:
ea:22:3b:7d:39:e0:a3:7b:3a:ab:eb:76:e4:ce:8a:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:65:96:FE:18:1C:56:68:C6:BF:40:03:98:E2:B6:6B:9F:C8:05
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b1:de:4f:5d:b9:08:95:60:42:6b:bc:81:db:c2:9f:d7:44:
b9:45:d6:1d:77:5f:21:4e:fe:59:4f:2c:2e:33:70:5c:ce:51:
dd:19:ae:76:bb:9c:27:77:86:ec:80:90:1d:f7:43:ba:e4:7c:
89:cc:13:5c:d5:f0:ed:d7:8c:37:4c:fa:11:0c:3c:64:cd:34:
f5:61:c5:75:42:70:00:b3:e2:78:84:de:e2:63:ca:1a:2c:6b:
8b:a8:ca:51:20:4f:26:34:6d:cc:63:ef:e7:6a:86:e6:6a:fe:
25:69:8e:e6:7e:3d:47:6f:02:30:8d:90:52:69:c6:75:ab:43:
b2:74:a9:87:73:35:fb:1a:c6:9f:90:2c:76:0c:53:23:7f:0f:
02:cb:6d:9b:ab:74:10:29:1b:79:e9:3a:fe:89:fa:96:92:e2:
d8:5a:e3:28:20:cc:be:17:0d:f7:49:a9:55:45:71:61:84:f8:
28:db:8c:33:6d:98:4c:48:16:60:00:85:b1:e7:bd:47:ea:93:
56:3a:30:c3:e7:ff:82:02:22:1b:07:06:ab:01:2e:8a:bc:72:
f8:28:62:65:83:94:d1:ab:05:87:b1:e2:93:75:b6:ad:ae:2a:
e9:8e:fe:e3:d2:64:f2:8c:b9:4a:06:a8:94:81:29:40:19:5a:
1c:34:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:41 2025 by rpki-client