Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: 6BkhtpqXKlHkvwE5BEoFAvdtHPCA8yHhooWvlV7ZiOE=
Subject key identifier: 77:DA:7B:86:DE:99:0D:C8:24:2D:B4:8F:8C:54:64:94:DC:62:11:D5
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 01961169872C4815493038AEE511A6F7B889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 04F6
Signing time: Mon 07 Apr 2025 18:00:50 +0000
Manifest this update: Mon 07 Apr 2025 18:00:50 +0000
Manifest next update: Tue 08 Apr 2025 18:00:50 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: cBOYWHqPwX8q/9bnOXpUJFtIWzY4OvNg6o9gNB0gnU0=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:69:87:2c:48:15:49:30:38:ae:e5:11:a6:f7:b8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Apr 7 18:00:50 2025 GMT
Not After : Apr 8 18:00:50 2025 GMT
Subject: CN=77da7b86de990dc8242db48f8c546494dc6211d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:f8:f3:06:d8:48:66:de:cb:e0:14:74:8c:
38:61:e5:15:e0:0f:7f:bf:2c:2a:7f:03:24:7d:03:
33:44:dd:e7:b0:61:99:28:b6:8c:3f:f4:06:88:22:
37:4c:f9:b6:07:2a:b8:0b:46:26:c6:8e:32:c8:2a:
63:bc:c0:2e:94:1a:3c:78:86:97:5f:a4:ae:23:40:
2e:45:2a:0a:9e:7f:31:df:64:ef:ca:b6:1b:a8:9e:
4f:ce:a9:b9:f1:1c:2f:93:8d:78:06:2f:3b:2e:fe:
f9:e4:05:64:06:40:08:ad:e5:66:72:da:8f:00:f0:
18:9f:05:97:40:a0:53:6a:e0:02:c0:23:64:57:f7:
af:de:c7:25:0e:c5:e5:7b:95:08:9a:a6:5e:e8:00:
33:1a:21:44:63:30:d7:04:4c:7e:e7:64:c3:d6:56:
9a:bc:58:e4:77:43:9b:2f:a6:70:1b:23:b1:67:19:
1c:dc:8a:69:e6:e2:b9:ab:0b:3a:99:b5:90:44:78:
8b:6e:fe:11:03:b5:d8:09:6c:80:97:2a:9d:49:95:
4f:31:a5:28:58:03:ba:74:75:dc:1a:ac:53:80:8f:
c6:65:b6:7c:8c:09:a7:1b:24:58:fe:2e:27:fb:0f:
c3:34:eb:00:84:ea:26:45:1a:1f:b9:34:82:79:0a:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:7B:86:DE:99:0D:C8:24:2D:B4:8F:8C:54:64:94:DC:62:11:D5
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e0:3f:f2:dc:93:10:a3:84:78:44:10:ee:7c:b0:91:59:7f:
d0:27:39:e7:83:9a:3d:0f:59:33:f8:4e:cf:77:eb:60:0d:d4:
3e:6c:ca:75:39:cd:f4:d5:e7:c3:6b:04:f9:ab:15:cf:24:84:
50:f5:b1:bc:96:64:23:8e:d8:2a:4c:11:62:c9:33:9e:0b:b8:
4d:cd:35:54:f1:9e:83:a9:1e:e8:7b:0e:85:ab:f9:60:4e:60:
e1:87:13:3d:a6:7f:dd:22:22:e9:84:2b:65:8d:f0:2c:31:ff:
4a:d0:c1:da:c7:d6:6d:10:ea:5d:05:b4:a2:d0:73:4f:c5:8c:
8b:24:d0:17:7f:4b:13:83:fe:8f:df:2d:2d:54:ed:8e:2f:45:
35:b0:4e:ec:e4:15:24:9a:7b:d9:1a:59:bd:0a:1d:9f:a1:29:
6e:a9:4f:bf:03:a2:91:d6:31:7a:be:f5:12:a2:e4:83:27:76:
f4:8a:68:60:47:ab:1c:21:31:e8:6c:08:26:1e:c5:fc:19:a0:
1b:f2:e2:dc:a5:c9:45:ef:fd:70:ea:a6:40:71:d2:de:3f:3d:
57:ad:87:e6:3d:19:14:1d:66:d7:90:be:32:ce:76:53:44:59:
c2:41:d3:65:f9:5c:98:ab:ac:c0:03:15:b1:bf:26:09:ab:c5:
41:40:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:00:01 2025 by rpki-client