Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: Vh11BZqom9ho585xfCEN2LHrqaPdcXw2sGkk2BVpI18=
Subject key identifier: 5E:6B:1C:85:D9:E0:17:1C:EA:CA:E2:DA:0C:66:0F:7D:D2:C3:13:E8
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 01965613AA0E46840ECAE45B2FBC52445D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 02:00:51 +0000
Manifest this update: Mon 21 Apr 2025 02:00:51 +0000
Manifest next update: Tue 22 Apr 2025 02:00:51 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: zAJVOeOUA8ABpbAPAHj8dD9sdqO3Vr4ZYfaOfwC5leI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:aa:0e:46:84:0e:ca:e4:5b:2f:bc:52:44:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Apr 21 02:00:51 2025 GMT
Not After : Apr 22 02:00:51 2025 GMT
Subject: CN=5e6b1c85d9e0171ceacae2da0c660f7dd2c313e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:e3:a5:5b:93:d4:84:e8:47:c0:50:fa:c9:
af:3a:8e:04:59:aa:84:a8:39:df:25:49:bb:51:16:
35:12:18:9f:19:0a:ae:92:78:67:85:08:8e:46:30:
1b:3b:18:f1:ed:d6:96:07:0e:0c:6d:bf:ed:c2:b4:
96:30:4d:40:42:3c:af:d3:1c:33:f9:a3:7e:59:c0:
e9:f2:d8:2e:e8:74:cd:cb:6b:4b:c2:f2:13:ef:13:
d6:4d:a7:99:e8:3e:e6:cb:a1:58:9b:9a:53:be:00:
86:f5:e0:b2:7c:1c:17:1c:b7:26:cf:68:87:a7:b9:
82:24:cf:f1:4c:fa:13:e5:ce:7d:18:42:bf:60:59:
20:00:1d:48:3b:11:29:ac:0b:5d:b4:0f:12:af:ac:
df:c6:96:09:ae:57:59:ed:29:36:6e:98:90:10:d1:
57:d8:30:4b:95:cc:17:35:16:26:fb:9d:8b:42:36:
9e:fc:a1:09:8f:e4:59:c7:5b:1b:95:b4:dc:db:b8:
05:10:9f:5f:e1:80:dc:3d:44:a2:5a:87:d3:04:0c:
e6:46:fd:3a:fc:27:07:4c:6a:38:e0:f0:bc:3f:11:
ac:29:d6:3b:4c:1b:fa:ed:89:f5:eb:d1:27:2e:91:
5e:c7:74:97:5d:b2:d8:a1:47:b9:aa:a5:27:d6:ac:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:1C:85:D9:E0:17:1C:EA:CA:E2:DA:0C:66:0F:7D:D2:C3:13:E8
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:46:75:ca:5e:3e:50:1e:3c:c7:63:c2:7f:fa:41:f4:80:
ec:f0:10:38:1d:d5:c3:cb:27:fe:cc:36:43:97:37:9d:06:94:
06:fc:57:0e:76:81:0e:4a:c0:f0:1f:ca:ef:ae:e1:a0:bb:53:
e1:98:d3:46:d3:9f:87:b1:87:fe:1f:68:17:00:03:a0:5c:e7:
ac:f2:44:76:bf:15:c2:33:97:f5:2d:0e:c2:f2:0b:fe:7a:61:
9a:14:a1:a8:76:b2:3f:7a:10:a6:23:2c:28:d3:55:58:24:a9:
36:fb:b8:6a:bb:b2:dd:99:09:2b:66:8b:b9:fc:d0:5a:05:0d:
f0:62:bd:11:66:ee:75:de:74:cf:9c:59:a7:b3:c3:0c:b7:08:
8f:38:40:58:f9:cb:3a:d4:34:45:b2:60:82:5f:94:b1:43:5f:
0b:27:fb:22:d7:99:4b:b7:72:ca:1f:be:b6:ad:73:6b:09:9f:
62:73:08:f5:b6:e8:03:c1:63:c3:ae:25:c2:6a:52:e3:32:a8:
0d:ea:f1:a6:7a:93:50:47:58:1e:c4:6f:ff:e6:b7:a4:c7:57:
57:a5:72:ee:29:86:ea:9e:e1:97:13:79:a4:13:14:d0:9a:d5:
53:7f:65:56:41:8c:96:e4:cf:03:3d:95:00:c2:26:52:e3:6b:
f0:6c:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:45 2025 by rpki-client