Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: q0izlRefH0xxCTrLDT+J+nbcoGRFYnUox4gN8XT2GFI=
Subject key identifier: 4C:A7:85:4B:4A:3A:11:22:B6:9F:3B:EA:64:E2:0E:81:39:60:54:7F
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 01964D7EAC83EA61C95A54CE43C6A7B42145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 0EC9
Signing time: Sat 19 Apr 2025 10:01:09 +0000
Manifest this update: Sat 19 Apr 2025 10:01:09 +0000
Manifest next update: Sun 20 Apr 2025 10:01:09 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: X3f6xj/I7gKmhqA5j/iOwmHV0SQLkbeyXveTwJvLhpE=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:ac:83:ea:61:c9:5a:54:ce:43:c6:a7:b4:21:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Apr 19 10:01:09 2025 GMT
Not After : Apr 20 10:01:09 2025 GMT
Subject: CN=4ca7854b4a3a1122b69f3bea64e20e813960547f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:9f:e5:19:de:55:1a:98:c2:55:b8:54:69:
5b:94:73:c8:45:33:75:cd:43:74:b9:1d:87:93:b3:
55:b3:70:e3:02:9e:c5:75:ec:cb:54:f0:74:e2:6f:
bd:7a:cf:34:ef:cc:8c:c3:64:cb:64:32:a2:6e:b6:
1d:e8:bf:df:72:6e:85:10:1a:a2:28:c7:cf:ea:16:
4d:6e:2c:99:11:2d:09:90:60:f2:e4:74:51:d8:b7:
dc:6b:de:bf:ea:19:ab:ce:92:ca:3d:b9:25:9a:88:
75:ff:38:7c:c7:07:79:08:6a:7f:5b:88:f5:83:f1:
ff:ca:59:e7:0e:27:4d:55:a2:8a:66:79:f1:76:c5:
ca:4f:b6:95:d0:71:42:40:f6:e7:8e:ad:a7:86:3f:
3f:1f:45:37:7f:d5:26:21:62:86:d9:df:f2:7e:d3:
62:02:a9:db:71:47:08:5e:e4:22:c0:9f:a8:c0:3b:
f9:e5:bd:34:1c:7b:98:9c:66:bf:30:2f:21:9d:8a:
38:2d:20:91:2f:24:b3:ee:46:a7:fe:18:7e:15:30:
a4:48:65:8c:85:25:6e:88:10:92:06:90:09:af:70:
44:b0:cb:82:a9:ce:6d:38:d7:b2:da:2a:18:f8:02:
a0:e9:50:89:46:89:fd:fe:d5:3d:62:2e:ca:fd:cd:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:85:4B:4A:3A:11:22:B6:9F:3B:EA:64:E2:0E:81:39:60:54:7F
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:96:8d:71:51:e0:4b:0f:5b:b2:5c:a7:62:1a:88:f9:b5:
51:c2:9c:14:a2:92:af:8c:46:ee:e8:21:97:eb:d6:8c:da:13:
89:c1:b4:6e:22:c2:b1:a9:cb:ef:3f:07:98:00:38:12:56:14:
55:f1:dc:b7:45:82:1e:37:bd:dc:5e:c0:f6:ad:d9:f4:11:a7:
db:48:b4:1e:19:0c:5e:26:8d:29:d4:d0:c8:83:d9:ff:77:7d:
70:c4:17:e6:63:d1:76:d8:64:38:05:ef:8b:1c:28:79:f9:e3:
c0:42:7b:8b:e3:b0:17:26:44:14:36:c5:ac:04:17:30:7a:eb:
a6:74:37:59:7c:b0:b4:06:e8:b2:b5:5b:b6:92:bc:9a:84:0c:
61:1f:84:e6:ad:ba:d3:e5:78:7d:67:7a:70:47:a2:eb:fd:4c:
19:75:ed:54:11:9d:57:fb:13:c0:82:6a:a0:59:b7:18:e7:a4:
fe:fd:de:6d:7c:78:b1:a7:45:49:db:8c:b2:05:59:f1:c8:21:
36:1b:59:5e:78:25:5b:f7:23:ca:93:ba:a9:52:45:26:f7:09:
40:40:90:16:e2:01:ed:ab:b3:73:35:63:c7:c9:10:37:84:16:
05:e0:67:13:bf:30:3a:12:19:cf:70:9e:7f:6c:39:a5:0e:60:
74:5e:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:58 2025 by rpki-client