Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File: IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier: NfsUcP5a2cqUkHO3gJZqo7ySNcAaC8NWHh6qmh0/y7Q=
Subject key identifier: 6F:B4:9D:60:42:FE:D3:E4:DA:8B:FB:C1:00:2B:C2:D9:83:9E:6A:37
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer: /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial: 01964C34BB2AC2ACD1CA208A37665F6E8589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number: 0BA0
Signing time: Sat 19 Apr 2025 04:00:46 +0000
Manifest this update: Sat 19 Apr 2025 04:00:46 +0000
Manifest next update: Sun 20 Apr 2025 04:00:46 +0000
Files and hashes: 1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: kJ3A2O0QZGIdNoYAk7xHl94cwNjWf5N9qV4luVDQC18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:bb:2a:c2:ac:d1:ca:20:8a:37:66:5f:6e:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Validity
Not Before: Apr 19 04:00:46 2025 GMT
Not After : Apr 20 04:00:46 2025 GMT
Subject: CN=6fb49d6042fed3e4da8bfbc1002bc2d9839e6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:31:d8:cd:97:92:b3:36:7b:35:91:e9:a0:
ec:e5:a0:ef:55:a7:62:ad:9c:ae:ba:4d:fe:d7:a6:
45:ce:05:4e:f4:d5:32:72:e5:81:34:c4:db:46:16:
54:5b:d1:fc:cf:e4:a4:e0:1d:90:c6:5f:02:b5:39:
b2:80:cf:34:f9:62:c6:06:e3:de:64:1a:89:24:13:
14:3e:2b:7f:1a:83:4c:e3:56:a9:04:e5:16:77:f5:
8b:de:db:fb:88:ec:cd:a2:8a:55:18:e3:f2:b1:85:
9a:b5:df:1c:cf:84:7e:73:cb:53:b4:c2:3a:df:a2:
f5:45:91:bf:c4:2e:97:18:03:26:be:56:f8:84:14:
0e:52:99:6f:8b:2e:a1:2e:7a:df:e6:4d:08:40:bb:
25:4c:dc:b4:d4:d7:7e:99:31:6b:19:47:89:5a:ee:
0e:be:7d:90:ad:fe:b9:94:0a:6a:78:0a:3a:50:21:
ca:0f:db:aa:14:31:94:41:a8:34:fa:6e:8b:b9:e1:
77:61:d0:e7:a1:45:db:15:9f:5b:93:ce:ea:11:e0:
07:e7:f7:3f:f4:d4:32:9f:be:3a:6d:59:43:92:c1:
24:87:93:e1:20:66:9f:cf:ef:d4:1d:5a:58:00:20:
4c:80:6c:72:6d:7e:6a:87:99:44:20:69:83:56:d5:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:9D:60:42:FE:D3:E4:DA:8B:FB:C1:00:2B:C2:D9:83:9E:6A:37
X509v3 Authority Key Identifier:
keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:aa:3b:4c:45:3d:5e:99:cc:c6:7b:5b:25:6a:86:a4:ec:
13:e2:6a:82:78:c7:46:13:79:36:c4:48:02:16:21:5d:12:e6:
51:c1:95:cb:da:ff:23:e0:47:c7:d7:eb:92:a2:31:f7:cf:6d:
6c:08:c9:66:67:8c:57:2e:b5:57:0f:af:7c:ec:c4:b8:c7:b1:
1c:15:e2:7e:05:08:b6:d5:3d:7e:2a:81:db:cc:c0:4c:58:3a:
a0:e9:da:7c:ca:90:85:43:73:cb:1a:04:50:4f:44:c1:b5:bc:
0d:82:e9:38:c1:5e:1a:b4:01:67:24:bf:b9:4e:aa:f1:2f:4c:
32:83:40:54:f8:2f:5d:cb:cf:03:97:43:d2:36:a7:29:c8:f6:
34:8a:57:3f:0f:4f:43:ca:d2:05:e2:76:29:52:02:e8:3d:b3:
29:25:df:3b:e4:83:9c:71:a6:f6:49:e2:52:03:a2:62:59:5a:
a4:a5:f2:41:46:f7:6d:b4:61:5e:3e:f1:24:0e:56:8a:f7:b6:
22:2a:f5:65:05:73:0b:cc:bc:4a:69:47:20:19:f4:c3:32:a8:
6b:b8:c8:fa:9b:fa:fd:d2:35:20:80:81:0c:82:e3:7e:01:56:
46:ad:f3:9a:0e:91:bb:c6:62:21:2f:22:0f:af:cd:b8:9f:be:
bd:e5:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:33 2025 by rpki-client