Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: XMUjugEcInQ+bj7K+2VQkHu4zKbh8YItppnSOKi17wo=
Subject key identifier: 25:F8:D9:C4:F8:1C:A8:A3:6C:A1:8C:A0:B6:79:B8:E6:22:05:23:A2
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 01965DCD500F76B9E4C60403151D01AEB2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 04C0
Signing time: Tue 22 Apr 2025 14:00:58 +0000
Manifest this update: Tue 22 Apr 2025 14:00:58 +0000
Manifest next update: Wed 23 Apr 2025 14:00:58 +0000
Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: /kgbzzb73UDK2k+3yfVBzeaL01Y51hEoN2zwLf9sleI=)
2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:50:0f:76:b9:e4:c6:04:03:15:1d:01:ae:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Apr 22 14:00:58 2025 GMT
Not After : Apr 23 14:00:58 2025 GMT
Subject: CN=25f8d9c4f81ca8a36ca18ca0b679b8e6220523a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:88:e9:cf:64:64:e6:0b:0f:75:5c:84:69:
bf:99:27:89:97:d6:3a:8f:b8:f8:75:53:17:76:ea:
1d:53:3b:c2:67:94:b4:d8:5a:0e:47:d8:f4:52:13:
b2:b1:43:d0:b3:59:15:45:cf:19:81:f9:4b:76:07:
00:a6:76:e6:1b:f6:a2:76:50:ba:f7:6b:8d:ab:d8:
de:ff:6c:75:a8:a5:0d:0c:fc:0a:44:be:63:42:0f:
b8:18:99:6f:b7:6e:29:99:63:c4:c9:b3:18:a6:f7:
aa:e2:1c:8e:8e:50:da:18:15:aa:25:5a:03:39:73:
b7:fd:0f:68:01:5c:1b:f7:1e:6b:79:93:18:01:65:
23:a3:e9:5b:44:81:25:3f:fe:21:59:0f:a9:fb:11:
9e:09:15:f0:fa:fb:22:8c:c6:1f:81:87:fa:7e:25:
8f:db:d1:66:40:4a:3e:6a:97:71:f8:58:fe:84:6c:
88:41:24:57:cd:ad:15:e7:31:5f:3c:a8:27:b5:a0:
9a:73:b2:89:c3:ee:cc:05:a3:82:24:64:f0:1e:4e:
64:b4:73:e6:10:7a:5d:33:cb:02:10:44:cb:14:0a:
56:d1:e3:f9:20:97:2a:70:01:85:b4:24:16:13:3e:
a8:33:18:ba:c4:04:2f:3b:36:a9:49:1b:da:0a:d7:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:D9:C4:F8:1C:A8:A3:6C:A1:8C:A0:B6:79:B8:E6:22:05:23:A2
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:35:00:a3:d4:e7:e1:3b:d0:7f:7b:c2:cc:7b:69:2f:72:
f9:09:ac:6d:c7:2a:60:e3:37:cb:5f:45:c0:6c:d2:78:2f:f2:
6e:77:23:44:78:ca:48:93:ac:52:b3:52:d0:1c:8c:01:ab:3b:
d3:09:f3:5f:16:2f:30:c3:d4:46:d3:41:4c:e1:b9:87:b1:d3:
3a:c8:cf:0e:a5:a3:b0:81:0c:f5:b0:c0:9e:6b:ae:81:27:9a:
cf:65:bf:b2:4b:04:ef:6c:93:57:71:ad:15:e0:5f:fa:29:c0:
79:fc:8b:51:91:7c:1c:0d:d4:d6:6d:1f:71:a2:9e:9f:6e:47:
f5:ca:34:c7:a1:84:b2:f1:59:72:34:f6:8c:e2:36:c0:7c:a4:
78:ca:25:03:8a:83:b7:3d:13:60:e1:4b:5a:cc:b7:a7:5c:61:
77:9a:98:71:19:49:24:de:8a:a2:60:d6:c3:d5:3e:11:92:5c:
03:10:c9:51:45:c8:44:85:67:1f:f1:80:2c:85:84:96:d9:3c:
60:24:c1:a3:8e:81:43:fe:73:24:92:5e:47:d2:34:fe:72:4b:
a3:ca:e5:02:7f:19:c1:28:82:e9:79:ad:2d:11:eb:f8:73:95:
47:0a:ea:b3:5f:16:15:f5:d5:33:15:b7:38:9a:6f:4e:6a:f7:
47:68:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:20:54 2025 by rpki-client