Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: qEx+dUGgVTOaESmABhg/c0oa2Taj64/lHY9y1uYIq2E=
Subject key identifier: F5:AD:5B:06:82:8D:B7:33:47:7B:CD:A2:6F:2C:DB:AE:21:0B:76:42
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019623391334AB3EDD70423FCAF26FA8991A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 14E4
Signing time: Fri 11 Apr 2025 05:01:05 +0000
Manifest this update: Fri 11 Apr 2025 05:01:05 +0000
Manifest next update: Sat 12 Apr 2025 05:01:05 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: Ons3zW6Rl9kCBfxbMM9lHOZ4CEfveZ4403OlE5JMCto=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:39:13:34:ab:3e:dd:70:42:3f:ca:f2:6f:a8:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Apr 11 05:01:05 2025 GMT
Not After : Apr 12 05:01:05 2025 GMT
Subject: CN=f5ad5b06828db733477bcda26f2cdbae210b7642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:01:3f:6c:8a:3e:c8:5e:df:2c:0c:fd:59:
b9:96:b4:95:c0:8b:d1:c1:5c:b9:17:f6:11:18:a4:
c4:ce:d6:a2:1d:52:e5:85:54:e4:77:9e:db:bc:f1:
f0:22:ac:96:dd:2e:1a:08:21:d7:b2:9b:a4:c2:1b:
5d:2d:d5:88:86:4f:59:17:5c:6f:5e:9a:41:8d:b2:
c9:58:59:44:5e:ae:7c:e9:01:fb:df:cf:ca:38:2b:
c4:d8:c7:85:02:b7:66:5a:7b:e4:0d:d3:c8:3a:6a:
0a:a7:97:c1:22:9a:8e:ac:aa:61:34:7f:a8:f6:a0:
1c:be:22:3b:4e:72:cf:b7:4a:56:46:aa:19:5d:50:
b3:b0:39:b5:f6:46:ad:05:ef:56:cf:ba:af:22:ed:
58:db:8c:88:1c:4a:8b:98:8e:aa:8f:1e:bf:75:de:
cd:ca:27:0f:a3:ca:ed:da:7e:f6:23:ad:d4:58:65:
35:e9:44:e7:78:d4:57:da:cc:f1:0e:57:9d:d3:4b:
34:6e:31:12:43:82:3f:3a:b3:e3:6e:03:81:1c:da:
d2:b3:4d:b2:dc:6d:a2:8c:e3:07:ad:bc:6a:d2:03:
0d:ba:cd:bb:ef:5f:a5:45:a5:9b:4a:b3:d1:38:94:
56:fa:5c:18:93:cc:3a:fc:07:56:78:49:eb:6e:1c:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:5B:06:82:8D:B7:33:47:7B:CD:A2:6F:2C:DB:AE:21:0B:76:42
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fa:03:14:20:88:bd:a7:f9:5e:5b:07:ac:c2:bf:47:94:1f:
d7:31:5c:20:44:2a:8e:31:f3:d6:3f:db:71:19:db:db:de:1b:
62:73:8b:98:ff:58:7d:ad:24:d3:f0:01:5c:27:44:0a:ea:2e:
b7:0b:c2:bb:f6:66:54:32:ce:db:38:2d:f9:61:ee:56:ae:5d:
7a:9b:3a:45:14:67:78:d6:66:e5:02:ba:82:29:d7:9d:20:14:
59:09:01:3a:17:85:6d:da:11:e4:94:d1:d3:f9:9e:d2:31:bc:
16:fb:fd:5c:a4:4c:aa:89:b4:e0:e0:c2:20:9a:e7:b8:25:3b:
69:50:45:75:e0:ad:7a:3a:b1:1a:82:b4:68:f1:b6:85:8e:f8:
c8:7d:5f:f5:72:fb:19:a4:af:d7:7d:88:8a:30:3e:0b:3e:30:
73:20:3a:e6:2c:1b:9e:94:c8:82:12:ed:3f:b5:f0:18:fe:58:
87:57:a3:40:85:4c:82:11:05:e3:76:b6:23:2f:4f:18:7a:d6:
4d:dc:7a:44:1f:d6:ac:3f:0a:d6:1d:06:a2:61:37:5b:bb:43:
65:70:97:4f:4a:e0:21:9b:10:cc:f9:7b:1f:7c:16:15:5e:90:
ac:6e:b9:e3:56:9e:68:bd:29:c3:55:ff:34:18:84:1f:e0:92:
0d:99:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:42:23 2025 by rpki-client