Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: aU1LiQJOGdA4nnqfVpwQ70nPM8pxtBnf6JehwcBsumw=
Subject key identifier: 3C:D3:39:45:58:B8:5F:BA:95:EE:37:26:80:92:57:60:BC:BC:D7:FE
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019654254A8F1D5528FBCB5A20CF64C8C4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1245
Signing time: Sun 20 Apr 2025 17:00:52 +0000
Manifest this update: Sun 20 Apr 2025 17:00:52 +0000
Manifest next update: Mon 21 Apr 2025 17:00:52 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: raKZ6j9PLB1+odejkxkYUPWNhFKiBULkSdm1wLQloYc=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:4a:8f:1d:55:28:fb:cb:5a:20:cf:64:c8:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Apr 20 17:00:52 2025 GMT
Not After : Apr 21 17:00:52 2025 GMT
Subject: CN=3cd3394558b85fba95ee372680925760bcbcd7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:da:d2:77:e2:ea:48:06:95:8e:93:a4:46:
4f:5d:9c:33:90:f6:dd:ea:7d:88:dd:2c:e9:5c:fe:
dc:3a:9d:fe:af:fd:4b:33:5e:68:c5:f8:38:4d:5a:
f6:dc:ed:fe:0a:0e:cb:da:54:01:09:78:62:d6:ce:
c0:67:05:23:c5:d8:e3:56:b0:f7:57:18:d9:0f:c5:
c6:77:89:04:cf:95:04:09:4b:bc:d4:d2:54:f5:17:
a6:12:d1:f3:86:ba:28:de:ab:36:84:ad:19:61:09:
6d:3d:c8:87:94:d9:b9:c8:79:02:eb:b6:b7:c4:c7:
a0:d7:3b:40:93:32:4f:20:45:b2:52:99:c3:12:bc:
50:70:f2:7b:48:40:6e:97:28:9f:dd:96:f6:e0:a5:
f5:bd:e4:25:7b:e0:77:e6:7b:ad:72:30:0a:ab:82:
41:7f:49:7a:e4:d4:71:33:79:22:01:a7:44:34:2b:
d9:df:d3:f8:c0:c7:a9:b6:c6:78:9a:46:28:66:a0:
20:a9:6d:b5:45:af:f2:e1:07:b4:5f:a0:d8:7a:7b:
1d:5f:95:0d:08:62:43:00:31:15:bb:39:4a:60:54:
00:06:19:06:f6:38:59:0c:9e:81:de:bf:e8:75:2e:
2f:73:6e:05:7d:2b:19:89:4d:b6:36:a8:f3:a8:c0:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D3:39:45:58:B8:5F:BA:95:EE:37:26:80:92:57:60:BC:BC:D7:FE
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c9:35:cf:47:dc:0d:51:b4:28:9a:72:76:20:b0:59:e7:49:
1e:39:5c:a6:26:62:b8:f8:13:1a:9a:69:19:69:58:30:8c:e5:
c6:9b:3d:48:77:85:de:36:23:b9:f4:97:ff:d9:7e:64:2c:7b:
e3:37:a0:c4:3b:cf:8c:0c:8f:b8:6c:b1:d8:cc:7e:ab:48:9a:
8c:f8:55:4e:75:82:ab:a4:db:d0:ba:ff:b5:61:fc:0d:aa:be:
dc:1e:6a:93:14:cb:24:d6:ad:f1:eb:4f:9d:bd:b4:58:d4:c8:
f3:24:d5:1c:0f:fe:e0:c2:58:cd:b7:7f:ec:b9:14:c2:5c:ae:
9c:81:81:bc:f5:7c:65:b8:40:a1:08:2f:b5:63:3e:e3:92:4f:
cc:4f:40:0b:a1:c2:ad:7b:bf:c9:7f:2d:49:65:83:00:ea:7d:
ec:83:ff:36:20:44:53:39:95:07:76:c7:5a:50:f6:76:45:2b:
c1:49:cd:dc:d7:fd:db:1f:bb:8b:ca:19:a5:10:6e:b2:c6:fd:
6b:c5:d9:38:16:e9:f5:e9:6a:25:ef:52:4a:af:47:54:36:7f:
62:84:ab:f9:f5:cf:dd:a6:06:9e:22:d5:d2:f7:d1:4d:17:00:
3a:30:0e:3d:5f:57:dc:74:26:2e:65:95:e3:6c:c4:60:11:9e:
88:7a:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:08 2025 by rpki-client