Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: EjqIs3PoxXFUTnpXXkRJg9JtsvgGrgJnuzFXcJucoBs=
Subject key identifier: 24:72:88:3B:48:57:8A:95:03:88:8C:5F:51:5B:95:17:B0:5F:4C:78
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 0196515B10F5107694F07FB0FBCF4E53B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 124A
Signing time: Sun 20 Apr 2025 04:00:44 +0000
Manifest this update: Sun 20 Apr 2025 04:00:44 +0000
Manifest next update: Mon 21 Apr 2025 04:00:44 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: iJdilF6yE3aCKRM23zhusfJiV5f7NnDhfaxqx2YaTbM=)
2: LWXmlZUU3ecfqvwZHXpe4N13PwE.roa (hash: 4NYVwWGAs7YF0X626zcPKU0/2BhITxR5hdojEVCb7vQ=)
3: Sb-J4R6jgDy1hu0trOifGY0aUIY.roa (hash: BnRnuIbBZBHwGOy/+XFTLzwpti+5vGhUFRVEfpqfups=)
4: XNLU8qoxsRXpQnmwz4ctSe-cqyE.roa (hash: JQ5L08jadmyYilDYeIqvPylZ8SNDZ1MGMwYpTLmwoLo=)
5: cEBx7aoqU0ILwpLn4WovM_f845U.roa (hash: J2opbMpTZpUpvX4wcx9CCjjTjdIRz3Wc8zKaGaF1BXs=)
6: caXYCCXqjYg5FcmsNZB3ePKReDk.roa (hash: XSzupsyXsQ8GmhQZJGGSHfiNeG8fCN+9mFDFmlJ4Bu4=)
7: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (hash: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:10:f5:10:76:94:f0:7f:b0:fb:cf:4e:53:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Apr 20 04:00:44 2025 GMT
Not After : Apr 21 04:00:44 2025 GMT
Subject: CN=2472883b48578a9503888c5f515b9517b05f4c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:d9:59:38:e8:ae:56:9c:a8:92:1c:f6:5e:
50:9f:f7:dc:67:61:1a:43:70:aa:05:d1:98:2a:a3:
7c:d6:d2:bc:23:e9:bf:c8:5f:0f:9c:3d:98:f7:62:
3e:68:4a:82:74:2b:90:56:90:32:0d:f9:16:d5:b2:
1a:10:7e:f5:3e:93:08:d5:3a:a4:31:fc:f5:74:05:
27:ac:e0:f2:2d:cf:22:e7:36:3b:ad:c6:70:f0:a5:
1f:d6:0d:53:39:13:ba:d3:17:3c:ef:8b:a3:d2:e7:
12:94:ea:2d:2d:2d:5f:b7:5a:4b:e3:5d:84:26:f6:
4e:b4:f7:a8:5b:e8:88:6c:45:d4:03:ce:7c:fc:ae:
b0:8b:cd:a4:d2:04:94:6b:3e:27:36:a3:ba:cf:d6:
45:af:8f:04:33:e8:ac:70:5f:48:6b:b4:43:92:26:
3b:e5:a3:fc:56:91:b6:82:cc:fc:2f:44:3e:d0:5e:
b4:d9:5c:ce:36:cb:13:80:1a:1b:bc:c5:b2:84:05:
3a:f2:12:8f:a6:8e:44:da:d7:f7:9c:94:8e:c4:1c:
27:e9:4b:25:9b:f6:d6:4d:62:dc:ff:d9:aa:0d:91:
62:2d:39:a7:49:69:ca:24:dd:59:97:85:28:f1:84:
0a:58:48:2f:a4:64:0f:aa:0c:d4:9d:84:de:76:4d:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:88:3B:48:57:8A:95:03:88:8C:5F:51:5B:95:17:B0:5F:4C:78
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:d8:3f:b9:75:43:7c:4b:e0:c5:7b:54:2c:7e:17:e3:cf:
30:8e:01:d2:60:e5:bb:2e:ba:b6:eb:6a:a5:15:ad:e9:c4:04:
7f:a2:a7:43:33:07:94:03:47:17:ee:00:16:e2:e3:c3:a4:35:
2b:75:89:86:7b:7d:b3:b2:33:e9:8a:7f:ff:72:e6:a9:c1:fc:
65:f5:66:b9:d4:40:aa:b8:95:67:1c:f5:08:d3:e2:e5:09:79:
35:28:89:6e:4a:d2:0b:21:68:2f:53:2e:36:16:18:60:79:1b:
7e:66:46:28:73:7c:bb:d6:80:5f:8a:29:85:8c:72:16:23:9e:
b3:97:9d:48:b1:0e:eb:01:43:19:52:d2:e7:45:25:3e:4b:2e:
94:6d:09:8b:d8:57:6e:d9:da:5f:a0:ad:a2:06:22:77:0a:56:
48:c7:91:6b:78:e8:4e:e1:3c:1c:4b:10:d0:d5:49:4e:ad:a8:
38:34:cd:f1:af:68:df:5e:e5:08:11:67:83:97:58:8b:79:b3:
41:26:41:ba:a9:fb:e9:85:c0:f3:fe:cb:2d:d2:2c:cd:d9:ef:
70:ac:0f:08:a5:1a:98:48:8a:ee:d3:db:e3:04:c5:64:d1:59:
71:67:fc:5e:75:59:d5:a8:25:68:50:b7:29:93:7a:3a:37:72:
29:ef:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:49 2025 by rpki-client