Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: /a5tdJJLftnJxJ6II60NNvwLDumu6gXfZD1s2zGaSsU=
Subject key identifier: F2:E1:2F:C5:5F:08:9F:AE:6A:2D:2B:FB:7D:AC:04:B3:79:2D:5E:2C
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 01964EC82148AD773CC3D03873A52FE939B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 031C
Signing time: Sat 19 Apr 2025 16:01:00 +0000
Manifest this update: Sat 19 Apr 2025 16:01:00 +0000
Manifest next update: Sun 20 Apr 2025 16:01:00 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: qVgWvNewU44FGH6xohmnomRdGRf2CF10kceyy/LcXy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:21:48:ad:77:3c:c3:d0:38:73:a5:2f:e9:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Apr 19 16:01:00 2025 GMT
Not After : Apr 20 16:01:00 2025 GMT
Subject: CN=f2e12fc55f089fae6a2d2bfb7dac04b3792d5e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:69:8c:2a:0d:5d:5f:3a:a4:1e:83:90:82:
d1:2d:8a:29:92:dc:c9:e6:b7:87:09:6f:14:52:0b:
46:25:2d:26:1f:fb:b8:70:3c:e9:a9:4f:8e:70:46:
32:f1:75:0c:e8:bc:a5:00:56:70:a7:84:ee:09:4c:
b8:fa:80:fe:42:0d:1d:1c:ef:93:4e:4c:87:91:b1:
22:c5:67:61:f6:8b:90:47:b0:0e:e3:1f:c2:3f:11:
6d:76:92:6a:e0:37:e8:01:9b:e1:ac:35:0c:71:c5:
56:b1:36:9d:73:c0:23:98:81:5d:00:b3:0e:0c:9d:
94:5a:8e:20:e1:5e:27:9e:a2:9a:66:cc:79:97:b0:
70:f8:55:af:76:71:0f:a2:e9:f1:d2:eb:db:d9:69:
4d:97:53:47:de:77:3d:14:3b:2c:66:b2:c6:f1:dc:
1e:e1:d8:26:23:c1:ef:3f:01:e2:bb:33:a7:0f:58:
fa:d0:12:8c:4e:d2:45:55:a3:18:1e:a5:a4:34:d8:
3f:ce:af:e6:73:80:c3:2f:a2:02:8d:d6:9f:a2:54:
87:0e:2f:ba:6a:0f:ec:fe:57:d3:47:f2:9d:75:9f:
a1:fb:26:1f:66:0f:ef:61:f1:77:e4:d9:48:2b:fd:
8d:81:ed:ad:ca:6d:23:5a:0e:3e:1d:33:a8:a8:d9:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:2F:C5:5F:08:9F:AE:6A:2D:2B:FB:7D:AC:04:B3:79:2D:5E:2C
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:fe:df:ae:8b:3a:62:b0:72:0e:41:7c:d7:35:84:28:3b:
18:b2:3b:d4:1e:fa:d4:2c:f9:7e:b6:17:8e:61:2c:e5:5a:dc:
95:35:9f:b4:f3:fa:75:f9:7a:19:72:94:06:d5:89:0b:e8:1b:
2e:18:08:3b:42:70:fa:43:68:6d:f9:be:6a:1b:7c:d0:ad:08:
ed:b6:70:e7:01:9b:a1:b2:f7:67:17:1d:37:d0:cc:76:22:48:
55:e5:4d:8d:7c:0c:e5:ec:01:b3:59:2b:74:5f:f2:96:af:ee:
2b:b6:fc:ac:16:ed:78:80:09:37:09:cd:42:54:75:ce:fd:4a:
59:dd:9d:8f:35:ae:64:b0:bb:b8:fe:28:23:ca:c4:92:0c:e9:
8c:45:2c:57:08:6c:7d:45:8d:a4:0b:e8:ec:8a:fb:fd:ce:b7:
50:ae:bf:c9:1a:f8:c8:eb:0f:f9:2b:ce:65:48:12:a6:9b:99:
5d:f0:a5:28:87:f5:c9:57:ae:b1:ef:21:a6:cc:0c:85:d9:79:
ab:6e:e2:da:ea:ff:59:13:c7:4c:87:ea:da:1f:e9:f9:7b:f5:
7b:40:c3:6f:fb:d9:c1:cd:cb:3e:dc:c2:7b:7b:fe:0f:49:53:
e0:ce:93:f4:48:af:a3:cb:cf:32:23:bc:83:ea:ce:8d:3b:8b:
4e:d9:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:19 2025 by rpki-client