Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: OMQh+PdzhrU97PIdIVy7cbH7glufnJAEB5fvo5HFJIQ=
Subject key identifier: 5A:D8:B3:3B:19:C2:E6:75:A7:13:E5:68:54:D3:FB:08:7B:2F:47:BA
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 019651FFBF707DDB1685BD3FBFF32E4AB993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0974
Signing time: Sun 20 Apr 2025 07:00:37 +0000
Manifest this update: Sun 20 Apr 2025 07:00:37 +0000
Manifest next update: Mon 21 Apr 2025 07:00:37 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: AgDZF3xQSE1aR5Lt0Vj0ozZXiBHGVvs8W11yHNsBcrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:bf:70:7d:db:16:85:bd:3f:bf:f3:2e:4a:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Apr 20 07:00:37 2025 GMT
Not After : Apr 21 07:00:37 2025 GMT
Subject: CN=5ad8b33b19c2e675a713e56854d3fb087b2f47ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:dd:d4:69:98:1a:71:99:06:af:47:6e:9a:
41:ab:9d:cf:f0:b8:f1:e6:13:3a:86:96:cc:a8:3e:
dc:52:55:7a:43:cd:47:5e:c2:96:6d:44:59:52:79:
39:7d:55:3d:e5:d4:fe:a3:5f:6d:79:28:2c:4e:f1:
48:d4:6c:a7:1b:08:06:2d:d9:03:6c:a9:b4:30:91:
79:d1:ee:ca:37:a1:af:62:cc:98:59:5c:e6:4c:f9:
4a:4a:3e:7b:b4:bb:c8:27:73:77:8f:b4:17:fd:da:
92:8e:c4:79:6c:7a:3f:57:15:a7:63:bf:15:7c:6a:
e3:a7:e9:c0:cb:eb:ff:8d:83:5e:24:eb:1c:46:7f:
c2:62:8d:28:37:e2:ca:3b:6c:34:5f:83:1c:57:c6:
d2:e6:96:c1:1a:75:54:ee:24:44:63:92:21:49:88:
04:8b:8a:c0:ee:ed:85:99:9f:96:fe:4c:ac:24:ea:
5c:3c:4f:da:43:5c:d8:0c:df:a1:24:33:09:77:19:
64:78:8b:59:fa:d3:da:24:e8:a0:4e:08:19:c8:48:
7e:f7:1c:db:e6:b6:a3:65:f5:f8:63:93:de:91:1c:
cf:b0:70:fc:ea:04:1c:97:c3:20:71:8d:4b:4f:5e:
ef:11:a6:2b:5b:12:4e:36:db:b9:ff:b2:b7:18:24:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:B3:3B:19:C2:E6:75:A7:13:E5:68:54:D3:FB:08:7B:2F:47:BA
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:8e:d9:b8:6f:85:9a:52:05:64:cd:11:9d:99:f6:fe:fe:
ea:49:ae:e8:9e:47:54:ee:4c:7b:a9:25:a3:81:f5:cf:ef:b4:
cb:e5:93:25:7b:a3:06:9c:05:03:d3:7b:a0:fd:72:23:dd:f3:
bd:e5:eb:7f:6d:a6:68:b6:e0:9a:d6:49:c1:79:37:66:94:a4:
3e:a9:92:0c:3f:4e:fe:96:1f:bd:7b:42:63:08:4e:0d:be:7e:
94:b8:d4:1d:e1:22:0d:74:19:70:3d:44:8e:ca:2d:cc:40:f8:
42:45:77:10:05:bc:d3:f2:26:fb:cd:e7:18:dd:92:b9:4b:c5:
ee:a1:74:25:d4:72:2f:27:db:88:d4:1e:54:8a:23:02:23:14:
68:26:84:2c:46:1b:a0:33:eb:85:82:d2:74:87:2a:95:02:3e:
db:ab:3e:ee:14:2d:9f:ea:8d:82:21:26:03:be:ce:e9:1d:61:
35:45:a1:1d:97:c4:7e:a7:c6:25:29:d1:bc:2b:a2:0c:e6:4f:
88:41:6c:9f:83:49:56:5b:b1:51:45:b4:9b:11:b1:6e:9b:73:
7d:00:cb:1f:1d:cd:fd:10:7c:25:7e:c3:ff:2e:d7:e7:d0:cb:
58:7f:23:9e:7a:3d:43:78:16:01:20:c4:69:46:15:bd:d9:4f:
be:cf:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:40 2025 by rpki-client