Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: JRAzQ8UA8FP16SpI4ekqP1ZGEM8fizfBwF5yWp9kHvc=
Subject key identifier: 41:07:72:D3:87:C2:9D:62:A7:00:0F:B5:E4:5D:D2:B5:15:F7:1E:50
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 019645200977EC6448F9151279A42E646282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 1026
Signing time: Thu 17 Apr 2025 19:00:49 +0000
Manifest this update: Thu 17 Apr 2025 19:00:49 +0000
Manifest next update: Fri 18 Apr 2025 19:00:49 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: AgVGrqc4Kwa+wYrjvwZrMbUdSAODAtafx5iLqtlL3cc=)
2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:09:77:ec:64:48:f9:15:12:79:a4:2e:64:62:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Apr 17 19:00:49 2025 GMT
Not After : Apr 18 19:00:49 2025 GMT
Subject: CN=410772d387c29d62a7000fb5e45dd2b515f71e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:5e:cf:1f:dc:d8:f0:2a:17:20:8d:67:07:
63:04:8b:0c:1b:ee:6a:15:ff:9f:13:7f:e1:dc:cb:
30:b6:40:86:1a:81:df:e8:b5:6e:5b:ea:f7:2a:7a:
fc:4d:6e:b2:71:e5:4b:71:7f:0c:d3:f7:7e:c3:6f:
e8:83:e7:fc:0d:33:17:a9:cb:18:e7:d0:99:26:2d:
bf:cf:6d:1b:07:f2:75:5b:e8:d4:0e:fc:d3:48:66:
04:dc:53:57:bf:33:b3:9b:19:fe:0a:2f:41:c5:be:
1c:c7:e4:5d:62:e7:57:09:33:be:df:ab:58:87:04:
4f:1a:f1:d9:70:6e:4e:b2:99:18:32:4c:33:71:c2:
54:e5:cb:2c:68:06:f8:93:c0:ee:6d:a1:18:01:d1:
89:ad:03:8c:c0:41:d0:f4:5d:56:24:eb:ca:b9:fe:
6f:ae:ba:a9:96:e9:8a:db:0e:b0:3d:60:7d:f2:e2:
0d:3c:d9:05:e2:7c:16:41:8c:bd:78:a8:71:6e:09:
0b:3f:e2:6c:0e:d2:fa:91:6d:50:c2:0f:35:f1:e3:
b9:c5:63:61:19:6f:de:b8:96:d1:aa:61:a8:5d:c5:
98:6b:67:90:a2:f5:33:21:a2:83:0b:00:1f:8c:f0:
3a:33:e1:59:b6:a2:39:67:24:b8:65:81:37:0a:f5:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:72:D3:87:C2:9D:62:A7:00:0F:B5:E4:5D:D2:B5:15:F7:1E:50
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:01:d3:df:82:3f:6f:45:cd:7e:e5:2b:c5:61:cf:6b:2a:
74:f7:7e:82:32:47:e6:c1:7d:33:2a:75:59:7b:c4:49:8a:e7:
d3:ae:22:fc:1e:d3:45:82:00:ae:e9:15:74:95:92:46:0e:0a:
b0:43:cc:cf:e4:72:46:d8:12:74:df:b6:8a:0a:7e:ff:2a:04:
fa:02:0d:c0:a7:b9:67:b1:79:35:fb:a7:9f:6d:17:cd:78:67:
38:c6:35:21:1d:87:d3:44:83:71:c0:df:d1:22:6e:cf:71:1c:
c1:78:d4:3e:cb:76:98:97:13:93:ca:1e:69:5a:e2:a4:41:02:
f6:5f:79:49:3a:ab:85:a0:1c:59:88:7f:0c:e4:84:3e:e0:61:
d8:29:f0:d4:8e:57:94:5d:19:7d:3c:db:38:2c:e5:3a:a5:6f:
e4:a9:b6:b3:26:f8:b8:f1:f1:b1:18:dd:d1:a4:5d:ae:50:13:
10:aa:73:c4:fd:d2:92:0d:8c:fe:16:a0:f9:ee:5b:77:a8:1d:
68:16:02:b5:19:86:4d:58:64:42:75:82:6e:8d:d1:26:a4:d8:
c1:c1:16:49:19:d2:18:72:3a:69:f9:3e:2e:f1:a3:f7:e3:bf:
8f:e0:d7:23:f6:4d:4f:22:a3:66:0f:f5:fa:cf:7e:00:22:37:
9e:ed:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:23:19 2025 by rpki-client