Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: +iraiCkgcZG/+sW7117dfHPtvk6a7YIqKxAglHJvesI=
Subject key identifier: 35:ED:41:3C:9E:9C:F6:66:CE:4B:BF:4B:0E:B2:1D:C3:A3:28:4C:9D
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 01965236DDD04E2CD2DA8813C2D8CB2A31B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0B62
Signing time: Sun 20 Apr 2025 08:00:49 +0000
Manifest this update: Sun 20 Apr 2025 08:00:49 +0000
Manifest next update: Mon 21 Apr 2025 08:00:49 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: m7CaTboo6ljUFg+XjwJuYLiBHo2fMFdeD9z8S/RzSL0=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:dd:d0:4e:2c:d2:da:88:13:c2:d8:cb:2a:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Apr 20 08:00:49 2025 GMT
Not After : Apr 21 08:00:49 2025 GMT
Subject: CN=35ed413c9e9cf666ce4bbf4b0eb21dc3a3284c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:45:1a:76:0a:52:9b:df:46:13:6f:00:35:
79:c5:d4:50:47:78:ea:f3:2a:40:ad:6d:6c:08:6d:
b0:50:31:68:c1:20:69:b2:b8:ea:1d:6f:36:9a:81:
76:dd:78:ed:9f:00:06:0f:90:2b:11:c5:b9:6d:c3:
e8:e9:50:52:8e:46:64:fe:a7:06:8d:26:04:f0:28:
ed:14:a3:0c:b0:87:b4:8c:9e:49:43:14:22:cf:91:
85:59:dc:3c:5d:70:b4:6d:f2:50:da:cf:79:32:46:
06:83:91:75:e3:80:81:67:62:c3:17:c9:89:da:73:
27:62:6b:f3:b5:f9:6a:03:98:c9:1f:4b:2f:9b:e7:
06:98:1b:2c:6f:5e:03:f7:2b:83:2e:68:45:ef:9a:
68:72:44:9e:a9:66:70:19:39:bf:b7:0d:75:70:a0:
8a:79:bd:2c:db:56:ef:e7:23:ff:65:a2:63:ca:6c:
20:46:de:97:50:b1:c2:90:e8:16:7b:d1:1a:c3:e0:
e1:b3:40:14:2b:1b:df:01:ec:bb:60:5c:14:23:32:
6f:84:ac:d4:ad:8b:b2:25:dc:bd:44:e9:ea:19:b5:
98:1b:0c:b7:14:11:46:dd:18:1c:5d:43:6d:ae:55:
ff:99:44:5f:af:76:90:ff:27:4c:b5:d4:68:5c:e9:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:41:3C:9E:9C:F6:66:CE:4B:BF:4B:0E:B2:1D:C3:A3:28:4C:9D
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f4:0a:02:69:c7:d8:c3:23:b1:8c:66:f7:7a:a3:a6:5d:da:
71:ec:f8:1a:e1:6c:17:d7:e2:ed:67:d3:06:60:1a:a7:9a:de:
06:20:af:93:55:61:7f:4b:7a:f9:7c:0f:3e:04:b9:e3:08:49:
dd:28:c7:f6:65:47:1b:83:83:78:df:79:95:76:c0:ab:ed:ff:
ad:5e:5d:9b:b8:ba:83:a8:79:04:97:12:96:9a:a4:46:22:69:
69:f8:42:a7:46:af:d2:c6:df:f0:2b:c4:6f:7f:39:b9:11:aa:
53:5c:e0:7b:00:e9:3c:54:5b:9d:36:83:f6:68:b7:73:7d:bb:
7b:f9:35:78:42:91:cf:a9:ef:d6:45:61:bc:58:41:25:aa:b2:
fb:3b:3e:30:e7:ca:10:eb:75:e8:a3:b6:b9:29:d8:9e:af:23:
ed:6b:5d:0e:08:7a:86:22:6c:6c:78:ea:bf:23:9f:06:1a:5a:
d4:8b:87:ac:a2:af:59:54:b8:36:03:9d:1e:9c:3f:eb:2d:d2:
26:b0:74:e0:13:d7:7e:80:17:86:17:c7:a8:20:fc:ea:36:28:
d3:12:6f:61:83:95:05:53:04:b0:8c:60:d4:cb:ab:b6:8a:3b:
9d:b2:7c:a5:fd:53:01:3e:0f:a5:dc:8d:3b:07:cd:6a:5d:87:
43:aa:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:17 2025 by rpki-client