Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: GKZNtxKnuAxndcXD3e8PEcbwJiCZ5MAxStRwiByGiG0=
Subject key identifier: 19:BB:18:2A:14:0A:DD:EA:29:62:52:CB:42:B6:B8:78:A1:68:C7:CF
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0196556E8ED275343BCC47D0FDCD18AA1348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:30 +0000
Manifest this update: Sun 20 Apr 2025 23:00:30 +0000
Manifest next update: Mon 21 Apr 2025 23:00:30 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: VdGVnBZ+HUVhAzd7zSiAS/AD04q/kGWBlt0YFRbdVeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:8e:d2:75:34:3b:cc:47:d0:fd:cd:18:aa:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Apr 20 23:00:30 2025 GMT
Not After : Apr 21 23:00:30 2025 GMT
Subject: CN=19bb182a140addea296252cb42b6b878a168c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:3d:c8:85:fb:ea:d2:b2:18:dc:c7:33:37:
44:48:a4:63:74:c8:32:0f:f9:d2:df:3b:14:0e:9e:
53:b7:b4:1e:ff:fa:76:e7:e6:a4:24:69:18:13:8e:
4e:0e:7e:ec:92:4d:09:d8:93:6f:0d:4e:b6:e3:ce:
63:bb:db:fc:6b:95:fd:2e:3a:87:87:83:3b:35:f8:
23:6d:9b:ba:b0:1b:c9:d3:58:1a:39:f9:43:99:18:
cb:bf:8c:03:8a:dc:e7:b1:b0:77:18:2f:31:53:cd:
c3:66:e0:5d:5a:b0:5b:3e:f0:e9:fa:9e:e1:6c:dd:
b8:64:4c:82:45:b9:e7:e9:f4:cc:53:e6:2b:02:35:
3f:d6:c5:7e:c0:a2:4a:1f:d4:ef:0a:42:9d:0f:e2:
9a:80:85:a6:61:d7:8b:9f:93:8a:77:a2:e8:7a:d5:
e6:9b:cb:66:5e:5e:d1:dd:77:90:da:0c:cb:0f:fd:
90:5a:ac:3f:d2:13:06:41:9c:2a:e8:e0:72:70:97:
d8:4f:b2:ff:1a:a3:5f:b2:38:02:e4:58:c7:9b:55:
e7:ce:cc:dd:fa:8a:03:cb:73:a8:de:c9:57:f2:5e:
3a:28:2d:8e:a8:9a:42:f8:c1:a6:89:95:aa:60:10:
da:3a:75:85:18:a8:9a:24:c2:39:cb:87:52:69:15:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:18:2A:14:0A:DD:EA:29:62:52:CB:42:B6:B8:78:A1:68:C7:CF
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:40:89:1b:b0:66:69:c7:2c:3b:b0:02:56:7f:c8:73:06:2c:
03:60:dc:42:67:db:cd:c6:a6:8d:d6:91:d1:0d:99:e9:3c:45:
77:41:2f:eb:36:4b:61:b3:41:84:07:af:25:c3:72:9a:db:c9:
c1:de:55:af:be:a2:08:9c:9e:08:6a:86:11:b3:e9:fb:ca:11:
fe:84:fd:09:1f:45:d7:97:9c:80:eb:34:10:51:73:cd:75:5c:
a9:09:c8:3d:92:01:48:46:c9:42:f9:37:f9:c8:b6:da:dd:6c:
0e:10:4c:51:30:e8:6c:dc:69:dc:60:cf:07:c8:bf:f8:11:94:
65:0b:8b:9d:49:7b:e6:c7:75:36:6d:4e:9e:9f:07:b6:b8:4d:
68:92:fc:43:c4:8a:c6:e7:b4:9a:4b:1a:78:0f:e3:f6:0b:d8:
ae:96:6c:61:7b:66:77:0a:36:a4:d1:6d:90:ab:4f:d9:9b:a5:
48:6e:c6:61:0b:e2:d2:be:03:02:37:77:07:cb:f7:e5:c8:92:
00:f0:5a:29:a5:44:30:44:86:7c:b8:69:02:62:60:00:e5:73:
6c:79:e0:66:5f:cd:de:e2:1f:6d:9f:ad:03:31:c3:2a:d4:4a:
19:2b:45:5e:17:01:70:d1:87:ee:e4:86:ce:09:44:bf:d0:63:
83:a3:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:12 2025 by rpki-client