Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: DbZ2VrL5h0oTjvKUCjctLnbOQw5mwZEK/bKUgb9AxFI=
Subject key identifier: AF:20:95:F4:55:44:EB:E1:D4:A6:69:5B:3E:7E:B4:1F:27:11:67:64
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019653B796C070FA27551661FC8DFD590C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 0459
Signing time: Sun 20 Apr 2025 15:01:02 +0000
Manifest this update: Sun 20 Apr 2025 15:01:02 +0000
Manifest next update: Mon 21 Apr 2025 15:01:02 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: RDPbBUhKff01MffRBTVxD4iI+ROFEboJQ+FHy9wN+14=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:96:c0:70:fa:27:55:16:61:fc:8d:fd:59:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Apr 20 15:01:02 2025 GMT
Not After : Apr 21 15:01:02 2025 GMT
Subject: CN=af2095f45544ebe1d4a6695b3e7eb41f27116764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:67:7e:99:89:39:e1:63:df:e1:8a:5f:bd:
cd:6c:a7:02:fe:e6:96:e4:d3:dc:0c:01:a6:c5:03:
fe:3a:61:4c:f4:32:8f:72:b1:4a:c4:94:5c:83:b0:
12:59:65:f4:df:99:ac:0e:c8:6e:82:1a:8a:00:66:
ec:63:10:2a:5c:e5:cb:56:e5:ce:ac:20:93:3c:65:
4f:56:53:11:1c:71:0a:1a:f6:b2:b1:ac:e4:c6:5c:
83:96:f1:3a:cf:37:b4:de:53:b3:e4:77:bf:92:08:
bb:76:51:df:c0:4b:a8:4f:96:05:5b:8a:cb:20:26:
a4:c9:d6:de:37:81:06:e7:1a:3b:b7:a7:5e:74:c6:
a7:b1:a8:68:67:16:15:c5:30:45:09:03:19:1c:bb:
48:e5:05:d2:46:10:bb:96:66:cb:ff:9d:2d:2a:3b:
f5:01:8f:00:26:0d:aa:86:47:1b:66:4c:b2:7f:6c:
cf:7c:11:f4:e5:c7:80:90:4a:6f:3e:1a:3b:b9:b5:
26:90:13:ed:7f:54:02:8a:4b:24:9c:d4:f0:ab:e7:
86:05:38:28:db:df:c5:2d:f2:88:77:34:1b:e7:6f:
13:08:1c:6b:25:21:db:1f:e0:0d:72:86:0d:33:0e:
46:e4:bd:56:cb:6c:f4:90:bb:4e:87:c2:53:44:6d:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:95:F4:55:44:EB:E1:D4:A6:69:5B:3E:7E:B4:1F:27:11:67:64
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:47:ee:f2:bf:a4:18:26:5f:5a:9d:25:5b:0c:b1:0f:c1:
70:0f:15:14:c7:bc:ce:64:3a:5d:cd:d9:23:99:10:02:9b:72:
08:cd:fc:3b:05:e6:37:33:76:db:0c:af:ba:57:98:ad:1a:f6:
0c:0e:ea:78:60:9b:47:ea:70:81:db:9f:c0:be:aa:fb:13:7c:
a3:5c:b8:34:77:d1:70:93:56:26:64:27:86:fa:65:7f:17:b5:
21:88:9b:3d:6d:a7:8a:33:c2:b1:46:af:a9:3f:9c:6c:07:73:
0c:e6:43:7b:91:0e:59:e7:d2:58:5a:b3:7a:a5:d4:26:23:5c:
5d:98:6a:81:cb:62:28:22:65:df:e8:67:42:56:75:da:c1:cd:
3b:41:65:64:c2:0d:7d:3c:c4:9a:0e:ee:bc:a0:fb:11:39:e2:
40:f9:c9:a8:0d:b0:0a:a8:e4:f2:53:ce:44:82:79:91:b7:45:
d0:ed:0f:19:1f:5b:71:ac:73:32:39:a8:9b:b9:28:34:82:24:
de:21:5c:d5:c9:ab:04:f6:31:1d:a5:7e:01:90:73:12:7e:76:
f5:ec:16:0f:d4:6c:23:de:33:f5:4a:fd:cb:08:ad:c3:ee:36:
98:f0:d6:22:4b:6b:29:8c:08:ca:e1:b7:53:1b:3c:67:67:21:
5b:c0:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:31 2025 by rpki-client