Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: Y/PFMDmZYl2eE7zcRsCexNn5Au+naFPXkQ/CisBhzyA=
Subject key identifier: 35:7C:D8:34:05:59:A9:DB:0A:04:69:9F:E5:84:E7:90:B0:08:9A:7F
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0196537FDEEAA55CD6ED28D8DB0148FA7E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 14:00:11 +0000
Manifest this update: Sun 20 Apr 2025 14:00:11 +0000
Manifest next update: Mon 21 Apr 2025 14:00:11 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: 4HykYmY1nzEDZAaEoAIOX/CIv+U9UZRk2+HQcR3l/gg=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:de:ea:a5:5c:d6:ed:28:d8:db:01:48:fa:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Apr 20 14:00:11 2025 GMT
Not After : Apr 21 14:00:11 2025 GMT
Subject: CN=357cd8340559a9db0a04699fe584e790b0089a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:b8:ad:ee:9c:9b:55:5e:06:51:93:3d:b0:
25:a8:61:9e:b6:9a:5b:f5:9a:9f:58:0b:ae:c3:38:
68:c2:fb:71:1e:a7:57:2f:c0:32:19:62:40:75:6f:
b3:01:c5:a3:4b:89:1b:90:a5:a2:2f:0e:8f:27:16:
58:0b:1b:d5:99:5b:7c:40:58:78:88:31:dc:f6:8c:
d5:c3:7c:86:21:a0:06:50:51:a6:0a:33:58:0a:55:
11:61:d6:10:a2:2a:7f:c5:cc:d6:e6:e7:5e:41:67:
ac:de:e3:82:9f:4a:82:cb:d7:a1:f7:58:d8:3c:23:
e2:fb:17:d8:5b:7d:d0:32:9f:d2:f9:2f:f3:83:bb:
9f:e4:e2:d4:a5:35:52:e2:09:3d:30:9e:69:c1:4b:
40:e1:9c:5c:fc:14:82:87:af:b4:69:75:ac:d7:e3:
1a:ea:7d:bd:43:30:00:57:64:ac:b2:0b:40:90:17:
91:b8:86:34:ea:56:0a:34:8d:36:86:99:36:d0:96:
f2:50:23:86:e0:9c:5d:a8:bd:df:b8:80:b3:fd:49:
87:31:77:e9:02:8f:56:60:19:2e:4b:7f:1d:cc:85:
6f:f1:ed:e0:ea:96:fa:62:7f:5a:38:4f:3d:b5:8a:
80:07:cf:a6:7c:11:ee:10:14:ea:5c:2c:b2:02:e5:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:D8:34:05:59:A9:DB:0A:04:69:9F:E5:84:E7:90:B0:08:9A:7F
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:15:a0:46:3a:c7:c0:24:c5:3e:cd:bf:68:42:70:c1:61:11:
1a:32:bf:07:9a:97:dd:43:6c:b2:48:f0:fa:3e:40:3b:79:54:
5f:e1:91:5c:33:93:f7:d8:5d:6e:13:8f:eb:07:29:af:37:34:
83:33:fd:91:fc:50:fc:55:fb:e6:6b:99:c6:66:15:eb:90:85:
e1:07:42:33:37:b1:9b:fd:ee:b5:5b:9a:b6:13:29:48:cd:c8:
ba:88:ab:1d:79:56:ac:9b:7d:83:2e:a8:7c:10:3d:be:fd:b6:
e7:6f:81:e8:ef:e5:c0:33:53:48:89:80:0f:95:9c:a2:4a:19:
c5:3b:e7:0a:5d:0c:c7:63:44:5c:47:f0:37:2a:60:92:c7:8e:
52:be:f3:d4:ff:cf:53:86:f3:ec:23:a9:7d:90:44:d1:9d:6f:
cb:ea:d6:c0:63:99:5c:d2:3d:f9:53:0a:a3:5e:5f:fd:75:52:
e0:08:85:eb:e2:40:81:28:17:b8:e2:77:bf:88:f2:26:f3:07:
cd:84:4e:d3:c2:22:fd:82:01:59:d0:51:54:42:a7:ae:a2:de:
3f:da:f4:18:3e:cb:cc:fc:c0:5e:a2:eb:10:00:0e:8d:03:f5:
8b:8c:dd:f5:29:93:07:3c:b8:70:2b:61:37:e6:f6:24:94:43:
49:3b:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:52 2025 by rpki-client