Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: fS5rFxLQHjN8WOT6RtCoIp60VgkyltJR8qO0D+okDbU=
Subject key identifier: 9C:53:97:F3:4F:7A:4E:7A:F0:8E:4E:71:DD:52:E2:EC:2B:4C:8E:14
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 0196591516E59BCB853591B9715D7F09767C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 07C7
Signing time: Mon 21 Apr 2025 16:01:16 +0000
Manifest this update: Mon 21 Apr 2025 16:01:16 +0000
Manifest next update: Tue 22 Apr 2025 16:01:16 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: 0RNcoXpi1oTAhCGj5TSTJ1EdLcpLXJ+SmZWQl9FE5u8=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:16:e5:9b:cb:85:35:91:b9:71:5d:7f:09:76:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Apr 21 16:01:16 2025 GMT
Not After : Apr 22 16:01:16 2025 GMT
Subject: CN=9c5397f34f7a4e7af08e4e71dd52e2ec2b4c8e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:75:00:d5:73:b4:c6:10:cf:80:71:55:43:
10:2f:c9:5a:e2:00:ec:49:ef:27:10:dd:ad:b1:ce:
51:bf:fd:87:da:ca:f2:55:ce:33:0e:e2:46:03:1a:
fa:a1:93:a6:c4:4d:af:e7:8d:e5:34:f6:2e:08:e7:
6e:f8:f8:c0:71:47:d2:f2:a4:d5:0c:23:78:7b:dc:
66:07:41:85:be:e0:41:c0:06:07:dc:2d:3d:e5:dd:
e5:c2:c9:ea:e2:c1:31:96:ea:36:78:b3:6c:f8:87:
6d:1d:99:f1:87:46:6e:7d:a6:4e:b2:d2:39:3d:78:
5f:49:8d:01:4a:8a:07:26:2c:65:0f:d6:41:8c:42:
35:34:d1:e3:a4:04:5a:2b:84:1e:02:22:6c:6f:da:
41:90:92:c2:41:6f:79:18:19:b2:3e:7f:95:c6:3e:
58:6b:10:5a:da:c6:16:f4:cc:1a:47:a7:03:38:9f:
44:4b:9d:45:30:d8:87:49:09:f3:4a:47:61:57:33:
db:53:8e:96:c4:e4:60:9a:77:d1:49:c2:68:89:99:
0b:7d:47:c9:bd:bf:60:fc:d2:9a:80:57:8e:d2:d4:
60:ee:e3:ca:16:86:60:a1:45:dc:b6:dd:80:e4:f0:
8d:16:a7:9b:d7:2a:b0:69:eb:40:85:42:61:71:06:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:97:F3:4F:7A:4E:7A:F0:8E:4E:71:DD:52:E2:EC:2B:4C:8E:14
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ba:55:b2:21:8b:c0:95:ce:6d:42:8b:25:29:08:69:de:43:
23:77:c2:99:fb:75:c4:51:f9:c7:74:ce:4c:6e:79:15:82:7e:
ac:34:34:2c:7f:96:d6:46:96:e8:95:f9:dd:b9:8b:f6:20:93:
cd:77:8e:d8:5b:2c:5e:df:75:89:87:7c:5d:da:ab:47:a9:78:
3b:b0:41:d8:89:69:99:ed:32:c7:3e:60:f5:51:b8:47:7f:21:
1f:d4:98:69:3b:29:51:10:bb:cb:9b:31:0b:3d:4c:0b:54:9a:
f6:c0:0f:b1:6f:85:5f:fa:9d:a9:f2:a9:98:9b:cc:a8:e0:e7:
f5:b5:94:f4:c3:f3:3b:5a:24:3c:75:44:04:2e:9b:7c:f1:9d:
55:62:56:9d:47:5c:02:67:35:9c:24:89:2a:a1:31:4c:cd:f0:
55:a8:cf:9d:9c:7b:f1:21:06:e9:a7:bb:38:82:7a:b4:48:c0:
e5:1c:2f:05:30:b3:5a:dc:30:e0:e5:85:58:8a:d7:ce:98:1f:
8f:7e:61:8a:6f:54:3e:6f:52:ba:fa:35:af:ca:fd:1f:64:4d:
b6:dc:f1:88:fc:0f:f6:8d:6f:36:f4:31:1b:13:9f:3f:13:87:
68:86:aa:24:b8:b4:2b:e3:76:01:11:2d:26:18:8d:91:c8:c5:
61:21:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:06 2025 by rpki-client