Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: 2WSe8Ypm5IGxs2SEkfbozCxcDnU2sL9WS1TYYhd9fSM=
Subject key identifier: 28:80:DF:00:95:E8:AC:AF:B2:85:65:83:D4:08:09:05:A9:8A:7E:CD
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 019653EE5BE765FA600C1F13769096FE6FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 0A40
Signing time: Sun 20 Apr 2025 16:00:51 +0000
Manifest this update: Sun 20 Apr 2025 16:00:51 +0000
Manifest next update: Mon 21 Apr 2025 16:00:51 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: WMYyoyspHw+mfGYcLb7ymY54iMEvbCZalAqGPJlKpP0=)
2: Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa (hash: PWFMCOTkx94rFl6c7QVt2h1VgycYcWOsnSvIAK4MJo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:5b:e7:65:fa:60:0c:1f:13:76:90:96:fe:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Apr 20 16:00:51 2025 GMT
Not After : Apr 21 16:00:51 2025 GMT
Subject: CN=2880df0095e8acafb2856583d4080905a98a7ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:4a:08:0d:be:4e:38:f5:cf:ee:e8:86:54:
0b:8a:aa:bc:cf:b8:ab:4b:5f:18:04:a0:67:7e:5d:
57:29:4f:db:93:a1:89:5b:26:cf:4b:59:14:e6:c1:
0b:e3:92:ee:87:17:c9:f0:94:63:d8:ff:6b:80:ce:
ee:88:a6:48:8a:d4:fd:1a:bf:85:22:c4:8a:14:77:
9f:05:8d:db:bb:fb:2d:3b:80:35:a8:71:a7:db:4c:
9c:15:e4:44:15:d4:17:e3:54:7f:c3:4a:92:76:58:
de:1e:51:4d:aa:c4:cf:6b:9e:d3:50:c3:fe:2b:8a:
d2:cd:bd:06:ee:33:dd:60:da:cc:66:0c:8f:63:b2:
ff:da:92:63:64:0f:6a:1b:29:05:11:eb:63:16:69:
56:23:59:d0:2b:cb:a8:9b:5b:26:72:54:fd:c1:90:
68:c2:12:3e:8c:e4:19:a5:9b:5d:3d:70:2f:81:86:
a4:30:1f:23:a2:ee:cd:ea:ed:75:b7:de:76:ef:bb:
47:1e:90:e1:e4:02:a8:b4:e6:43:ed:6d:bb:f1:92:
45:df:92:8e:14:08:7a:a1:01:dd:f7:f4:c4:c8:fc:
00:05:98:e6:d6:78:50:73:c3:c3:9b:a2:61:91:71:
b6:d2:6e:fe:24:1f:0b:68:b9:5c:20:37:a9:3e:e8:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:DF:00:95:E8:AC:AF:B2:85:65:83:D4:08:09:05:A9:8A:7E:CD
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:21:c6:18:9c:52:49:23:ac:50:f2:90:2c:2a:dc:bf:be:46:
eb:25:16:21:bf:7c:91:e6:9b:8b:9a:93:b4:69:0a:b5:40:02:
77:33:9f:a6:b9:0a:86:a2:be:ce:9b:5d:e8:f8:81:cd:2f:46:
56:fa:db:1e:89:13:24:09:2d:ee:23:6a:d4:31:f8:91:54:a2:
d5:9f:20:6a:07:2f:e7:b2:5b:53:fc:82:43:6d:b2:47:b7:d9:
ff:c3:b9:c7:fd:32:41:39:f5:9d:7e:b2:c7:a1:50:5d:93:03:
09:a5:21:9b:7b:fb:9a:fe:ea:fc:d6:90:13:9f:db:9d:c8:cb:
6e:ae:0a:23:ea:c3:49:96:e3:5a:a0:cd:9b:5c:95:96:03:af:
e1:6c:8d:0d:fb:d3:ed:46:e4:0d:cd:d1:02:22:53:8a:bf:14:
1e:4e:c6:36:f8:62:ff:92:b9:96:98:ff:b1:cf:d9:14:30:ce:
88:58:f2:9e:aa:4b:32:7c:33:e0:97:db:07:f1:61:e5:34:bf:
ce:9a:39:16:95:6f:c7:f6:4a:94:cb:78:20:dc:fe:23:ce:5f:
50:24:4e:0c:cf:f8:6e:e0:65:61:b1:32:af:fe:17:cb:ac:50:
d1:4f:10:e1:a4:f0:62:9e:e5:6b:7c:6b:79:3b:44:1d:6a:42:
a9:67:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:05 2025 by rpki-client