Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: hwVKvR3K+hEDViA6OrwVytFgHVhTM4KS0WMQ6XCyw4U=
Subject key identifier: 6C:FB:AF:46:9B:A0:9F:54:EC:92:AF:0D:A5:4C:46:BC:4B:A3:69:FA
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01963EE6AC10C12FF18B718A37A8DF4B2CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 12AE
Signing time: Wed 16 Apr 2025 14:00:26 +0000
Manifest this update: Wed 16 Apr 2025 14:00:26 +0000
Manifest next update: Thu 17 Apr 2025 14:00:26 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: CA0WuK2igkm53s2AyQtcR1xWWE3Gk0/UGs2Ra/JIy7g=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:ac:10:c1:2f:f1:8b:71:8a:37:a8:df:4b:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Apr 16 14:00:26 2025 GMT
Not After : Apr 17 14:00:26 2025 GMT
Subject: CN=6cfbaf469ba09f54ec92af0da54c46bc4ba369fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:d0:ad:36:e3:6d:c9:c1:84:e1:93:a0:21:
13:35:5c:39:73:60:d7:d0:d1:75:f2:9f:4d:9c:74:
c1:ad:00:95:05:06:cf:70:fa:ff:cc:7f:69:f3:ad:
be:c6:b4:9d:73:91:15:49:45:30:19:3f:1e:7e:2a:
a7:83:61:e6:43:20:53:31:91:f3:56:bb:c8:ae:12:
35:b4:bd:6e:5d:e6:f1:9d:a6:30:c5:91:a0:74:ed:
e6:d8:07:bc:2d:88:b5:3f:bb:b4:1f:9d:87:aa:9f:
8e:c4:04:e4:fc:2e:7f:e4:5f:ad:9f:f5:cf:6c:02:
72:27:5a:05:07:9e:b3:cd:5e:18:25:65:c5:a9:eb:
00:d5:8a:1b:c7:d3:91:c8:57:b9:2c:bf:2e:15:20:
af:d3:ec:3d:c8:41:bc:47:7c:fc:88:7e:37:cf:3c:
e4:24:3c:e3:86:38:c2:b6:55:59:20:48:93:5e:dc:
aa:49:c9:bc:43:e5:03:bf:3e:60:b1:26:a9:f9:2d:
4b:dc:91:b0:5f:86:66:24:2d:a1:2e:b9:f1:1b:f7:
af:03:bd:80:b4:b6:a5:b9:99:39:54:6c:48:d9:ef:
d2:4f:8f:40:1d:c1:82:d4:d5:72:df:51:6d:80:15:
ca:36:e5:6d:74:a7:e4:f7:27:96:5a:89:ed:8c:53:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:AF:46:9B:A0:9F:54:EC:92:AF:0D:A5:4C:46:BC:4B:A3:69:FA
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:af:e5:4a:91:02:4a:80:8a:cc:46:c3:60:75:14:6c:ab:
77:a9:af:9f:84:3c:22:84:c3:67:1b:53:ed:59:69:d9:39:a5:
e2:e3:a2:ab:0c:30:13:96:4b:be:08:64:8e:2b:3f:e0:32:ec:
88:cd:2d:74:2c:74:e7:68:ef:85:11:29:80:8c:d5:a4:a7:c2:
72:9e:94:8b:6a:99:ca:09:85:7f:9e:db:e4:0f:e2:63:13:a5:
17:be:a0:97:9a:e6:d3:d2:c9:7d:96:43:94:76:91:e8:1a:29:
22:b2:99:5b:ab:8c:72:40:18:a8:83:8d:ad:44:3d:e4:92:10:
0e:d4:7a:88:b6:6e:ef:69:71:c3:b2:39:5f:4c:57:80:8c:19:
d0:9c:54:5d:08:76:a0:67:d2:78:5c:0f:95:a4:94:54:64:db:
db:ba:b2:24:72:7d:5d:66:6f:c2:1b:36:09:23:f2:23:58:1c:
3e:a3:8e:55:5b:6f:28:ac:d5:c9:00:79:d3:02:36:24:2b:0f:
aa:ed:df:ac:33:2a:1e:75:3a:c8:72:ac:e6:fa:58:4c:9b:5a:
6d:76:3f:06:2e:4c:8f:28:f9:b1:a1:46:42:64:ef:9b:c8:8a:
96:b7:85:f5:76:6b:e9:41:7d:fa:e4:b7:5d:87:8d:bf:b2:1a:
21:3e:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:09:29 2025 by rpki-client