Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: 24wRnwt1eHpmqSZmZ4ekL45LtowmpT9Y2+acqbySSG0=
Subject key identifier: B7:3E:32:95:F7:EF:10:CF:5F:37:2E:F5:BE:9D:8E:47:84:D4:59:7A
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019603403C2AA4D8CB20144C1CBC5C616D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0DFA
Signing time: Sat 05 Apr 2025 00:01:03 +0000
Manifest this update: Sat 05 Apr 2025 00:01:03 +0000
Manifest next update: Sun 06 Apr 2025 00:01:03 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 2SQlP/pz4Gi7DhPjW2tQMSlGA0oeOZgKGR+yyntbF+k=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:40:3c:2a:a4:d8:cb:20:14:4c:1c:bc:5c:61:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Apr 5 00:01:03 2025 GMT
Not After : Apr 6 00:01:03 2025 GMT
Subject: CN=b73e3295f7ef10cf5f372ef5be9d8e4784d4597a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:06:b9:76:4b:3c:de:74:52:d2:ac:97:9d:
83:5f:87:b5:1a:68:20:14:f7:fe:b7:1c:11:5c:dd:
c3:9e:05:48:c4:f2:95:24:95:ef:10:01:9e:49:43:
25:70:bf:fa:d7:4a:14:28:3a:c5:6f:e2:70:47:e2:
0e:25:44:39:b5:e2:b2:a4:15:e1:1f:08:52:bd:2d:
c4:7d:19:e0:e1:da:fe:0c:94:fe:bb:24:65:c5:1d:
c3:2e:7d:36:73:6c:e6:99:4b:7d:8b:4b:2f:79:4d:
67:bc:cd:46:6b:dd:fa:43:99:fd:e1:59:f9:c1:60:
e2:95:55:d5:9e:33:bc:a9:00:9e:1f:20:74:84:6b:
d6:bb:fd:d4:10:d5:06:fc:97:ad:4b:28:f3:d0:e1:
d5:7f:7d:9e:8c:03:75:fd:05:88:61:ea:df:a3:0e:
f4:d2:13:02:89:f9:ed:8c:d8:b7:00:63:8c:b5:ec:
6e:a0:45:d5:5e:c3:c6:e0:b5:6f:e6:b7:77:60:40:
e2:34:14:52:a8:db:a3:63:3f:ee:17:53:ec:20:60:
d0:86:d4:87:0d:73:0d:79:51:23:d2:21:eb:f8:d5:
f0:21:22:d4:cd:c3:5f:2b:4a:82:96:f4:21:c5:1e:
85:e5:81:3f:98:ca:9e:0a:38:c4:b2:13:50:1d:27:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:32:95:F7:EF:10:CF:5F:37:2E:F5:BE:9D:8E:47:84:D4:59:7A
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:1c:7e:26:2a:44:ab:48:c5:9d:c3:d0:ca:92:47:b2:9a:
b8:95:bc:dc:b7:f4:57:c9:3d:93:bc:ff:a3:2e:8c:78:6b:2d:
15:b6:9f:09:c6:1b:a7:2d:ec:83:7f:b9:72:fe:09:ee:19:97:
df:da:2b:51:ff:e3:23:cc:1e:9b:67:27:fc:fa:10:83:e4:12:
eb:d5:9e:24:10:85:d5:a8:ca:18:cb:55:c8:3b:9d:41:69:90:
49:38:a4:5f:b9:6e:9e:25:98:f3:37:5a:54:2d:c6:a1:67:6e:
1d:c0:c3:a7:94:06:08:95:72:50:02:a5:e3:82:cc:f6:4a:72:
2c:b2:97:59:8c:3a:5d:b8:a5:cd:16:03:f9:6f:6c:03:b8:d4:
57:4e:8b:78:3e:46:f5:2b:b6:4e:7e:53:c6:9d:c6:eb:20:05:
d4:e4:8b:a1:19:16:94:c7:d0:12:d4:a3:99:4d:c5:6b:0c:bc:
7a:89:66:ff:76:92:64:a5:cc:cd:60:e2:9a:f5:65:0b:be:ce:
97:5b:ec:32:dd:c2:58:f3:75:29:da:65:92:8d:c9:60:e8:3f:
5a:bb:b1:8f:a9:77:2e:d9:26:86:aa:df:89:17:52:40:23:5b:
45:66:92:0e:a0:f4:53:d9:08:46:b7:00:88:d5:8e:05:94:e8:
6f:8d:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:01:56 2025 by rpki-client