Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: T3f1Mk8ct5ItVIeW6nO1zdlfJis1+k03w3BVem4tF7U=
Subject key identifier: 06:E8:FE:7E:53:52:BE:35:C9:56:9E:81:4F:87:86:1F:B8:34:B5:C0
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01964E59CEF1B96B7D1A1AC120BF6F9D103A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 14:00:30 +0000
Manifest this update: Sat 19 Apr 2025 14:00:30 +0000
Manifest next update: Sun 20 Apr 2025 14:00:30 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: ug7m+gpj3PWNAEKO8iWg07sql2HTkpxKRIKoXJqvUP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:ce:f1:b9:6b:7d:1a:1a:c1:20:bf:6f:9d:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Apr 19 14:00:30 2025 GMT
Not After : Apr 20 14:00:30 2025 GMT
Subject: CN=06e8fe7e5352be35c9569e814f87861fb834b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:d7:aa:20:7a:71:88:14:39:7b:0f:0e:74:
a9:f6:9b:92:60:90:e3:0f:b1:f4:f2:d3:6c:33:91:
c6:74:70:ac:9a:a4:3f:e8:e2:9f:9a:5d:e8:e6:fb:
fa:e9:95:3a:a2:0f:4e:5c:ba:46:a8:6e:00:e0:d0:
ec:fc:88:31:bc:c7:e2:f8:36:89:9c:d9:1f:31:b2:
47:1f:c4:86:d0:20:09:cd:8a:e2:50:38:97:57:a9:
c5:d4:df:cd:b8:d0:a2:51:01:42:51:5e:2f:2b:8b:
da:5b:7d:86:b1:22:34:95:01:e8:5e:fa:d6:9a:73:
4f:ea:8b:ff:61:1f:76:e0:8e:63:57:08:67:eb:df:
17:49:0d:6d:5c:8e:94:e1:bb:64:1b:36:ae:5e:b0:
56:10:40:92:de:98:f8:57:6f:d6:a3:05:eb:54:99:
e1:25:d7:ef:6f:96:f5:0e:7d:5a:4c:ee:8f:43:a2:
e3:e4:36:9b:5d:af:e5:7d:99:ff:7d:6e:64:1d:63:
99:be:dd:f3:bc:4d:fd:85:f0:3c:52:d1:50:c8:0b:
e4:d0:6d:9c:84:57:1e:9d:15:3c:88:63:56:44:c2:
3a:a2:d1:db:23:08:c1:1b:d9:75:45:26:d3:ec:f6:
9c:b6:d0:1c:43:1c:07:ab:72:d9:e0:ba:be:6a:99:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:FE:7E:53:52:BE:35:C9:56:9E:81:4F:87:86:1F:B8:34:B5:C0
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:2b:27:a2:d2:62:7f:e1:cd:fb:f6:fb:45:75:96:1c:ef:
03:b9:8e:75:cd:a5:66:12:9f:5d:b7:e0:2d:36:56:86:b4:1c:
a7:69:3f:4e:7c:bf:75:e4:03:ec:41:09:a7:61:0c:ea:22:d7:
ed:a9:3f:0b:26:e8:9c:a3:5f:de:3f:da:b2:e4:3c:43:d9:95:
42:db:97:78:3c:f2:a9:6d:46:99:32:a2:ec:39:8c:2e:b7:58:
da:a5:85:da:6e:a8:41:41:71:d5:71:83:4a:36:7b:16:52:da:
03:29:6f:c5:fe:5c:22:16:d8:d7:44:6a:ec:3d:d1:e5:8c:6f:
d8:91:2e:fb:5d:0d:e0:ff:20:23:9c:7c:af:c7:88:55:b4:16:
ff:7a:58:75:05:fe:7d:86:9f:d5:03:86:a0:19:c7:a6:2a:fd:
3e:de:2c:76:9c:a2:f2:81:e9:78:54:7d:ff:42:f9:be:78:fb:
99:f4:c7:e6:00:5f:1c:cf:38:be:f7:af:26:76:55:b6:2e:bb:
a0:72:43:39:4c:66:13:34:8a:de:8b:10:ca:d9:eb:fa:a4:ee:
3d:64:d4:50:a2:46:1c:af:d8:cf:58:cf:c1:bc:04:95:11:37:
0a:21:31:68:6b:55:43:a3:39:47:dd:c5:91:43:d6:fb:ec:2e:
e6:fd:1e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWc7xuWt9GhrBIL9vnRA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTIyZjhiZGVkY2JlMTliYjMzZmNlMTRmYzFkYjZhZTNh
NDBlOTAwHhcNMjUwNDE5MTQwMDMwWhcNMjUwNDIwMTQwMDMwWjAzMTEwLwYDVQQD
EygwNmU4ZmU3ZTUzNTJiZTM1Yzk1NjllODE0Zjg3ODYxZmI4MzRiNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcnXqiB6cYgUOXsPDnSp9puSYJDj
D7H08tNsM5HGdHCsmqQ/6OKfml3o5vv66ZU6og9OXLpGqG4A4NDs/IgxvMfi+DaJ
nNkfMbJHH8SG0CAJzYriUDiXV6nF1N/NuNCiUQFCUV4vK4vaW32GsSI0lQHoXvrW
mnNP6ov/YR924I5jVwhn698XSQ1tXI6U4btkGzauXrBWEECS3pj4V2/WowXrVJnh
Jdfvb5b1Dn1aTO6PQ6Lj5DabXa/lfZn/fW5kHWOZvt3zvE39hfA8UtFQyAvk0G2c
hFcenRU8iGNWRMI6otHbIwjBG9l1RSbT7PacttAcQxwHq3LZ4Lq+apmJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbo/n5TUr41yVaegU+Hhh+4NLXAMB8GA1UdIwQY
MBaAFCPiL4ve3L4ZuzP84U/B22rjpA6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMt
NzRiZDA0NWIyYWY3LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNmEwZGItYzc2Ni00OTkxLWI3MmMtNzRiZDA0NWIyYWY3
LzEvSS1Jdmk5N2N2aG03TV96aFQ4SGJhdU9rRHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqa4rJ6LS
Yn/hzfv2+0V1lhzvA7mOdc2lZhKfXbfgLTZWhrQcp2k/Tny/deQD7EEJp2EM6iLX
7ak/CybonKNf3j/asuQ8Q9mVQtuXeDzyqW1GmTKi7DmMLrdY2qWF2m6oQUFx1XGD
SjZ7FlLaAylvxf5cIhbY10Rq7D3R5Yxv2JEu+10N4P8gI5x8r8eIVbQW/3pYdQX+
fYaf1QOGoBnHpir9Pt4sdpyi8oHpeFR9/0L5vnj7mfTH5gBfHM84vvevJnZVti67
oHJDOUxmEzSK3osQytnr+qTuPWTUUKJGHK/Yz1jPwbwElRE3CiExaGtVQ6M5R93F
kUPW++wu5v0eEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:14 2025 by rpki-client