Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier: SnBPolbU6VDLAKTocd9/5ftCMG0DEEFIJ53JutZo1Ww=
Subject key identifier: 2B:25:B5:CB:8F:9E:19:A2:42:B6:E7:B5:85:F6:53:E8:8E:0A:E1:C5
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 0196496AB74BC545805F32756ACC5B45224B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number: 0533
Signing time: Fri 18 Apr 2025 15:00:52 +0000
Manifest this update: Fri 18 Apr 2025 15:00:52 +0000
Manifest next update: Sat 19 Apr 2025 15:00:52 +0000
Files and hashes: 1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: Xjpr3Tgg3TF0VQTdYSO9ipMj7suH7D06HeUAB68hvek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:b7:4b:c5:45:80:5f:32:75:6a:cc:5b:45:22:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Apr 18 15:00:52 2025 GMT
Not After : Apr 19 15:00:52 2025 GMT
Subject: CN=2b25b5cb8f9e19a242b6e7b585f653e88e0ae1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:20:a3:19:02:70:2f:92:11:6b:4b:e1:06:
a1:8a:a3:82:82:90:68:0a:59:29:6a:1c:b1:24:3b:
9a:b0:1f:c5:cb:00:5c:ff:f0:d5:9b:a7:65:e9:f3:
09:21:82:16:9f:9d:49:e4:a6:41:61:32:57:05:74:
3a:a3:45:e6:fd:e6:39:d4:18:6d:24:69:d1:92:f8:
70:79:76:63:22:e3:81:ea:6c:dd:ce:c1:ba:48:53:
b4:64:8d:9c:4f:f0:28:1f:08:a8:ae:0c:01:aa:e3:
11:8f:d7:50:96:b9:f0:a9:60:23:2d:77:5d:1a:fb:
2d:ac:7f:7e:6d:18:2b:34:73:91:d8:d3:e5:89:30:
78:49:43:66:cf:c1:61:dc:f7:17:b2:d6:db:8f:a6:
77:c7:cb:f6:c8:f3:86:59:00:1f:e4:1f:db:43:48:
2e:75:af:4b:84:c8:fe:aa:5e:71:db:20:54:9f:c6:
67:57:f7:e3:52:84:77:7f:de:04:64:7e:bb:63:a0:
34:f0:77:d1:8d:f9:ca:70:6e:40:eb:e1:52:52:00:
bc:5f:f8:16:54:f2:db:3f:5e:58:92:71:c0:56:64:
56:33:bb:b5:2c:88:4d:ad:34:33:92:cd:98:2b:43:
b7:49:68:5e:7a:f3:22:0b:62:7e:55:7b:d0:5b:b1:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:B5:CB:8F:9E:19:A2:42:B6:E7:B5:85:F6:53:E8:8E:0A:E1:C5
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2c:22:31:79:8a:39:1f:9a:4f:3a:10:40:47:7f:ef:d3:09:
e0:dc:c6:05:16:c7:37:3a:3d:41:b7:98:bb:64:c4:0e:18:ca:
a8:78:e2:40:fd:d0:c1:fa:5f:91:3d:cc:08:19:ee:21:94:63:
f5:87:cb:e8:5b:a0:77:bc:94:f4:b2:6b:37:3a:cf:12:db:ce:
0d:5d:b2:54:e2:2f:3d:f0:9d:0f:5f:87:0e:d7:7c:94:87:9d:
5f:b0:64:28:f2:85:be:7f:9f:89:64:8e:73:84:e7:1c:78:a9:
4b:ca:2b:6a:e4:79:2e:70:1d:1c:28:db:ce:b6:85:07:06:28:
89:65:f3:92:d5:6d:9b:8c:f5:5e:9e:4f:6d:11:0a:1c:97:aa:
e4:85:a2:9e:6c:6f:39:04:7e:89:ef:34:79:dc:aa:f7:ae:7d:
fd:7d:08:6d:fc:41:f3:ce:ba:13:14:15:f2:7e:9d:61:98:cf:
8b:99:e0:e3:0a:89:22:93:50:e6:43:ad:b2:a4:83:41:26:e4:
28:86:30:6e:21:99:a1:e3:b7:44:b8:c5:df:f2:80:60:fc:ea:
e3:48:d3:a1:3e:61:c1:ef:13:da:ed:eb:8e:d1:85:5d:65:c0:
f1:21:72:80:02:af:9c:a7:bb:28:a8:fc:ed:f6:66:d9:0a:99:
cf:da:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:04 2025 by rpki-client