Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: 6bk8ivSaGCkJyUIeQwq0vQ/lTEvYik8aTcjOJGIYyac=
Subject key identifier: 63:83:CF:32:07:F0:E5:82:EB:91:08:E6:F1:E9:06:8F:67:17:C4:BF
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019644B1F468D3646AF413FD483D7E822D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 083E
Signing time: Thu 17 Apr 2025 17:00:35 +0000
Manifest this update: Thu 17 Apr 2025 17:00:35 +0000
Manifest next update: Fri 18 Apr 2025 17:00:35 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 39ig1d3eJKLxhQrAIHRHz13Y9jNfsonOnEz/d+mQK78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:f4:68:d3:64:6a:f4:13:fd:48:3d:7e:82:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Apr 17 17:00:35 2025 GMT
Not After : Apr 18 17:00:35 2025 GMT
Subject: CN=6383cf3207f0e582eb9108e6f1e9068f6717c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:6a:bb:1c:9f:19:c3:7e:11:2b:a1:1a:b1:
75:3b:ec:76:27:0c:dd:22:0d:43:55:e9:85:c8:f7:
d1:a6:1a:56:07:5d:c8:9d:c5:e5:9f:4b:1d:23:ca:
3e:91:3d:c8:b0:67:a6:9b:6a:42:51:eb:21:e7:92:
19:6f:6e:88:39:35:c2:76:c9:d5:bd:85:52:70:77:
e9:fa:b7:39:52:7c:28:49:02:62:dc:56:9b:75:77:
92:22:a2:e5:da:a7:52:72:6c:1b:36:ea:ba:67:5d:
ed:f6:5f:3a:7b:5a:08:1e:64:4c:5a:88:70:ca:c2:
b5:b5:55:0a:18:06:ff:85:f1:b2:30:05:8d:b2:5d:
d6:0d:42:42:86:e6:b4:e4:24:4e:58:6e:56:2c:fc:
c1:1e:f4:6f:93:30:4f:1f:70:8f:10:39:70:a9:67:
32:b6:36:ba:42:8f:29:d4:c6:9e:db:ce:d3:35:a3:
4e:89:d8:eb:4e:42:9e:e4:de:13:26:b5:f8:21:6a:
de:bb:e3:00:f8:98:ea:28:be:68:19:07:5e:5d:7f:
10:e6:5b:d3:33:77:ea:fd:81:70:68:43:81:94:7e:
07:ee:48:48:d7:cb:36:10:42:f8:16:66:8d:52:53:
ac:92:7c:fa:c0:9f:0e:c8:ef:99:15:31:5c:19:09:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:CF:32:07:F0:E5:82:EB:91:08:E6:F1:E9:06:8F:67:17:C4:BF
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f9:29:fb:d4:57:7d:c2:da:28:50:64:7c:f2:1c:c0:c6:7b:
2e:89:92:65:2a:32:5c:d5:de:97:a5:05:69:aa:75:9e:67:d2:
c1:c6:c9:19:6a:69:68:bd:e5:be:6e:fb:93:83:b5:82:b6:23:
34:f5:57:78:b7:fd:2c:53:e5:f9:a9:f7:0c:0d:44:10:37:cb:
a2:d6:ba:5f:43:97:6a:e0:fe:7c:10:94:05:28:ec:11:fd:27:
33:e6:17:ca:9f:d1:98:ec:0c:8e:b5:93:3f:18:3e:cb:0e:e8:
49:10:63:fb:f0:2b:fc:ba:16:b6:0c:e0:8e:3d:7e:74:cf:80:
48:6e:d6:85:68:3c:70:f1:7f:c7:58:5a:49:4f:ae:f4:cb:6a:
91:37:26:22:5e:ea:f7:f6:f7:53:74:9f:9e:3b:c3:94:4a:ca:
b5:30:46:49:c2:48:5e:ee:e0:c5:de:16:3e:d8:b5:66:42:3f:
89:97:f9:a8:ef:66:58:97:3b:eb:5b:89:80:75:62:e9:d1:cb:
05:e5:1c:b0:5a:52:74:a9:dd:0e:51:2b:89:70:65:23:34:54:
92:8f:26:e0:9e:ca:fe:34:6e:4a:a0:7a:d9:ae:1c:76:e0:c3:
eb:31:15:cb:31:1a:15:a0:bb:39:5a:f2:8a:84:33:9b:42:17:
47:84:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:12 2025 by rpki-client