Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: LdEbVOTMpl7ZwLj00K5TXNwHNRr4Vzp7sYMLWDu63Ns=
Subject key identifier: 38:E5:6C:99:BC:49:7E:E1:DC:A6:F8:FF:48:5B:0D:8D:A2:52:DD:52
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 01964FA31F85D13061F76E320FC2253A8A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1007
Signing time: Sat 19 Apr 2025 20:00:12 +0000
Manifest this update: Sat 19 Apr 2025 20:00:12 +0000
Manifest next update: Sun 20 Apr 2025 20:00:12 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: s4QO/G7RPw+VzT4ZMPR/6u/dgX8nLkrjvAfWkQNq96g=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:1f:85:d1:30:61:f7:6e:32:0f:c2:25:3a:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Apr 19 20:00:12 2025 GMT
Not After : Apr 20 20:00:12 2025 GMT
Subject: CN=38e56c99bc497ee1dca6f8ff485b0d8da252dd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:a3:ad:72:c8:58:01:12:08:ab:83:b9:bb:
ab:b7:3f:ea:99:b3:29:d2:3f:03:19:a3:75:7d:ab:
b2:87:97:b5:a4:d3:3a:87:f8:63:07:bf:b3:0e:92:
f6:07:07:28:7a:f8:ba:06:f6:f5:4e:52:56:27:7b:
8e:e9:a9:69:cc:4f:7c:b3:ca:43:8a:d5:8a:fa:f7:
a9:b9:00:3f:c7:18:f3:98:81:6e:e3:b1:fb:9e:2f:
5d:d3:8e:15:19:d2:40:f0:0d:1f:91:3a:52:e1:ae:
e5:27:77:70:bd:6e:2e:7c:67:05:14:97:e9:00:d5:
70:95:3c:df:9d:03:87:50:20:bf:21:ce:90:a3:e5:
68:6b:2f:a2:b1:84:c9:fd:36:17:11:9d:a0:f7:a0:
a1:75:4f:18:93:a4:b8:5b:bc:c2:1e:5b:5a:fa:f3:
8b:63:a0:e4:60:be:77:57:dd:a7:78:2c:4b:c4:72:
cd:be:ac:90:7c:ac:7a:ee:1f:95:fb:22:5b:81:4f:
18:02:0d:45:d3:5f:bd:4b:22:41:c3:64:a8:fe:44:
fe:ec:aa:86:51:3a:1f:e5:e1:68:53:5d:a2:87:03:
93:d2:03:62:cf:72:96:1b:fd:ad:f9:49:13:bc:81:
c5:a7:cd:d2:09:39:87:bc:03:40:71:46:90:d0:7b:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:6C:99:BC:49:7E:E1:DC:A6:F8:FF:48:5B:0D:8D:A2:52:DD:52
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:db:82:e6:61:85:da:50:5a:01:d2:54:42:7d:33:4f:ff:
f6:9c:02:74:5f:a0:ef:c7:70:96:d8:2b:79:17:2f:c0:d5:b0:
2a:1b:b3:17:83:ec:7a:6c:49:90:29:0f:db:b5:82:e4:8b:2c:
11:ac:58:2e:df:ac:a9:dd:db:1b:ce:60:e1:a2:0a:1e:d1:84:
f8:1c:37:52:60:50:33:61:97:2a:d5:a0:43:22:26:9f:29:83:
95:41:a4:83:8c:1d:c5:5e:61:2c:a6:f9:9d:2d:a4:c2:3d:e0:
7a:c9:75:1f:37:09:4e:0a:54:36:3f:09:03:67:53:35:2a:9e:
3d:61:e4:98:33:fb:16:0b:19:50:ab:02:e0:a9:fd:32:df:fb:
80:6e:b5:f3:66:b2:3e:f7:7c:81:db:9a:25:c9:dc:3c:2d:de:
c6:2a:fc:2a:fc:97:e2:e9:06:9f:12:a2:58:99:33:92:0d:50:
e3:71:da:cb:95:7b:c5:63:28:8b:e9:61:75:ea:86:51:04:30:
2b:10:e0:ba:b6:41:8c:63:48:56:10:a6:01:e8:ac:4e:9e:6c:
2d:a3:66:85:0c:c0:8e:8d:f4:97:56:1b:4e:c8:35:fc:9d:2a:
5d:e3:d8:f1:de:ca:ea:7e:bf:61:97:dc:60:91:59:d8:33:cc:
d1:5e:50:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:31 2025 by rpki-client