Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: z3XlJOnbRlCzhQ0qalFppzPmF7BPw2O4aPDGmrEB1SI=
Subject key identifier: C3:FD:FF:B8:AA:04:FC:BE:F2:03:0F:53:A8:C6:CF:0C:EF:D0:32:A0
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 01958B845CCECA113C533253DB5310093B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 18:01:02 +0000
Manifest this update: Wed 12 Mar 2025 18:01:02 +0000
Manifest next update: Thu 13 Mar 2025 18:01:02 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: /kPfAW3o/8hvkBA37QeL3QpKNwDlM6QvxknzPAJhr/M=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:5c:ce:ca:11:3c:53:32:53:db:53:10:09:3b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Mar 12 18:01:02 2025 GMT
Not After : Mar 13 18:01:02 2025 GMT
Subject: CN=c3fdffb8aa04fcbef2030f53a8c6cf0cefd032a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:56:21:4b:c3:57:2f:ad:a7:1c:dc:f1:12:
71:89:a8:6a:77:52:5d:93:64:cf:e6:7a:d0:5f:bd:
02:42:80:eb:30:cd:b1:87:f5:f3:1f:cd:d4:f4:9b:
f9:43:7c:5b:10:43:bc:a7:65:03:1f:a3:4c:53:ad:
2e:63:c0:26:8a:9f:12:b5:e7:9f:31:d8:a5:99:ab:
9a:54:7e:f2:1f:72:a0:6e:d3:fd:d5:d4:d7:e4:d1:
b3:5b:f7:e4:bd:a3:1a:87:89:66:43:06:39:49:c2:
a7:1e:1d:2c:f5:e1:e7:1b:2c:b1:d2:af:eb:86:b7:
b2:d5:e7:b4:e1:06:13:19:32:57:e1:7a:8b:d7:22:
82:e3:4a:b1:a1:c9:27:b9:be:db:9e:7f:53:cc:09:
69:a7:80:34:5c:68:ea:68:bd:c1:61:3c:25:bd:29:
b7:c7:ae:39:0f:2b:e3:26:c0:44:c9:ec:7d:3c:c9:
52:62:cd:53:42:d1:b4:80:f7:d8:3f:9a:70:3b:24:
ae:ad:53:c3:ae:b6:72:32:ce:4e:c0:15:d0:33:87:
a2:f2:57:20:d6:24:17:3f:13:d9:d2:ad:77:cb:a9:
c3:18:28:2c:a2:f1:ae:86:fa:b3:38:9c:21:92:0d:
1d:7e:ce:0a:ac:c2:d1:dd:86:9b:9a:5b:2d:1c:70:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:FF:B8:AA:04:FC:BE:F2:03:0F:53:A8:C6:CF:0C:EF:D0:32:A0
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:34:5b:b0:b8:2e:f8:79:e9:86:6b:9e:a7:04:29:81:5c:3c:
d8:2d:11:05:7f:09:22:4e:fa:df:c0:36:74:c1:10:eb:3f:c1:
a2:09:e0:9a:df:1b:57:8e:3d:cc:b5:d9:ca:2b:f8:53:fe:9b:
1f:d6:e4:54:09:cf:1a:97:f1:ea:85:08:7e:23:0a:48:9a:0f:
ab:27:88:ec:f7:9a:42:28:35:56:a9:f7:d2:c5:6f:d3:7a:ae:
52:e4:a7:f9:64:0e:3d:d6:61:53:07:1b:78:03:ae:ac:5a:ff:
7e:c9:f2:da:4b:89:6b:a2:ce:64:ac:bd:e9:83:44:16:f0:e0:
99:3d:79:83:22:24:6b:77:3c:0f:4e:4f:ba:1a:03:33:87:30:
26:37:56:81:b7:d1:fc:45:a9:26:20:b2:05:65:86:b7:43:94:
53:7c:8b:52:b0:d4:6f:c4:83:1b:a6:f5:90:94:a3:02:5b:2f:
c8:95:c2:46:01:37:df:c6:9a:51:c4:6d:13:d9:47:28:b9:da:
df:7d:9d:ae:59:ea:09:2d:b6:13:95:44:cd:36:bc:c1:78:42:
8f:e4:9f:99:5a:0f:99:a4:f6:e1:c3:16:78:18:d8:f1:8c:ce:
d5:1f:ae:83:ef:d5:7b:e5:a5:ba:92:d9:45:7f:86:7e:83:74:
f5:71:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:15 2025 by rpki-client