Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: rwXbeg4kJbj3I/qQDA0oXaZqnmmdDQw8kldu2GOkcGo=
Subject key identifier: 15:15:62:A2:C5:1A:BD:D4:49:B9:30:27:84:67:97:D5:CA:81:97:28
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0196575CF5C91E512B5FF334CE67CEEC864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 01D3
Signing time: Mon 21 Apr 2025 08:00:31 +0000
Manifest this update: Mon 21 Apr 2025 08:00:31 +0000
Manifest next update: Tue 22 Apr 2025 08:00:31 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: cxbEo2YhK8iLm5VlJLUQl6vYhLI9lvXypCibuMpQ4J8=)
2: W8kldn3kdGYqCFVL9Vj-_yMc_YQ.roa (hash: GEboFATMOMt3GSxR34v0QsuLahbz9VbOcfy1sr+D47k=)
3: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:f5:c9:1e:51:2b:5f:f3:34:ce:67:ce:ec:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: Apr 21 08:00:31 2025 GMT
Not After : Apr 22 08:00:31 2025 GMT
Subject: CN=151562a2c51abdd449b93027846797d5ca819728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:89:06:bf:57:56:d7:05:40:96:17:51:e6:
b4:f2:fe:96:37:a2:4c:a9:42:8a:0b:6e:34:cb:7e:
46:69:eb:94:6c:6d:02:de:2f:b5:4a:b0:fd:c8:45:
cf:15:79:77:85:df:0c:3b:7e:fc:7b:f5:55:97:04:
62:9f:cd:69:19:26:f6:65:bc:78:f9:18:b6:13:3a:
3f:57:3a:7f:46:74:5a:3e:e8:40:89:4c:76:b4:8d:
d0:a4:21:70:43:ae:7a:14:19:d5:9e:88:17:86:bf:
4b:ce:43:37:0f:78:0f:b0:21:5c:f6:49:99:f0:07:
5d:02:f7:9b:75:cb:14:60:b4:14:b3:c9:9b:7f:b9:
26:11:ff:18:40:0c:9c:c3:6f:a6:79:a4:ef:a6:56:
7e:e1:21:a6:96:c8:dd:0f:43:99:2b:71:5b:d0:63:
5f:aa:af:6b:a0:15:ec:d2:39:2e:9e:c6:bb:c8:fe:
dc:f6:64:9b:7e:6d:2f:b6:90:d9:53:a5:8a:62:bc:
11:b4:62:58:08:3e:3e:79:f5:ab:fb:7d:aa:d5:88:
77:a2:0b:de:c6:02:eb:ac:b0:e2:4b:7c:97:29:5a:
71:20:bb:82:a2:7d:af:bb:54:bf:0d:a6:32:86:8f:
74:84:b3:03:b4:de:99:68:63:10:a5:37:b3:ea:ec:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:62:A2:C5:1A:BD:D4:49:B9:30:27:84:67:97:D5:CA:81:97:28
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:f6:63:26:ff:a2:f4:29:fb:54:b0:ba:5c:6c:2d:97:4a:
04:42:91:73:f6:f2:07:38:da:eb:4d:8b:56:bb:ae:d2:5e:d4:
5e:d9:3c:d7:d6:79:c0:6c:b3:05:c6:24:ee:c5:f9:10:85:64:
09:c8:c0:34:7c:8f:a5:04:73:f3:ce:ad:39:b2:74:f3:76:05:
1f:23:00:6c:12:a4:f5:fe:36:66:89:0a:35:98:6d:e1:1a:24:
ef:d7:dd:a6:34:f7:43:6d:5e:59:14:d2:66:eb:21:ea:8a:29:
0b:c4:7e:87:e0:df:13:95:9d:be:ff:07:8c:e0:09:96:04:00:
32:36:55:6c:f6:e8:17:47:07:7d:56:4d:7c:29:bf:77:7c:5f:
67:d7:5b:9b:51:0b:89:61:5d:04:b8:49:d6:99:4b:e6:00:ae:
3f:c7:d1:61:b2:46:6e:37:4e:d3:6f:6a:53:c5:57:f9:ad:19:
b7:61:70:77:64:89:b3:a2:ea:0c:b3:7d:be:48:d6:00:76:4e:
13:81:3e:82:9e:38:2e:8f:30:3c:76:4c:bf:25:72:f5:8a:74:
7a:ae:af:a2:bd:8c:e3:45:b2:d6:42:48:83:26:05:d6:28:1d:
88:64:fb:40:eb:0c:cd:f4:d9:a2:92:b1:e4:11:79:f6:4b:d5:
70:77:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:45 2025 by rpki-client