Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: P13aSoJC7ngC4+iUaFW+ECU+jcXkO0AdwR1KnVrvEfw=
Subject key identifier: 2C:24:BB:31:70:31:7F:CA:B3:2E:95:4E:92:B3:C0:5C:13:9F:E6:C1
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019652A47A074BA4A79CFFC5E05A8B97E221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 120B
Signing time: Sun 20 Apr 2025 10:00:32 +0000
Manifest this update: Sun 20 Apr 2025 10:00:32 +0000
Manifest next update: Mon 21 Apr 2025 10:00:32 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: Srg+5YDFvy+XQnYMzs7ZBd5QWDLLB4qoVmw81unwuQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:7a:07:4b:a4:a7:9c:ff:c5:e0:5a:8b:97:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Apr 20 10:00:32 2025 GMT
Not After : Apr 21 10:00:32 2025 GMT
Subject: CN=2c24bb3170317fcab32e954e92b3c05c139fe6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:64:fe:07:0e:e2:e6:e3:e5:6b:fb:5f:77:
0b:9a:f4:83:24:25:26:bb:9a:ed:ca:e0:67:4e:52:
a8:96:6c:ad:93:89:e7:50:d7:bf:28:53:4f:86:f3:
d8:6d:43:7b:b5:07:55:c7:95:ac:68:b7:16:84:2b:
23:93:63:d3:fb:12:da:e6:ef:f7:f6:fd:8f:78:5b:
8d:0a:c4:19:e9:4d:a6:f8:d3:3d:a8:ae:89:e1:c1:
7e:6b:42:44:06:1e:cb:6e:a7:24:1c:34:38:43:fb:
0f:47:82:fc:8f:45:0a:fe:da:f2:f7:e9:d8:06:05:
99:c7:9b:2f:5e:4e:98:cb:2f:e8:88:dd:5a:30:60:
78:b7:ea:35:02:3f:ed:b7:f7:d1:06:ed:ce:1d:42:
b9:fa:7e:be:0b:8b:5e:23:a3:6e:fb:c2:fe:3e:32:
76:58:8b:70:49:6f:4a:97:d8:da:65:7f:8a:1a:a6:
e9:fd:c8:b9:b5:53:72:3e:76:47:6f:12:2e:44:ee:
65:2e:2b:c2:b5:84:51:fe:74:f9:c7:10:9b:b7:02:
a3:93:c1:3b:3b:7f:89:c6:45:27:93:33:47:e2:7d:
02:95:63:d5:48:34:81:13:dd:32:9a:45:18:38:d9:
e2:24:cb:4c:1e:34:b3:30:60:e0:f3:eb:4f:3e:66:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:24:BB:31:70:31:7F:CA:B3:2E:95:4E:92:B3:C0:5C:13:9F:E6:C1
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2c:12:33:5f:59:6f:15:cd:9d:aa:4e:9f:02:a1:a3:98:be:
36:be:88:ea:33:6e:f2:7a:ff:79:a1:24:cd:b4:7d:43:c7:58:
e6:ba:b5:60:7b:60:eb:ab:12:9b:a8:ca:f7:ac:be:c3:29:90:
68:80:6d:3e:ae:0e:57:a0:5e:9d:7f:b2:49:a5:86:0c:98:a4:
05:11:c6:c7:b0:a7:2e:0d:69:a5:d2:55:17:95:e1:40:ab:2a:
35:b5:94:5f:a2:8b:01:6c:d1:66:38:d6:19:15:a3:38:1c:77:
58:d1:d1:53:46:14:2b:94:14:f9:aa:d4:77:9e:ef:8b:d2:e1:
13:f5:20:5e:ba:4c:0b:fe:42:37:11:6f:2e:19:1b:3d:6e:12:
fb:6d:5a:4f:fd:78:e8:44:3c:ef:be:60:42:5a:9d:94:a0:ee:
58:08:85:2f:55:05:35:ca:44:9a:20:48:57:f2:d5:87:51:8b:
53:6f:83:78:99:a1:2d:37:d6:85:09:1e:eb:85:3a:b3:76:23:
79:2b:8b:36:1b:3c:9d:2f:36:c1:b4:7a:35:61:9c:06:50:b4:
de:76:31:6c:4e:b7:de:09:27:ca:e3:53:20:12:5e:ae:1e:f9:
73:e2:42:11:34:b0:f5:43:c0:8c:09:37:39:94:b5:40:d9:05:
17:2b:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:22:15 2025 by rpki-client