Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: bDx9yPiNBG8mDURbcNhCEWbfKZcc2RWFw4jEwa9NMaU=
Subject key identifier: A5:7F:55:30:39:F2:6A:16:25:8E:A2:25:64:52:B2:5B:25:A1:DC:53
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01962896BF68641456DECBE8CC6319F4286F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1520
Signing time: Sat 12 Apr 2025 06:01:30 +0000
Manifest this update: Sat 12 Apr 2025 06:01:30 +0000
Manifest next update: Sun 13 Apr 2025 06:01:30 +0000
Files and hashes: 1: 1a0sPcn4pmhhD6HGlGpxCJ-XVlY.roa (hash: a2pnK6j+am/bu5v21fphazd3b7PjB1w+G72ERblnw20=)
2: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: Fm2j8NoLdIJ255EKv4n5sRv9Dhf+BAb2ROFvuca9mgE=)
4: Kiw_rRXvEr3ukKKsQhrB4GqRftU.roa (hash: NIF23ooyYuT0FP+1LU5YHB5raA7/sRFIC/+274gQFO0=)
5: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
6: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
7: dbxrBkyZ0tq0ud2dYJnpzRMQOb8.roa (hash: DiDC1vRDYZKV7MhR9bmWUC8CTeGvGisDjrMVDZIxj4c=)
8: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:96:bf:68:64:14:56:de:cb:e8:cc:63:19:f4:28:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Apr 12 06:01:30 2025 GMT
Not After : Apr 13 06:01:30 2025 GMT
Subject: CN=a57f553039f26a16258ea2256452b25b25a1dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:e2:e8:6c:27:8d:63:60:56:6e:1e:51:01:
13:52:1e:ee:56:4d:a8:f8:f6:3f:b8:a2:7c:23:09:
91:71:e6:29:36:d7:27:e5:7d:67:96:33:8a:0b:d7:
58:9e:5f:e3:10:0e:26:a3:4c:1b:33:20:32:98:e0:
49:9d:23:0e:35:70:9e:29:9c:a4:37:a7:16:61:46:
8a:63:e3:20:be:5f:2f:37:8f:52:dd:cc:ff:4f:0a:
6f:1a:df:f4:07:01:1a:b0:37:81:90:a4:50:b0:3a:
ff:97:35:26:43:d0:39:84:38:52:dd:cd:36:08:0f:
19:4b:be:69:58:ab:2a:5f:37:c7:20:dc:8c:8d:da:
ba:29:63:f6:65:33:63:4b:0b:38:8c:00:cc:f9:f3:
c0:36:40:2e:ec:19:9c:54:cf:54:51:b2:1e:83:cf:
51:9e:c9:63:33:db:ea:a7:d5:f9:b3:1b:c5:7c:49:
35:f2:86:ba:1f:33:20:fd:2d:29:dc:52:dc:85:ca:
6c:a7:3c:d3:4c:7f:72:6e:fa:6b:00:b5:77:b8:1a:
09:c6:76:6b:b1:5c:1c:d4:39:10:30:90:fa:b5:56:
11:7d:56:06:fc:88:da:3e:7b:44:a0:59:28:a7:82:
a2:aa:43:6c:1c:c1:7a:ed:4f:05:78:86:86:bf:e0:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:55:30:39:F2:6A:16:25:8E:A2:25:64:52:B2:5B:25:A1:DC:53
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:b7:a6:b3:2d:9d:4e:c3:76:54:ef:63:8a:d2:e8:52:ff:
c0:f4:20:48:de:85:2f:0c:48:cd:69:89:24:a3:46:bf:bc:1a:
b5:49:9d:6b:07:e1:06:e6:ec:4a:4c:b2:21:05:7f:54:3a:38:
8b:f5:72:b2:d7:e2:39:a6:ad:49:03:5b:fb:5b:5f:ac:55:84:
42:cf:49:94:68:a2:c2:19:b4:d2:1f:20:5c:5c:be:75:81:15:
db:c7:d6:32:31:49:83:9b:b4:1f:a8:21:07:12:4e:c4:f6:37:
e6:1f:76:0c:9b:2d:64:dc:e5:96:f0:30:ee:79:66:dc:99:1c:
e0:f6:17:d7:18:04:29:92:09:89:f3:db:56:9d:79:ec:f8:11:
b4:0e:63:c0:15:4d:df:a9:8a:4b:56:61:dc:25:c7:04:21:07:
f2:45:08:ea:02:68:75:c2:85:2d:a1:c6:a8:c1:2a:96:eb:3a:
2a:1d:1b:a2:7b:49:16:78:97:35:ce:0d:6f:cc:eb:3d:98:74:
0f:6e:ee:c2:2f:6b:42:f6:f6:aa:03:73:28:14:3d:91:3f:99:
86:46:8c:45:2e:08:1f:16:44:61:d5:bf:3f:84:01:92:84:e3:
d0:09:52:50:a4:15:ae:11:90:90:39:75:00:0d:8f:c4:54:41:
b6:12:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:01:51 2025 by rpki-client