Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: KprwZXSavVIXKCTM0Sjj+iPHhLPYny7QJgwXIEa4zeQ=
Subject key identifier: E9:F0:25:1A:6C:66:17:30:98:5F:F9:AB:F0:F3:7F:C3:CE:F6:07:6F
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 01958EBCEFA641FB8AB44F40AE74895736DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 09:01:41 +0000
Manifest this update: Thu 13 Mar 2025 09:01:41 +0000
Manifest next update: Fri 14 Mar 2025 09:01:41 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: MSvT6e/0gMQrLtQsslaGR2rOR9sbZ/VtUKZC9YbT/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:ef:a6:41:fb:8a:b4:4f:40:ae:74:89:57:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Mar 13 09:01:41 2025 GMT
Not After : Mar 14 09:01:41 2025 GMT
Subject: CN=e9f0251a6c661730985ff9abf0f37fc3cef6076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:59:ef:b1:f7:8b:ce:51:08:27:80:9b:d5:
b7:0f:9f:10:98:69:99:2e:65:fd:9d:80:f8:9c:88:
fc:75:f0:4a:48:20:8a:a6:31:af:aa:aa:38:9e:6c:
41:4f:2a:52:02:6f:8a:0b:a7:95:de:b4:a7:0a:aa:
5f:8d:38:7f:25:de:c2:89:b4:e5:25:09:76:a3:8b:
3a:f1:2b:a7:fb:d1:63:f0:e9:e3:1b:54:f1:56:08:
17:0b:70:80:e3:7b:b3:b9:12:66:f1:f7:86:e4:f5:
c5:76:d9:f3:00:5c:a0:bd:b7:13:55:83:77:7b:de:
38:b4:6a:4a:8d:76:e9:cc:31:59:68:65:2c:a4:09:
7c:64:3f:25:51:b6:16:c4:c0:00:3e:06:eb:59:51:
a7:b0:6b:dc:ed:95:52:be:0c:f7:8d:12:8f:55:72:
59:0f:ee:8d:a6:a9:b8:7b:94:60:05:bf:d4:56:07:
5e:e0:75:7b:3a:54:d2:e9:9d:f8:f4:dc:1a:75:74:
52:f0:e6:d3:c8:56:81:54:58:33:01:31:e7:53:fd:
b0:b4:30:79:ff:1e:e7:78:7b:46:2f:0e:1e:41:2c:
1b:7d:3b:7f:ba:76:07:1d:a4:d9:0a:ee:c1:6e:70:
6f:36:a6:a8:bb:21:0b:5b:ba:6b:f4:2a:fd:cc:e7:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:25:1A:6C:66:17:30:98:5F:F9:AB:F0:F3:7F:C3:CE:F6:07:6F
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:9f:7d:88:17:d8:d6:57:2b:92:61:42:46:26:22:62:7a:
98:09:14:5f:1e:72:3d:85:2c:b1:74:8b:4f:c7:0d:49:b4:ea:
8e:47:f9:77:6e:d1:d6:f1:d2:59:bc:ce:a8:dd:a5:db:74:24:
c9:f1:03:a5:bb:37:4c:5c:86:44:4d:1f:88:1a:4f:93:29:96:
6d:7e:dc:bc:1b:b7:75:96:0e:9d:eb:87:4d:83:e5:61:f6:1e:
98:0b:55:9f:23:3f:d1:2e:03:39:e5:27:99:47:ae:c0:d0:bf:
55:d6:d2:57:21:99:31:22:84:ed:86:73:0c:b7:29:e3:18:26:
bf:a8:b5:c8:a4:5f:a8:b3:72:34:48:98:02:5e:db:a5:6e:59:
76:9e:44:dd:ce:c7:ec:ed:b5:92:83:f3:87:5b:05:ac:10:8f:
b6:37:31:47:15:1f:52:91:f7:fa:d2:c0:73:ba:a3:a0:7b:d4:
c3:d4:26:80:56:ff:f0:c5:45:76:67:c4:35:26:68:06:8c:51:
92:d6:af:05:b5:d5:30:9f:79:7f:39:17:18:d7:02:64:85:f9:
23:e7:01:27:54:62:98:c9:db:d3:48:3d:9e:cf:ca:b7:71:5d:
21:01:b7:b3:8f:38:f4:c6:64:51:4f:b9:12:5f:26:0a:65:f4:
e9:03:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:35 2025 by rpki-client