Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier: ccQq728mgDS1mGPBH9s0ryD7Yzj0lsPnUHYmdnKnSeU=
Subject key identifier: EF:EC:4B:13:1C:13:94:9A:3F:F8:A3:8C:BA:0F:90:46:38:2B:9E:8A
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 019682EC336876A2131F69F20A25EFDE9107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number: 0B98
Signing time: Tue 29 Apr 2025 19:00:39 +0000
Manifest this update: Tue 29 Apr 2025 19:00:39 +0000
Manifest next update: Wed 30 Apr 2025 19:00:39 +0000
Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: l3HwSyp5PTgM6R60b+7G36RmbbfhorwRRKpNxW2V3QE=)
2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:33:68:76:a2:13:1f:69:f2:0a:25:ef:de:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Apr 29 19:00:39 2025 GMT
Not After : Apr 30 19:00:39 2025 GMT
Subject: CN=efec4b131c13949a3ff8a38cba0f9046382b9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:4f:33:e9:28:21:49:d3:37:1c:45:51:58:
27:ec:90:1a:ce:77:b8:a0:d5:b8:eb:d2:83:1e:4d:
15:bf:60:17:f2:f1:de:4d:2e:ba:23:5d:f1:78:17:
e8:82:e5:68:a7:85:d1:07:9f:b8:fe:42:85:fd:de:
77:a7:f8:33:06:3a:0d:90:61:09:21:d7:87:b5:35:
ae:d7:98:85:41:3b:cc:1d:fa:c5:ee:64:f1:93:f6:
7c:3d:d9:5b:bc:e0:07:6f:0c:2a:3b:eb:ce:40:59:
1c:8d:1d:48:80:b2:f2:e2:3e:ee:a9:73:6c:12:54:
cb:21:e7:b0:ea:7e:fd:82:ff:4f:af:2a:b7:60:6d:
ca:30:af:1a:31:9d:bd:65:3d:3b:28:52:9d:ab:23:
f1:d0:40:17:de:94:c2:16:74:b7:72:9c:dd:0e:f6:
13:23:b2:01:a1:4f:c4:ff:c4:ec:c4:de:b5:39:f0:
90:d2:ef:28:3c:0e:c1:65:9b:ad:46:8f:21:e6:d3:
94:ca:66:3f:13:98:36:a3:79:77:4e:d5:e6:a6:47:
5d:e3:2a:61:69:4d:6d:8b:c4:58:e5:ed:10:a8:22:
1b:1f:59:26:18:c4:ac:72:87:45:4b:21:75:a9:36:
9d:03:01:2c:97:1d:9f:6f:76:dc:47:d7:1f:2f:68:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:4B:13:1C:13:94:9A:3F:F8:A3:8C:BA:0F:90:46:38:2B:9E:8A
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a6:f7:fd:41:36:92:51:4a:f1:b6:04:3e:4a:4a:85:86:d7:
dc:43:0b:ef:0e:45:95:06:47:1b:4c:3a:83:9d:ee:76:0e:22:
4f:c9:0e:e3:77:7f:e3:95:76:2a:2c:cc:dd:cf:77:21:f5:4a:
3f:ac:3e:d2:ef:de:e6:69:4a:79:5f:fa:1c:89:57:e8:44:1c:
a9:b6:37:86:3b:fa:e8:03:42:04:ce:95:15:9b:cb:95:6a:4c:
9a:f6:f4:57:93:b6:2d:b7:ad:f7:63:63:29:6e:59:f5:1c:8a:
9d:36:3a:73:42:b5:00:ea:2c:2a:bb:45:e5:4e:74:4d:03:96:
24:63:ae:00:1a:de:9d:77:e8:cc:41:12:4f:aa:03:a2:2c:12:
02:ab:99:a5:50:dc:a8:c8:ce:a3:a8:7b:6a:92:e3:39:c0:d0:
88:94:cb:f1:ee:5e:08:01:87:0b:2e:fe:37:3a:ab:f8:78:14:
cb:7f:ba:a2:6f:52:f2:46:9c:8e:01:73:63:ad:f3:b2:c9:a6:
cd:75:c8:73:d8:3b:77:cd:b9:52:ca:dd:f8:78:84:c6:36:26:
74:48:ab:43:97:8c:70:95:68:6c:7f:df:8f:76:73:ce:82:17:
39:ac:74:94:0d:82:3f:ce:7f:10:9c:38:1a:f9:20:0b:85:8b:
87:1c:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:29:10 2025 by rpki-client