Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: 792+LdWABowVskArQft+t/sByKdU81wMsqW7ZiSSPSc=
Subject key identifier: 9C:42:71:FC:D6:9D:41:D4:AB:00:99:91:26:66:4C:E0:06:2F:FA:96
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 01967DC5ED4FF9A761FB1360DE8384CD6162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1202
Signing time: Mon 28 Apr 2025 19:00:45 +0000
Manifest this update: Mon 28 Apr 2025 19:00:45 +0000
Manifest next update: Tue 29 Apr 2025 19:00:45 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: ZnVB68Np6C5Tk5UmTTRVu8AJ4BN6/Fx2/2atiWIs/JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ed:4f:f9:a7:61:fb:13:60:de:83:84:cd:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Apr 28 19:00:45 2025 GMT
Not After : Apr 29 19:00:45 2025 GMT
Subject: CN=9c4271fcd69d41d4ab00999126664ce0062ffa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:54:eb:b0:87:69:05:31:c3:ae:69:4c:b0:
e3:22:45:0e:27:3b:ea:f8:a7:95:23:6e:65:3b:ca:
7e:7a:a9:54:f6:c4:e8:de:25:58:10:4b:92:52:b0:
9d:04:26:ac:36:5e:f9:cf:7b:c5:b1:bc:2b:d0:d5:
f1:cb:2f:dd:24:89:d7:f9:ea:b8:25:26:34:85:7c:
ab:3a:bf:51:0a:e6:1c:c6:41:6e:d1:68:25:a1:32:
70:2a:22:0d:e6:57:8d:fc:4f:a9:b6:35:79:cf:c5:
c0:83:fe:8f:b0:94:fd:cc:1f:3f:10:7f:7e:87:1c:
16:dc:eb:eb:ac:5a:ad:b2:e8:3c:4e:8a:06:2c:24:
77:b0:f4:13:12:f2:3f:97:67:f8:4c:52:62:e5:d1:
3b:be:bd:d8:86:c1:f0:49:ca:98:4a:45:80:64:45:
bf:0b:18:6c:3d:b6:5c:67:c5:22:37:55:b5:71:b5:
59:c7:2a:91:11:43:0a:4a:88:04:66:eb:e5:9f:4c:
a7:94:2e:26:90:fc:f4:7a:2e:dc:b3:db:cd:bd:61:
18:16:76:dc:79:8e:d9:89:67:38:11:b1:73:4e:32:
4c:47:74:4e:16:2b:4c:9d:66:79:38:12:71:28:26:
d4:5d:fc:01:60:54:93:95:63:22:6d:b6:7a:12:e5:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:71:FC:D6:9D:41:D4:AB:00:99:91:26:66:4C:E0:06:2F:FA:96
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:19:fb:01:7a:27:37:42:cd:06:6f:27:26:0d:7c:dd:47:5a:
a6:a3:79:f6:ac:77:30:e3:8d:bb:54:c3:f2:a0:9a:9c:7a:ea:
b6:51:6a:d4:c4:91:ef:7e:bf:ed:a0:bb:db:66:45:fc:50:0a:
7f:90:f5:b5:96:38:ce:4d:55:69:68:7b:62:eb:b2:34:67:c2:
69:96:f6:05:eb:f9:3d:c9:7a:10:93:2e:3c:c6:0c:a5:5b:09:
8a:a9:27:c8:50:9c:86:da:aa:2f:b4:96:7d:38:c9:48:26:6f:
4f:4b:82:5b:95:14:4e:7f:3f:58:82:02:ac:8c:b6:d0:b4:4e:
00:6b:ed:c0:e8:d5:a0:fe:08:50:4f:24:ff:f0:19:56:07:ee:
75:a0:4d:af:3c:df:97:c9:69:48:24:75:02:61:25:78:52:09:
ee:7c:c8:72:dc:57:31:4e:7a:5b:a2:09:06:bc:21:cc:dc:9d:
0f:63:26:12:a4:e9:02:08:b0:d2:9a:f3:c8:a5:60:26:c0:d9:
97:ec:95:ba:7f:9c:2a:a8:98:94:13:a7:ba:51:4e:b6:94:15:
d3:ac:95:3c:91:21:8e:af:2b:42:f4:d1:d7:d1:e5:89:00:6b:
db:bd:ec:1a:07:f9:5d:25:57:c3:d6:3a:70:48:56:32:8c:9c:
04:0c:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:17:50 2025 by rpki-client