Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: kJ8a/RQzr53/hfj/QeW92JHNQb45uJtH9TNnj+ROrkg=
Subject key identifier: B9:38:BB:FE:D1:2B:B0:4E:70:F6:2B:AA:D2:A4:6C:6B:8D:69:23:3E
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019682471FAEE9088047BCB0721F114C65E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1211
Signing time: Tue 29 Apr 2025 16:00:21 +0000
Manifest this update: Tue 29 Apr 2025 16:00:21 +0000
Manifest next update: Wed 30 Apr 2025 16:00:21 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: LXkHJpi2lptqPr0Q7dQohqjDxS7OEzS+T37JKblmynI=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:1f:ae:e9:08:80:47:bc:b0:72:1f:11:4c:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Apr 29 16:00:21 2025 GMT
Not After : Apr 30 16:00:21 2025 GMT
Subject: CN=b938bbfed12bb04e70f62baad2a46c6b8d69233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:fc:d9:b6:51:d6:51:8d:fa:a0:c5:56:1e:
ae:2f:41:58:02:b4:e2:f0:ee:95:d1:71:9a:8b:92:
12:53:48:3f:fd:ab:b8:6b:84:b0:d5:de:8a:03:6e:
ad:89:3c:64:af:bd:00:96:c4:81:16:f7:fb:67:2d:
c4:d8:9c:ff:3d:3a:88:84:33:49:e6:c3:15:85:82:
b1:b8:d0:6c:ee:1b:65:86:04:95:b4:bb:95:87:6d:
dd:78:cd:0d:6a:1a:22:4d:0e:03:ba:c8:77:fc:fc:
66:87:91:9e:ca:c4:27:f0:cf:09:de:62:c0:88:d1:
b5:80:90:4d:31:1b:22:9e:16:83:f8:f7:1f:e6:44:
3e:c6:1d:12:59:10:72:5b:d3:09:fc:36:35:f8:bc:
d0:91:5d:e7:15:7c:b7:4d:61:ee:71:97:50:a8:e4:
2d:27:17:d4:d2:c4:c9:55:07:e4:24:c4:78:7d:56:
dd:25:c9:2e:df:d6:02:fa:4e:f9:41:8b:54:89:ae:
db:08:eb:06:ba:6a:fc:a0:26:80:65:39:fd:61:34:
a4:05:60:21:e5:28:52:a0:e3:9c:9c:2a:6a:36:67:
18:ae:12:d8:50:9a:d5:bd:c2:41:b5:2b:e9:83:d6:
f4:a3:23:13:fa:5d:a9:1d:fe:cd:97:f3:e2:95:b7:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:BB:FE:D1:2B:B0:4E:70:F6:2B:AA:D2:A4:6C:6B:8D:69:23:3E
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:53:1c:a2:37:f2:3b:07:4a:37:9e:e7:00:51:db:20:fc:
fa:b4:29:c1:16:7f:67:f6:c7:0f:1d:9a:c8:e4:a7:62:0b:9c:
29:ae:d8:11:ef:91:f7:b2:f9:95:eb:c6:91:dc:87:df:63:e4:
cf:07:1e:59:9d:6d:60:c6:55:8a:de:03:69:7b:c9:d9:0b:f3:
96:95:45:e9:c8:5c:64:fe:d1:ed:5c:c3:d6:b0:81:3e:54:c5:
ca:11:35:b1:c1:01:8b:26:ed:38:7b:70:f7:f4:58:8c:dc:68:
62:6f:1a:34:3a:e9:68:0a:aa:54:d5:00:de:32:b3:4d:6d:07:
65:e0:0b:40:ac:0d:49:e9:20:e1:f7:5d:06:9f:73:ab:92:82:
79:aa:73:9c:42:29:4a:34:e2:80:27:b9:6f:75:b3:db:26:df:
08:c4:72:67:7e:69:a0:e9:57:44:c6:a5:54:9d:0f:58:15:f4:
99:6c:b5:0e:65:99:de:fb:a8:72:36:7a:3d:3f:53:80:be:ff:
5a:81:08:11:c3:6e:a4:b9:27:ab:02:49:3d:b9:3a:dd:14:dd:
67:bf:e7:f6:38:8f:4b:6e:7b:da:8b:1a:bd:f0:3f:71:c5:65:
e4:ee:e0:aa:9d:6e:ec:c5:a3:0e:f4:71:8e:c1:52:0e:2f:00:
d1:65:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:15 2025 by rpki-client