Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: /0kuM+QyqtnpBRaOOKDFdzmwXl1BB15ti0My6MDRBKw=
Subject key identifier: 90:75:3E:FD:A7:93:5F:B5:14:01:8C:DB:58:7E:38:4A:41:3F:6F:2D
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01967E6AB31FE1AF4DFCA1EE47BE76950687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 120F
Signing time: Mon 28 Apr 2025 22:00:43 +0000
Manifest this update: Mon 28 Apr 2025 22:00:43 +0000
Manifest next update: Tue 29 Apr 2025 22:00:43 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: ThQFvqrZSfuB8Y/YBGMtBMBU0uzchoZMjJGpPVB3HKk=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:b3:1f:e1:af:4d:fc:a1:ee:47:be:76:95:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Apr 28 22:00:43 2025 GMT
Not After : Apr 29 22:00:43 2025 GMT
Subject: CN=90753efda7935fb514018cdb587e384a413f6f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:d2:57:ea:d9:6b:7f:1c:ba:4d:85:12:be:
c0:16:f9:3e:b7:4d:ac:75:49:5d:61:aa:4c:9c:04:
ae:ec:02:ab:b7:0d:82:13:b8:fa:fb:03:a8:a4:13:
1d:05:0e:63:d9:a2:48:30:26:64:a6:e6:7b:bf:21:
21:d6:e8:34:0e:99:24:e2:70:5d:dd:a5:b8:87:7c:
c2:41:9f:c4:c9:21:6e:97:64:a1:0d:ba:40:a3:6d:
31:c4:02:04:a0:98:03:e2:0b:c1:a7:b3:a1:bb:b9:
27:de:0f:15:b3:29:16:7d:02:1d:b7:dd:72:ef:9b:
fc:57:48:be:c9:be:79:79:f8:4c:6a:c1:0d:50:39:
b6:fe:46:37:e1:a4:e1:5d:76:09:6a:6a:f7:88:21:
03:55:f8:83:cf:aa:a0:a7:9f:81:03:71:1f:47:29:
80:9f:76:8e:87:6f:b5:72:92:9c:dd:8d:64:50:da:
41:20:35:ee:a3:3d:2c:1a:8d:66:e5:d0:aa:74:f6:
ec:5b:01:98:56:3d:0c:94:24:58:8d:84:b9:0e:c4:
8b:96:fc:d9:f9:2f:df:a1:2f:09:d9:72:b7:a1:00:
97:0f:3b:99:06:1b:86:d1:83:3e:e9:3c:16:7a:4d:
a1:50:f7:99:9e:69:c0:fd:ae:17:7f:da:df:16:72:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:3E:FD:A7:93:5F:B5:14:01:8C:DB:58:7E:38:4A:41:3F:6F:2D
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:79:f0:9c:e5:67:52:3f:08:a5:71:8d:20:25:4e:01:c7:
67:a5:0c:72:8d:2a:6d:36:db:06:95:68:e4:2b:dd:05:73:02:
77:c9:8a:8a:d0:0c:4b:72:f7:6f:7a:91:3f:1b:90:d0:52:a4:
11:26:9e:cf:b2:20:14:d3:83:19:4c:69:c6:6c:45:a9:2a:3c:
39:4f:e2:81:f3:5b:74:2d:4b:bb:1d:27:13:b3:95:aa:15:d3:
f0:9b:38:a9:6e:97:c6:c1:29:49:0c:52:0e:20:5b:72:54:e2:
77:bd:70:b6:ad:b1:3f:be:78:cf:31:c2:1d:a7:a5:3f:72:60:
35:03:6e:26:67:d3:d5:e6:fc:69:17:7d:6c:94:18:34:a8:c5:
45:43:be:e9:dd:0c:1c:47:02:0c:8f:b1:cc:72:ab:66:68:5a:
2d:64:73:0e:f6:86:72:f2:e4:e5:8a:97:d5:2d:49:8e:d7:46:
b1:4c:6a:85:c9:18:6c:45:de:6f:35:15:37:8a:b5:a8:ab:4b:
5c:7c:ac:58:4f:1e:62:e3:eb:a4:59:53:35:18:aa:33:4f:59:
cd:2c:da:db:6c:ba:0b:58:3f:7b:a5:37:ff:38:0b:a7:fe:d0:
97:52:b5:65:53:65:2b:0c:cc:8b:6f:2f:de:ca:d8:61:f9:32:
63:17:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:26:26 2025 by rpki-client