Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: M8/is6ABER89W2Nrdyo4oisbSVbFGj8l4wOFi3hFUMo=
Subject key identifier: B9:8E:69:CA:BA:27:78:FF:26:4F:29:22:C0:BE:05:5D:BD:7B:6C:AB
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019676E84F1BB26C1AC79D7C0217E7621041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 04DF
Signing time: Sun 27 Apr 2025 11:00:58 +0000
Manifest this update: Sun 27 Apr 2025 11:00:58 +0000
Manifest next update: Mon 28 Apr 2025 11:00:58 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: aq4dvMKFRaQBZqkRTVzvpHTEym+ZTje2PGpHu8n9K7U=)
2: M9VdnF4uhv3S8ynJo1kTEBW1AUE.roa (hash: wgWraMBXBDnGqGgz/A6JsNtS6LmlDAkjX4m8FBkaGn8=)
3: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:4f:1b:b2:6c:1a:c7:9d:7c:02:17:e7:62:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Apr 27 11:00:58 2025 GMT
Not After : Apr 28 11:00:58 2025 GMT
Subject: CN=b98e69caba2778ff264f2922c0be055dbd7b6cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:21:10:53:7f:5f:69:c1:64:c8:6c:cf:58:
36:28:cc:dc:3c:c9:29:5d:f0:1e:1c:24:e1:d0:e2:
3d:02:fe:7d:40:fe:bf:b4:4a:78:b4:7a:c7:37:0b:
1e:b7:9a:57:c7:42:34:17:d0:44:57:e9:da:f9:9d:
01:35:f2:ac:04:e8:30:90:7c:db:38:ab:28:f6:17:
4c:2b:bb:30:e1:90:41:cd:1b:57:ff:c6:3c:81:8c:
48:83:a3:24:3d:55:97:08:1b:49:89:46:60:92:45:
9b:3a:9e:d3:20:1b:fd:28:5b:a4:28:2f:ad:17:d9:
3f:f8:03:36:a9:d0:f2:f5:29:6c:68:27:1b:23:d4:
1b:23:36:3a:bb:19:33:5a:ac:76:78:58:00:1a:4c:
9d:e3:96:c0:6d:84:4f:55:0a:95:7a:45:32:ce:2a:
ac:80:3c:48:f3:ba:f5:e6:df:0b:b6:8c:1c:d7:37:
9d:4b:45:1d:9b:6f:22:90:3f:7a:4a:9b:7f:be:c2:
49:ad:1f:59:a4:f3:8c:79:b5:22:4d:91:24:f2:7e:
6d:a1:ae:a6:06:6c:7c:80:a1:21:70:c8:04:ff:60:
e6:56:37:3a:14:49:9a:3f:0b:f0:ca:8c:56:28:30:
b6:95:43:a5:b3:4e:f0:f7:25:e1:72:99:13:9e:85:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:69:CA:BA:27:78:FF:26:4F:29:22:C0:BE:05:5D:BD:7B:6C:AB
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:4a:ad:a1:20:a7:ef:52:1d:e7:1d:3b:a1:d1:a7:76:17:
52:0d:68:b0:dc:e3:cd:59:17:26:8a:70:a0:40:80:e6:4f:62:
0d:18:d7:60:7a:29:7a:8f:ea:0c:cf:77:3c:0a:3c:96:f7:6d:
45:b4:5b:2e:55:71:59:49:68:5f:a1:c2:c4:4d:64:fa:a3:4a:
93:07:41:1f:d2:49:ec:a1:d9:ca:b7:13:f3:ea:c0:0e:c5:16:
32:02:78:72:db:6f:a9:bc:76:d2:dc:83:ec:22:8e:83:4c:5e:
39:dd:c1:6a:bb:c3:fe:21:03:70:8a:0a:bf:ea:4b:50:1e:4b:
f2:60:25:05:85:28:83:cc:8c:77:7d:bd:c1:2a:ba:a6:6a:51:
fa:13:d0:89:5f:3e:e5:e8:c0:7b:52:d3:f4:75:82:a9:b4:74:
a9:b9:15:7b:78:38:56:79:7a:51:d7:49:b0:b7:d2:ae:18:51:
aa:31:2c:f4:3e:87:76:09:4c:c8:80:f6:8f:86:3d:79:c3:fa:
78:31:de:9f:cb:73:95:e7:0a:9e:64:33:a9:07:ec:f2:d6:22:
46:35:91:f7:87:bf:bf:00:a6:80:88:4d:e4:f8:ed:84:e2:f7:
0f:91:19:87:74:5e:ec:99:0f:bc:01:ee:ea:b3:2a:b9:28:41:
dd:86:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:03 2025 by rpki-client