
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: wSMcipWMYri3QDZX0OaYxGT+QlkKLvrrh5LTc4bt8NM=
Subject key identifier: 1B:53:B4:23:4F:D3:D7:3B:DA:F8:0E:6C:30:C3:67:F4:C0:FC:C5:80
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 01967342476EA47B35559570350E886B4DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 1061
Signing time: Sat 26 Apr 2025 18:00:45 +0000
Manifest this update: Sat 26 Apr 2025 18:00:45 +0000
Manifest next update: Sun 27 Apr 2025 18:00:45 +0000
Files and hashes: 1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=)
2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: iZK8l3fMyOugmXOKVfAN7KRgYCaZRPoitzwHWypu1e0=)
3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=)
4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:47:6e:a4:7b:35:55:95:70:35:0e:88:6b:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Apr 26 18:00:45 2025 GMT
Not After : Apr 27 18:00:45 2025 GMT
Subject: CN=1b53b4234fd3d73bdaf80e6c30c367f4c0fcc580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:33:20:96:f7:dc:b1:ec:4f:b2:40:2b:a9:
4f:a8:f1:d9:a0:ea:21:64:96:4b:79:aa:37:97:c1:
0d:27:e5:36:ba:89:df:bb:96:ab:78:ee:cd:5e:59:
75:e9:19:d5:11:c6:96:af:36:d6:22:3a:02:95:ad:
87:c5:a6:26:46:83:fe:e1:17:df:b9:e8:eb:e3:62:
49:31:67:6c:68:25:06:a4:de:ae:a3:08:fd:d9:d1:
21:77:4d:03:de:3f:df:27:70:39:be:1b:3b:5b:24:
86:42:c6:2b:5f:5d:01:85:95:f3:5f:30:99:bd:6c:
dd:b2:8d:8f:72:48:00:04:12:a8:02:df:5e:2a:8f:
de:18:30:e9:af:ed:64:79:d5:a7:6a:c3:f2:7f:c9:
11:94:cb:93:35:14:1c:3d:5d:69:ce:29:f3:98:4c:
bd:ec:12:47:34:1a:fe:96:2c:7c:98:9a:a5:46:06:
0d:19:18:53:80:3a:92:7b:f7:34:65:39:0d:9e:ba:
48:7a:6b:f9:e1:a9:10:59:a1:4a:90:05:7d:57:28:
81:83:81:92:09:7d:99:5e:b3:4f:37:d5:35:59:5c:
ad:33:b2:ba:b8:26:e4:44:93:1f:fd:06:d7:4c:0a:
a8:e0:e3:11:a2:40:97:21:13:d2:6e:4f:46:7b:b3:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:B4:23:4F:D3:D7:3B:DA:F8:0E:6C:30:C3:67:F4:C0:FC:C5:80
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:61:c3:f0:0a:bb:3f:e8:f3:d2:e9:2b:69:70:ed:e9:36:00:
77:38:9e:83:1c:af:ef:2b:70:ec:83:fb:b6:12:84:06:59:80:
08:42:2d:e0:bc:11:0e:29:cf:ce:72:5d:cb:5b:2d:97:4b:73:
53:d6:4e:b1:52:2a:48:53:38:14:a5:a6:c5:f6:9c:b1:96:fa:
ef:03:44:9a:49:d2:f2:d7:7e:cd:16:38:63:f7:19:d8:9d:7f:
f8:b4:eb:1f:9c:9b:71:a5:b9:9d:bc:b3:17:5a:c1:c1:f1:68:
86:9b:01:84:cc:a1:4c:1e:95:c2:e6:d9:fe:5b:97:d0:e5:2b:
fd:50:44:de:a7:5d:3d:f0:8e:a7:b1:74:6e:ad:4e:b5:2c:fc:
fa:f8:18:2b:b6:57:b0:93:8f:1a:a2:1a:77:fd:d0:b0:71:ec:
bd:6b:d0:a3:e2:5a:79:ab:6a:c6:37:6c:2e:63:97:5e:93:5c:
37:7a:81:b0:d7:ca:e7:41:78:9d:54:da:e2:7c:08:fb:ec:04:
27:04:e3:1e:08:c3:88:e8:4c:ce:c2:3f:78:51:fe:50:a9:7f:
f2:c0:d7:f1:62:29:5c:cd:2e:11:44:2e:a0:71:c0:af:75:2b:
3d:83:d0:61:5e:32:4d:f2:b0:25:56:04:7d:fd:4f:b3:26:88:
e0:4a:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:52 2025 by rpki-client