Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: y2GanONMv8o2M5Srk3Y8LlE78togyJ+Rg3D7s4vGBB8=
Subject key identifier: BD:47:34:52:10:F4:60:AE:96:BB:3C:AB:AD:91:E3:32:11:E2:23:71
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 01968E82C488DA2CD6EED34BC22057CCDC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 01:00:56 +0000
Manifest this update: Fri 02 May 2025 01:00:56 +0000
Manifest next update: Sat 03 May 2025 01:00:56 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: 1A1yCGHSvFh/LhW6EvRekpX4u/OvLsCWJTVAa+Z+xaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:c4:88:da:2c:d6:ee:d3:4b:c2:20:57:cc:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: May 2 01:00:56 2025 GMT
Not After : May 3 01:00:56 2025 GMT
Subject: CN=bd47345210f460ae96bb3cabad91e33211e22371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:fb:3c:ec:e7:05:0d:be:72:cd:14:67:d6:
0b:08:d5:ac:22:d0:49:db:8f:80:08:da:43:01:23:
d1:54:11:9b:98:e0:63:66:f7:55:76:78:c8:45:1c:
73:61:32:82:3f:35:4b:db:76:54:6a:3f:f7:d2:b4:
ab:2c:be:e6:c9:dd:88:36:50:80:d9:e0:38:7f:72:
33:b4:29:7b:7d:38:eb:92:0e:9e:c0:e3:75:d2:76:
6a:5e:8f:53:b8:a0:22:7d:03:c8:ba:88:b8:e8:6c:
81:0a:91:22:6e:e6:1a:e2:8c:b5:fc:90:7b:28:7e:
c3:b3:1f:fd:af:56:d3:11:f7:c5:2a:1a:74:2b:5a:
d5:0e:b5:57:89:c3:e1:4a:14:77:7a:f8:8c:8f:76:
03:3b:53:55:51:bf:48:21:2f:26:5f:c2:30:65:63:
09:75:c7:0f:25:48:51:26:5b:d3:2a:18:29:9d:39:
b5:d6:93:3a:67:d1:53:53:92:8e:18:15:a0:c4:58:
80:81:0a:50:01:97:36:0f:92:0c:28:19:e5:6d:e6:
e7:92:06:8e:63:e4:1f:df:08:fd:8a:55:f7:85:4c:
08:d4:ec:28:7c:84:50:9f:3d:46:dd:0b:04:1f:36:
c1:e7:f9:16:51:b4:4a:e6:13:e1:42:7c:9d:6c:e7:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:34:52:10:F4:60:AE:96:BB:3C:AB:AD:91:E3:32:11:E2:23:71
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bc:f3:33:dc:f8:0c:e9:ba:01:f5:f5:ab:8f:8e:57:01:f0:
84:88:59:14:80:71:21:96:ed:0e:cd:ea:91:14:d6:56:97:a0:
c9:67:ec:d8:17:dc:05:b1:4f:da:f8:c8:8d:b2:be:a1:d0:e5:
46:a8:ab:ff:b0:5e:12:57:33:e0:e0:4e:f9:c8:1c:55:a5:06:
38:03:b0:13:8c:aa:95:cd:20:b5:b9:43:c6:b1:13:ec:6c:5b:
c8:8d:a9:a8:a2:ba:43:4f:a8:07:0f:db:3c:7b:a3:55:f2:d2:
34:71:18:d2:47:82:33:9f:e7:3d:b4:47:4a:f3:28:c2:ee:59:
41:d8:14:c3:a0:6b:30:b4:b7:60:ec:ed:d0:5d:7f:53:af:6d:
79:f8:4b:07:54:50:80:b4:4a:30:5b:52:68:2a:a2:94:4e:ff:
ac:e1:7c:09:0d:ef:cc:2d:e1:8e:79:14:b1:35:bb:68:c3:fb:
cf:7f:36:06:db:e0:fc:20:3b:4d:64:f4:fe:e7:76:fb:5d:55:
3f:fb:58:01:f0:65:c9:ce:7c:35:ea:2d:59:bd:0a:74:04:2e:
9a:84:41:38:59:0e:26:c7:f5:d5:50:86:87:50:ad:69:2d:a0:
a0:6c:ba:27:c3:9b:dd:80:9f:1b:ff:f8:ed:f9:1b:44:5e:7a:
74:77:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:19 2025 by rpki-client