Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: 1MIrt73P6LGBKhB8cC6zgOLvpYEF/WNQCC3IlKxAd2Y=
Subject key identifier: 12:46:13:27:FA:7E:98:5B:8D:FF:CD:62:9D:94:71:F8:C4:17:AE:F6
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 01967EA1F4DE8C5ACB8D87E483AB8BE4D347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0250
Signing time: Mon 28 Apr 2025 23:01:05 +0000
Manifest this update: Mon 28 Apr 2025 23:01:05 +0000
Manifest next update: Tue 29 Apr 2025 23:01:05 +0000
Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: IiLqI66yreuAuHQpzP2ED2sjAGIr8YiOwgBAClvVLvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:f4:de:8c:5a:cb:8d:87:e4:83:ab:8b:e4:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Apr 28 23:01:05 2025 GMT
Not After : Apr 29 23:01:05 2025 GMT
Subject: CN=12461327fa7e985b8dffcd629d9471f8c417aef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:2a:d8:aa:2a:46:0a:f5:82:7b:58:d4:94:
23:26:b2:06:5d:4e:eb:46:68:08:9d:87:8b:b3:57:
c3:fa:64:fb:58:3a:4d:74:9e:07:c4:51:b6:6e:70:
db:9d:b1:ce:58:0f:d7:9a:df:50:b3:18:54:8b:89:
9f:32:c8:66:ab:1a:25:4e:7f:ef:71:36:e8:31:17:
f4:e0:e6:6e:c9:0c:da:ae:01:b3:3a:9d:53:7b:e5:
77:f6:1d:f5:82:b8:34:90:d0:c0:90:8b:59:ae:52:
7e:ac:85:09:f7:af:55:8e:7b:bd:a1:69:c5:1e:cc:
a8:0a:f6:26:49:d0:8d:ea:c9:95:f7:02:2c:f4:9e:
21:28:27:46:e5:41:a3:34:69:4b:11:4a:8c:97:8a:
0c:46:36:2a:8e:53:91:5b:f1:f1:a8:8b:9d:9f:49:
18:6e:7a:a5:38:d5:b5:ed:6b:07:d5:8e:18:c7:92:
a5:05:50:1e:6c:ed:86:1a:ff:60:f8:bc:c4:0f:aa:
b4:d3:68:de:7e:6b:b1:89:53:ab:66:9f:37:42:15:
08:fb:51:bc:a0:dc:16:3c:ec:31:3f:d0:cb:cd:9c:
8a:f9:b8:05:55:92:96:ee:2b:cc:a9:13:42:a2:ca:
34:22:9b:b2:b3:0e:eb:19:f8:cc:d0:c2:33:64:84:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:13:27:FA:7E:98:5B:8D:FF:CD:62:9D:94:71:F8:C4:17:AE:F6
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:fa:90:6c:d5:33:d3:48:9f:c0:93:51:da:6b:94:e9:be:
23:f9:f9:cf:e4:4d:1f:e2:ec:28:07:f3:f9:c7:4d:0e:06:b7:
9a:9b:7f:5d:c3:ac:8e:56:c5:d6:a0:82:01:a2:d6:fe:84:bd:
a0:cb:c2:af:08:04:80:6f:b5:67:9c:05:fd:c0:b7:0a:fe:60:
62:c0:14:5b:1b:be:63:a6:a9:8d:f3:97:2c:4b:94:7f:a5:93:
71:c5:7e:e6:f1:2d:33:07:1a:a8:eb:ff:40:7d:89:50:14:7a:
c5:d1:92:71:88:9d:66:a3:6d:55:8c:5f:96:83:39:e6:02:6a:
2d:da:b9:3d:17:a8:de:0f:d6:e2:5c:8d:04:ed:f9:33:27:f2:
98:02:1f:8a:11:93:3b:41:97:56:b6:cb:40:6d:39:08:53:22:
f9:be:64:38:e9:72:7b:92:37:f5:51:c1:1a:5e:fa:f6:ee:ba:
72:6c:d4:ab:c1:05:82:39:49:68:44:e0:b1:35:b6:65:24:e0:
0e:b0:1c:33:1c:93:e0:c4:aa:d8:b5:d3:28:e9:4f:77:0d:10:
db:f4:ae:4b:2d:65:b1:50:a6:85:97:d7:3b:75:6a:bb:85:05:
cf:25:ff:e8:16:cf:fa:c5:c7:ce:26:29:3a:f7:d4:ac:70:9c:
c6:ba:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:57 2025 by rpki-client