Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: BaPRzYP9ll79FBEiKpdQOJZvRTT1+io/x6flNOgLVkQ=
Subject key identifier: 54:E7:1B:49:17:97:60:56:1A:69:93:FB:F0:DE:1E:FF:CC:39:10:5E
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 01967A1FCE2EC2842A8CC4971E2976A6F088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 02:00:26 +0000
Manifest this update: Mon 28 Apr 2025 02:00:26 +0000
Manifest next update: Tue 29 Apr 2025 02:00:26 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: ZndRG8sfA8xyH3DLW/MS9zuFlpHRWf/M5oCfMuaYI14=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ce:2e:c2:84:2a:8c:c4:97:1e:29:76:a6:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Apr 28 02:00:26 2025 GMT
Not After : Apr 29 02:00:26 2025 GMT
Subject: CN=54e71b49179760561a6993fbf0de1effcc39105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:ab:76:67:41:22:ce:df:ca:7d:fe:40:73:
1d:4e:01:31:af:85:d7:c7:61:8f:23:04:2e:33:9e:
b4:86:00:e6:92:7f:50:bd:b4:02:28:e8:35:28:c5:
17:32:82:25:8d:22:42:21:4f:4d:10:0c:a4:16:cc:
09:b3:5d:ff:68:d3:08:17:cc:b0:01:9c:a8:df:42:
83:1c:fd:f4:bc:1e:76:ac:c9:b7:ad:09:91:ec:a9:
0c:97:3d:79:3f:7d:5f:fc:85:b1:4e:52:7e:b0:84:
99:8c:0c:be:a6:ae:2f:ce:1a:2c:4a:9e:fc:a0:9d:
a8:44:b0:44:b5:e7:ac:68:96:10:e1:45:6b:a2:84:
82:93:8b:18:ed:6b:b1:3e:7f:d3:1e:30:78:a1:7c:
64:36:7d:cb:97:d4:cd:e4:b6:4a:06:5f:36:f4:0a:
bd:ea:b0:f7:fb:ee:7c:2c:9f:a5:4e:75:f2:b1:6d:
9f:62:30:c9:0e:26:a3:70:37:f4:64:27:4f:60:06:
a6:7f:d6:c4:8b:63:75:58:91:87:5c:6a:f7:31:4a:
3f:bc:6b:80:a7:19:d1:60:7e:4f:e3:4d:42:35:2b:
5f:e0:1c:22:50:6c:34:e3:d3:da:34:2e:20:de:2d:
66:5e:65:f6:be:e7:3c:c6:c6:79:8d:c2:3f:e5:6f:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:1B:49:17:97:60:56:1A:69:93:FB:F0:DE:1E:FF:CC:39:10:5E
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:c3:eb:85:3e:71:b0:63:b0:a3:06:67:41:20:f1:68:f0:
f1:47:6d:af:e0:f3:f6:bb:55:80:26:ba:68:83:32:be:83:a4:
a8:8a:4b:92:5f:59:41:73:64:9f:f1:dc:a7:2f:6f:74:4e:55:
db:94:23:b2:51:d3:18:92:bd:c5:1f:4b:0e:cb:73:5a:1c:15:
6e:1c:af:5c:3f:e0:11:59:c4:7d:f5:5d:b1:e8:c7:8c:c1:80:
7d:a5:45:23:01:a0:7f:b0:6f:29:bc:f3:ae:b1:42:40:1c:f0:
1c:5a:3d:78:c6:04:a7:98:49:78:ef:42:cf:5f:8d:55:64:2b:
27:7c:12:e7:35:89:df:35:12:bc:c0:f5:63:a8:ab:e7:14:69:
82:3e:9c:db:91:8c:8e:3c:6d:2d:dc:37:42:e0:ff:fe:3c:13:
8e:7c:c0:a1:eb:07:57:b4:4e:fd:1d:b4:bb:4f:dd:72:8c:dd:
b5:d3:32:47:59:5e:f7:de:81:ce:c3:69:7c:71:38:ac:bf:9c:
26:f7:1e:2e:76:9d:42:32:a5:b4:b4:f2:d9:3d:00:26:6c:53:
1a:23:66:e8:a7:ab:aa:77:ec:8d:db:0f:11:90:af:ab:41:2e:
71:5b:d8:78:10:f2:13:57:e8:0e:4f:5d:3e:88:1d:33:46:a6:
77:8c:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:12 2025 by rpki-client