Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: y5RV08ifQ0Hh/xC/xVp0eTwtdcqUG6js4JQDMEHnHZ0=
Subject key identifier: E1:C7:FE:58:CA:57:8A:E9:A3:DF:54:2B:0C:24:53:3F:1A:50:FB:5E
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01969A1904DDBF5645F10F0C4730BEDBAEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 07:00:52 +0000
Manifest this update: Sun 04 May 2025 07:00:52 +0000
Manifest next update: Mon 05 May 2025 07:00:52 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: dKqhh8yIYHUZ4fZeccOSPU9hLjDezcB1WmjQ9l/O1m8=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:19:04:dd:bf:56:45:f1:0f:0c:47:30:be:db:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: May 4 07:00:52 2025 GMT
Not After : May 5 07:00:52 2025 GMT
Subject: CN=e1c7fe58ca578ae9a3df542b0c24533f1a50fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:3b:80:02:e6:c6:2a:04:4a:18:07:e8:75:
8f:44:3c:e7:ad:2d:48:f5:2b:93:ee:3d:60:69:39:
86:2a:f9:71:20:da:72:09:62:32:79:c4:a6:86:b5:
2b:39:ff:b2:2a:ed:b3:ce:f9:74:61:cf:9b:a5:bb:
04:17:0a:22:71:bd:0b:43:14:71:95:8a:5c:20:43:
c3:e6:63:79:2d:e1:57:c7:3c:c1:e1:9f:96:07:68:
db:e3:75:c8:59:ac:21:d5:e5:a0:3f:be:2e:73:14:
70:96:a6:47:6e:6d:23:2b:f3:a6:01:18:6c:21:d3:
7d:0b:31:69:af:d1:6b:28:63:54:c5:55:6c:d5:dc:
23:67:5d:8e:c4:f5:17:20:dc:0f:da:e8:9d:d0:a2:
10:0a:73:58:cf:be:f4:a8:28:1c:50:22:70:67:3f:
e8:df:7e:5d:69:e7:2a:15:d6:4d:39:40:e3:2d:76:
d5:55:94:ba:b6:aa:49:08:63:06:0b:3c:f3:44:b4:
21:7a:57:d6:53:5e:68:11:0a:d1:bd:9f:00:60:41:
df:5a:d0:66:bc:ec:e2:75:ef:db:8d:f6:5e:3c:ea:
3a:40:b4:4e:69:74:f2:96:80:a4:68:84:f1:c3:4b:
0a:36:da:b9:2c:6a:c5:ad:87:e9:2f:99:cf:26:b5:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:FE:58:CA:57:8A:E9:A3:DF:54:2B:0C:24:53:3F:1A:50:FB:5E
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:be:39:39:e3:23:a5:5d:a2:c0:7e:ea:7b:1c:27:ed:1c:7c:
fa:8d:49:55:30:f8:23:35:e0:ef:31:dc:a5:2d:07:d7:0c:02:
ac:ee:ad:ee:db:0b:10:cb:42:f3:01:a1:d4:4e:44:b3:83:8e:
9a:b8:60:eb:02:0d:9d:8f:cd:7b:c3:53:df:cf:57:5e:b5:11:
1e:b9:14:85:01:48:65:ae:a3:70:52:a8:a3:bb:07:06:6f:da:
02:88:6c:bb:52:5d:bf:c1:32:a3:89:19:a2:e4:d3:3e:7e:ce:
51:31:2e:89:51:86:38:8d:cf:8f:b2:d7:e9:fb:15:12:38:44:
b5:6c:e1:61:20:49:77:4c:f4:14:57:b2:01:b1:98:22:8d:f9:
2f:17:08:3e:7c:f4:e1:24:35:0d:eb:54:e5:a9:14:9f:ac:70:
a6:2f:0e:b9:d5:a5:8a:3c:67:2c:c7:a5:62:0b:7e:d2:53:ec:
a7:98:3a:1f:31:2d:ce:6e:40:42:9c:cf:30:6d:c8:dd:fd:2b:
36:f0:a8:b1:ae:87:22:06:eb:14:9e:03:8e:0d:c9:46:0c:1b:
17:90:d4:64:25:9a:a7:b1:0f:e7:0f:07:4d:a8:b4:7d:fc:78:
82:42:9b:19:67:52:5c:31:de:39:ab:17:02:09:06:e3:d2:f4:
31:70:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:44:35 2025 by rpki-client