Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: EAzu3EYTpD4yRUowpreUBDADcEx5SjP1oiXniBjAC8A=
Subject key identifier: F4:CD:7F:05:99:8E:76:71:B9:23:4C:A7:33:D5:5C:F7:00:5B:A7:9F
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 0196760C90715FCE2A8A91DB7F95E7595FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:56 +0000
Manifest this update: Sun 27 Apr 2025 07:00:56 +0000
Manifest next update: Mon 28 Apr 2025 07:00:56 +0000
Files and hashes: 1: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
2: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: xx0kf77K6hSiyxxX8j4yNS21J/MZY6M3lP5i5xZ+6g4=)
3: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (hash: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:90:71:5f:ce:2a:8a:91:db:7f:95:e7:59:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Apr 27 07:00:56 2025 GMT
Not After : Apr 28 07:00:56 2025 GMT
Subject: CN=f4cd7f05998e7671b9234ca733d55cf7005ba79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:10:3c:28:2d:b9:e2:a1:94:52:fc:7f:66:
9f:1a:a1:62:3f:cc:21:22:bd:22:78:32:b9:6c:c8:
11:10:f1:9d:af:b7:3c:39:3b:f7:35:66:50:44:d4:
46:9d:74:5e:6a:25:17:2a:bb:6a:42:27:29:81:f5:
b1:92:22:56:e5:0f:3c:00:5d:5f:08:8c:1c:d4:ab:
19:55:0a:36:23:b6:36:2a:5a:a4:1b:f4:63:ed:d8:
36:28:c6:95:60:1d:f4:31:28:a3:fd:ba:cb:23:78:
ec:57:42:3e:d9:8b:fe:40:bd:2b:85:31:3d:39:14:
c6:20:46:c4:84:29:40:21:35:71:f9:76:04:11:86:
39:2d:43:26:4e:e2:85:30:f5:68:ac:df:3f:71:db:
bc:43:be:a7:2e:7a:37:05:2a:73:2d:79:7c:67:69:
71:9b:9f:07:23:cb:0d:96:74:e3:0a:66:58:44:25:
de:b6:a4:2b:55:b3:3e:cf:ad:33:36:55:74:82:05:
a8:1c:96:b8:21:d4:89:f8:0f:75:b6:11:d6:40:5a:
97:95:b8:3f:da:85:a5:9a:98:c9:e7:91:53:2c:6d:
ba:36:3f:08:5c:cd:51:06:be:2c:70:20:cc:fb:83:
2c:3a:20:31:d1:0e:aa:51:23:63:58:10:28:2e:d8:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:7F:05:99:8E:76:71:B9:23:4C:A7:33:D5:5C:F7:00:5B:A7:9F
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:fc:7f:80:ad:a1:15:ce:51:e7:ea:7a:c5:5e:00:16:49:
0f:74:3d:a0:3c:a8:71:70:99:59:9a:00:05:90:4e:32:a7:3b:
8d:5c:35:50:ff:09:b3:50:74:3c:e5:e5:8e:26:b5:73:45:0f:
c3:eb:ff:fb:5c:2f:ea:0a:8c:40:0d:bc:63:51:af:ae:f7:6c:
17:bd:33:06:ab:e3:b6:56:39:14:19:68:de:45:92:ea:bb:e4:
c6:90:ca:3b:e9:f4:7c:c9:28:9c:1f:62:e6:19:38:59:48:03:
03:3f:c8:b8:c7:09:e0:0c:9a:3b:3c:f3:d7:ac:f5:f3:05:c6:
2e:e7:f5:b2:ec:10:b3:05:4a:5c:50:01:cd:17:5a:f6:fd:b3:
0a:a9:22:fc:26:d4:3d:40:9a:d2:b9:d6:24:03:fd:98:d2:5c:
eb:44:6c:01:12:0a:07:b1:6d:6b:ad:21:10:0b:85:37:f9:59:
b9:36:93:81:44:76:45:1c:3f:d1:11:1b:13:dc:cb:47:cc:8c:
77:ac:3e:66:f9:e6:90:ff:f6:c0:61:7e:28:b4:01:05:12:66:
e5:e1:26:93:27:c8:66:db:c7:18:7b:04:71:25:05:1f:af:b0:
2d:e6:ef:32:56:ef:c5:cd:36:8d:70:3c:7f:a3:5b:e4:c3:71:
82:86:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:41 2025 by rpki-client