Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: ZnNjD0MGE0cfKZSCFlMYmVarfKa2i1EzSZlyD/Z7N1k=
Subject key identifier: B4:B9:FB:23:EE:DD:44:13:7A:6D:5A:00:B6:28:EC:E8:EC:27:46:7D
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 01967D215CEA52CE7DC51D933780CAEC8D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1237
Signing time: Mon 28 Apr 2025 16:01:00 +0000
Manifest this update: Mon 28 Apr 2025 16:01:00 +0000
Manifest next update: Tue 29 Apr 2025 16:01:00 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: ElxFaZWaqqKkgxIbA6SUlL4swSZiFftTACbgDdr9Swg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:5c:ea:52:ce:7d:c5:1d:93:37:80:ca:ec:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Apr 28 16:01:00 2025 GMT
Not After : Apr 29 16:01:00 2025 GMT
Subject: CN=b4b9fb23eedd44137a6d5a00b628ece8ec27467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:17:71:d9:7f:93:fc:98:45:a0:3e:c6:df:
0d:f8:ee:28:d1:00:5d:50:5d:98:a6:b2:7a:21:57:
1c:0e:ce:9e:c4:8d:54:a9:9d:04:fd:28:b2:47:8c:
43:bd:52:57:bf:d4:eb:77:46:1d:38:c3:f7:0f:62:
e6:ff:8c:7a:d1:78:2c:96:a0:64:59:69:95:7a:4c:
4b:b2:63:dd:27:0f:c9:05:e5:04:98:26:b2:88:e9:
14:65:0d:e0:df:18:34:1b:b8:61:31:78:d6:f1:24:
74:f2:a9:06:26:e2:6e:c4:b9:9f:42:0f:8e:0a:fd:
8b:ce:75:61:a6:73:83:20:18:cd:05:a9:af:ec:2c:
8c:af:42:f2:cd:5f:9b:11:83:7e:2a:67:9a:59:8a:
d9:f6:06:ab:32:d0:7a:01:0f:ae:dc:23:25:85:9b:
7d:2c:7e:d1:19:c6:ea:99:0e:5d:a8:c6:b4:f4:2e:
4b:99:03:5e:53:e3:d4:0d:e8:6c:64:c4:6d:3e:64:
2c:fb:a0:2c:22:4a:2c:d9:de:39:0b:9b:e5:a3:f9:
42:43:8e:71:58:2a:35:fb:cb:34:25:5f:d6:bb:d1:
e7:7e:65:e3:75:6b:57:a4:11:01:d4:14:5f:f3:8c:
92:b4:2f:79:91:f0:64:87:10:01:69:5e:d2:7b:b6:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:FB:23:EE:DD:44:13:7A:6D:5A:00:B6:28:EC:E8:EC:27:46:7D
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f0:96:c3:c4:50:54:b1:be:57:ea:22:dd:1d:b2:9e:51:b7:
71:7c:e7:ba:56:2c:36:ac:76:a1:f6:b2:ab:4d:fe:d8:9e:28:
88:49:88:d4:2b:7d:32:d0:72:15:9d:4a:70:ef:ee:5c:9b:0c:
f7:4f:a0:2b:6b:ee:ab:7d:68:9d:ac:ba:50:01:ee:e0:bb:2b:
22:0c:aa:48:a9:50:5e:ae:d0:80:f3:e9:59:01:19:81:17:59:
87:a5:21:f8:db:bb:a6:e7:5e:33:3c:9c:d3:ec:9a:f4:86:4d:
f3:35:f2:94:42:c0:28:a3:6b:31:53:1b:95:db:9f:6f:e9:2d:
58:07:69:de:a4:39:50:80:8f:ed:cc:0d:b1:a8:43:72:21:b2:
3e:aa:52:89:4c:ad:11:64:2d:74:f1:13:8d:dd:a9:cd:d6:51:
45:1f:aa:12:ca:06:69:94:70:9a:75:40:0b:f8:18:1e:98:c0:
fc:b9:ca:7e:b2:71:fa:8f:dc:84:5b:71:97:39:4d:41:d9:11:
f9:38:6e:5b:83:87:72:ae:e9:51:0a:80:d9:9b:99:99:8b:ad:
75:e6:ac:68:07:ae:70:47:c3:7c:69:94:65:89:5b:6c:36:45:
b3:73:21:f2:69:e5:ec:41:ce:25:3b:16:29:56:91:50:7b:21:
58:9d:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:08 2025 by rpki-client