Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: Fx7pZIz5tN1YG/OrTj2uflfNfQGNIzrPwCTQTfPYaII=
Subject key identifier: 0B:FD:6D:6A:3B:B7:58:83:9C:BC:E5:A9:C1:EB:A6:1C:28:30:76:FF
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0196722F5A4EE24AB5A42DFE043AE143128F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 149E
Signing time: Sat 26 Apr 2025 13:00:27 +0000
Manifest this update: Sat 26 Apr 2025 13:00:27 +0000
Manifest next update: Sun 27 Apr 2025 13:00:27 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: LKiLfhD/HzUXvZ8yhwK1q0Awc0bx7/EqsdL2AOmWDsA=)
2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:5a:4e:e2:4a:b5:a4:2d:fe:04:3a:e1:43:12:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Apr 26 13:00:27 2025 GMT
Not After : Apr 27 13:00:27 2025 GMT
Subject: CN=0bfd6d6a3bb758839cbce5a9c1eba61c283076ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:7d:e6:fb:58:3b:f7:8d:70:76:d5:a3:53:
0e:3b:95:c8:07:4e:85:ef:30:3d:05:fd:7a:b5:39:
b9:45:b0:9f:2f:a3:19:13:21:d9:9a:19:4c:6a:70:
29:89:b4:09:60:de:4e:a8:ba:ed:4b:e8:54:fe:c1:
6d:6d:dc:9b:87:d3:07:88:0d:79:83:1e:af:e6:74:
90:e9:eb:14:c3:0c:80:21:53:ef:32:0b:d2:c1:43:
31:6a:c2:c6:b1:63:55:e4:c9:c5:10:60:49:49:21:
7d:18:44:c0:2d:b6:65:c2:e8:3d:57:14:e9:6a:cd:
42:09:64:f9:c1:4d:c3:ad:4e:ff:b9:f0:9c:36:5b:
46:40:f7:a7:6c:32:8c:9b:32:e6:f4:79:1e:9b:b9:
05:02:35:e3:d2:58:c2:d5:40:23:15:fd:f7:93:56:
77:e7:37:8d:cc:84:17:40:7d:57:71:0a:3b:87:17:
70:41:d8:cd:61:91:39:b9:97:a6:3c:b9:5a:0b:c2:
1f:85:26:e1:99:b3:04:73:c0:1a:9f:27:65:65:e5:
b8:15:46:49:a8:fd:71:cc:cc:fb:2c:3d:3c:ae:80:
4e:21:f5:33:de:c3:c7:52:6f:3a:9d:92:cf:e5:90:
f1:34:9f:8a:5f:d0:cb:3f:9e:67:67:db:99:8e:18:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:6D:6A:3B:B7:58:83:9C:BC:E5:A9:C1:EB:A6:1C:28:30:76:FF
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:90:87:91:54:49:ed:bf:47:12:cb:fd:97:33:c1:b8:b5:
0f:85:a7:66:9f:ec:1b:5f:6f:ae:86:ee:43:a7:ff:3e:85:f6:
d8:89:c9:27:34:2b:2c:b5:78:6a:15:98:22:2e:40:48:9b:fd:
99:4d:b6:57:83:c4:73:ed:ae:5a:ec:27:f0:df:34:96:8e:27:
81:67:60:ca:8a:bc:9d:da:61:22:8b:9a:67:09:be:c0:a7:00:
df:79:3f:fb:65:2c:c1:5a:44:5e:de:00:e9:8f:6d:23:e0:74:
8d:93:d8:7c:41:0b:03:40:f0:15:03:ca:75:b7:d6:cf:df:fc:
ac:9a:3e:34:ab:50:6f:8f:14:ca:0e:28:49:4b:07:a3:d1:e4:
33:5d:55:62:e4:d5:12:6f:78:08:de:30:48:ac:03:41:6b:96:
a5:e2:fc:43:25:5b:48:c4:24:0d:ab:23:6f:72:c7:56:81:b1:
f5:3f:9c:34:48:6a:6a:c5:50:ea:fa:38:fa:f8:ec:71:3c:68:
c8:b9:72:58:66:07:a7:3d:f8:c5:f4:3e:eb:90:d8:53:94:a3:
a8:b6:12:4d:19:5c:cf:d6:a5:c9:50:b7:78:28:91:78:3e:da:
ee:4a:73:a1:b4:00:b0:82:aa:98:a8:96:b0:a8:f4:7b:9e:3a:
33:82:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:20 2025 by rpki-client