Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: EYbT0FLucQ1YHsrQuTyfTjLK1pIlqbGv1TMWJMSDGg8=
Subject key identifier: 94:73:AD:F3:2D:4F:20:5B:27:82:30:40:27:C4:DA:13:FC:3F:92:2D
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 0196854804FD59DB6355ACDEFC11CC4BD8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 021C
Signing time: Wed 30 Apr 2025 06:00:11 +0000
Manifest this update: Wed 30 Apr 2025 06:00:11 +0000
Manifest next update: Thu 01 May 2025 06:00:11 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: ORs3UlhizP7hfUl6zn3QLc2gplr1HkYRAkOtnplfBQ4=)
2: JhyOMYsYocvVqxQhLK_Rr143Yl4.roa (hash: D5et6ikl0ESFL5b58JCC0EoY+mZ1iOis6weM043v4DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:04:fd:59:db:63:55:ac:de:fc:11:cc:4b:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Apr 30 06:00:11 2025 GMT
Not After : May 1 06:00:11 2025 GMT
Subject: CN=9473adf32d4f205b2782304027c4da13fc3f922d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:83:9a:7c:81:22:5e:a8:3d:21:72:54:9f:
99:23:0e:e6:99:28:79:06:96:cc:b6:ba:dc:51:74:
5d:20:b2:31:e5:e0:27:e6:01:03:19:eb:28:c2:55:
22:9a:42:d2:fc:3e:96:43:e0:9c:f8:78:59:ac:9d:
73:73:12:cd:73:c2:bc:52:46:1e:d9:df:31:4a:87:
ae:51:2d:24:61:bc:cb:cd:e5:9c:7d:3b:7c:a6:71:
d6:de:22:f3:64:dd:a8:0b:74:fb:e4:0c:ae:67:6f:
40:3c:6b:8f:72:cb:cc:e1:46:f7:bc:14:ab:0a:47:
c8:53:04:30:7e:a4:a0:de:93:2f:f1:3c:0a:c0:13:
09:c9:d6:a6:2a:e4:88:e9:a9:91:e8:e0:5a:ec:80:
c6:e7:75:df:9f:dc:ac:8d:bf:9b:15:9d:5b:61:43:
c0:7b:34:2c:41:f1:ac:95:87:2d:c7:5e:ea:0c:ba:
71:28:0c:3a:28:aa:21:c7:69:0b:c8:40:36:37:27:
8c:b0:05:0b:54:16:8a:5f:91:c2:ed:ba:48:ee:e7:
94:e3:00:56:5b:fd:d2:18:d8:af:65:82:de:cc:71:
42:3e:16:a6:44:b0:e4:02:51:a4:c9:dc:8e:f6:0f:
01:27:99:30:fb:2a:9d:b1:55:e7:6c:8a:e4:93:c6:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:AD:F3:2D:4F:20:5B:27:82:30:40:27:C4:DA:13:FC:3F:92:2D
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:56:07:e6:fc:e7:9f:fc:c0:3a:c2:0d:4a:a5:03:10:21:
6e:0d:90:84:bc:f9:86:b5:68:34:3b:38:40:83:f0:db:14:1f:
c7:d0:e2:49:39:ac:6f:69:7c:64:da:d7:1a:dc:09:73:ba:5d:
1f:e8:1c:15:64:b8:d5:6c:1c:66:9e:10:b9:6b:82:56:a1:ab:
4d:4b:50:4c:78:1c:46:d6:fd:53:de:e1:17:4e:e2:62:e8:c9:
d4:23:30:0c:de:88:08:cb:f2:9b:bb:2e:54:44:79:90:5a:ce:
8c:8a:fe:ed:26:b9:b0:ec:92:87:b2:44:66:30:72:77:02:aa:
94:5a:c1:83:9b:3e:20:94:22:83:7e:31:95:f8:b9:3f:3b:0f:
b2:1c:5e:cc:93:a8:bd:f8:d6:4c:73:e5:7f:cf:19:4f:3d:5a:
08:fc:66:ce:65:8b:fd:a7:6b:09:42:69:83:7b:8b:94:e7:da:
80:f3:af:67:7b:94:df:38:95:39:6e:5f:3c:2a:bb:0d:f9:c7:
a1:fb:aa:9e:4f:70:4d:70:29:f9:c0:d5:7d:15:5b:2a:bf:ae:
12:25:1b:87:f1:41:53:8c:92:63:e6:c3:a1:2b:13:58:ff:0a:
ce:d4:78:e5:51:b6:d2:92:3c:81:03:90:cd:b6:4a:c8:61:8a:
43:c0:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:43:09 2025 by rpki-client