Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: Lip/bE7GghWnppv2Yg5Bvyz2n7a5KjcZI+aXysvx478=
Subject key identifier: 63:82:13:09:E2:97:37:A2:7C:05:E9:E6:02:4B:F6:31:09:FB:EA:C5
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01967DC649B56BA9E41151A236FC216E59C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0CF8
Signing time: Mon 28 Apr 2025 19:01:08 +0000
Manifest this update: Mon 28 Apr 2025 19:01:08 +0000
Manifest next update: Tue 29 Apr 2025 19:01:08 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IhQKj6UiQS-W5EmNKI0dkpCOs90.roa (hash: dOyH8r0Q3jqdPxzWjgiYUrfy8XskQY+sMtZqebKaaBc=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: p+R7MRqey1+9UpcfTcX/dr8TH5lGO6k+qAAiQbfa46k=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:49:b5:6b:a9:e4:11:51:a2:36:fc:21:6e:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Apr 28 19:01:08 2025 GMT
Not After : Apr 29 19:01:08 2025 GMT
Subject: CN=63821309e29737a27c05e9e6024bf63109fbeac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:03:83:fe:d4:d4:13:e9:ea:fb:22:97:ce:
2e:76:06:2c:c2:21:18:09:c3:c3:e6:f4:69:ab:54:
9a:27:85:40:0d:0a:43:55:88:ae:ee:a7:91:22:92:
fa:60:73:f4:6e:70:ad:58:be:ef:82:6b:32:2d:4a:
1e:3b:55:fd:b4:fc:8d:f9:18:36:d6:9f:1d:d9:53:
82:0d:b3:7c:f0:d9:ef:e9:41:e1:f9:39:9d:fe:54:
31:45:af:d3:e8:e1:1b:0c:dd:a8:25:df:a8:41:54:
43:58:fd:19:26:96:e0:28:39:17:0e:c3:18:6b:d1:
a7:bd:41:0c:51:a3:54:9e:b2:51:da:f2:ab:89:a8:
b7:da:2b:55:b8:23:9e:41:3c:21:66:60:7f:6a:a1:
bd:13:d8:a9:65:50:cf:08:e5:cf:9a:9b:6d:6f:a0:
cd:be:4c:7d:7b:e6:0b:a8:37:96:b4:31:ad:38:8b:
4c:64:6f:db:ab:93:3b:94:bb:7d:49:c5:0a:27:b0:
f2:f7:6f:1c:f1:f8:d4:cd:2d:6d:3e:f8:88:75:bf:
60:1d:f6:e1:d4:fd:2a:ad:95:6d:b9:60:9e:96:e3:
ff:4d:c2:00:93:3c:3c:bb:83:95:73:33:c9:b3:94:
7b:0b:a7:3c:21:35:c6:36:ee:5b:8e:34:a2:f9:b9:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:13:09:E2:97:37:A2:7C:05:E9:E6:02:4B:F6:31:09:FB:EA:C5
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:1a:0b:47:a4:87:bb:1e:e0:15:e1:8c:cf:13:b4:cb:1e:
ef:8d:34:1d:20:0c:3e:52:0b:4d:4d:6a:6e:20:c7:df:7d:e8:
63:b5:cd:8c:99:e1:e7:9a:d2:c2:20:88:15:a5:af:dd:c2:81:
26:d5:e5:e5:bd:2f:ac:27:9e:a5:3c:9b:b1:85:d7:3a:55:b6:
ba:bb:c1:7a:a0:f3:42:e5:20:4c:1a:6c:62:78:d3:d1:73:85:
03:04:2e:f2:a8:1f:ce:91:2c:ee:8c:81:39:76:6f:1e:e9:08:
6b:2a:26:56:fb:1a:4b:98:f8:0e:77:cf:39:0f:cf:cc:96:30:
5c:54:d2:0f:c7:27:10:d4:3c:05:45:cc:83:15:36:75:44:e1:
5d:df:60:64:51:1b:5a:61:19:28:31:27:17:b2:56:d0:40:83:
b2:8c:47:3b:00:0f:49:2d:80:68:ef:12:d2:08:74:27:51:ac:
67:27:7d:5e:d9:f0:38:4b:52:71:75:51:26:f6:a4:4c:47:d6:
63:ba:36:a1:61:fc:f7:7f:cc:b3:8d:c9:fb:ea:4e:f2:29:08:
0a:cb:5a:87:16:08:79:e6:45:eb:d2:4d:eb:91:de:8b:e0:db:
66:c3:e1:04:12:2c:cd:f7:ba:9a:18:d4:9b:9a:57:ea:df:84:
cf:40:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:23 2025 by rpki-client