Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: 0E0akXHzargBNqspkaXUwFhO9MA5RXtiN54bL+MV6hY=
Subject key identifier: C2:1B:95:18:7E:73:A9:AF:74:96:8D:9C:67:E2:A6:3B:29:77:7C:0E
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 01967A1FCF1ADA950A5096F2CF0DE4D1C50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 1134
Signing time: Mon 28 Apr 2025 02:00:27 +0000
Manifest this update: Mon 28 Apr 2025 02:00:27 +0000
Manifest next update: Tue 29 Apr 2025 02:00:27 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: RrsGAw5IaVq319NBE3dVqT+cG0KCWfxVwF74hJ2vJN0=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:cf:1a:da:95:0a:50:96:f2:cf:0d:e4:d1:c5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Apr 28 02:00:27 2025 GMT
Not After : Apr 29 02:00:27 2025 GMT
Subject: CN=c21b95187e73a9af74968d9c67e2a63b29777c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:4e:90:9b:2f:ce:91:8b:fe:f5:66:dc:a8:
86:cf:b6:65:13:4d:16:1b:0c:72:8f:9d:89:1c:68:
31:b3:22:ec:0a:c1:d4:d8:ab:2a:b2:b8:aa:4a:82:
17:49:98:f2:09:c6:5b:5b:48:bc:01:a6:4c:22:ad:
0d:31:2b:4f:87:05:32:df:99:4e:24:0e:8a:31:c4:
c0:94:d4:cd:4f:80:41:5f:63:70:37:dd:75:d1:20:
86:57:d5:bf:03:6a:18:ec:54:24:8d:60:2b:74:ed:
48:98:c6:89:5d:e0:36:60:8f:73:d4:90:92:4c:01:
25:d7:5b:79:9f:52:e6:99:6a:f4:5a:87:b0:7d:0c:
fe:0c:3c:d7:71:1f:d0:f8:23:ea:62:ef:05:48:66:
c1:16:e3:56:df:41:a9:6b:9b:ea:33:b6:f5:22:cd:
ba:1c:95:2b:6c:82:db:b1:35:58:b3:8b:3a:f9:86:
73:0a:67:ff:59:72:de:37:bf:9e:20:e5:7c:cd:8e:
96:b6:3c:de:e8:32:c9:49:f9:e4:84:a5:15:12:8b:
e1:42:b8:f3:18:20:b4:16:7e:af:1f:97:23:42:e8:
c5:6d:61:92:8e:82:ce:b5:dc:c6:ee:e8:da:eb:49:
db:8c:5f:e6:ba:98:1d:c3:4a:64:44:1d:31:ba:ea:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:95:18:7E:73:A9:AF:74:96:8D:9C:67:E2:A6:3B:29:77:7C:0E
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:18:cd:17:56:97:ec:bb:87:70:2c:5f:62:dd:7f:58:6f:
19:ed:35:a4:1e:ef:d7:9d:a9:a4:c0:dc:e2:6e:11:24:0f:af:
85:06:6f:28:bc:cf:72:e5:8f:45:ec:24:04:df:b2:e4:37:83:
43:f7:ee:f9:db:43:5c:03:33:e3:6e:b8:0d:09:a2:6a:86:dc:
d0:48:aa:98:36:74:bf:be:4f:53:d1:e5:5b:6e:5c:d2:33:5d:
74:3e:d6:66:81:97:bc:7e:59:68:bf:37:71:bd:42:9b:92:9a:
56:11:51:69:e3:7b:65:f4:06:ee:d0:f4:fe:9d:a0:c6:aa:26:
fa:b8:cc:5f:c4:5c:1a:f3:2b:be:f0:d0:a0:3a:57:27:34:d6:
ab:c0:f1:e1:2d:12:50:79:29:ba:82:b7:2f:90:1c:cf:31:c4:
12:12:db:d5:c1:99:f9:80:dc:5e:ab:cd:3c:e5:38:83:d8:b9:
47:ff:87:95:a0:e7:19:2f:d8:8b:19:18:68:8c:40:0a:0b:de:
ae:ca:61:d5:6b:8d:34:0e:42:1b:a3:dc:fd:71:c1:01:c1:95:
c9:8b:30:af:84:89:fa:2c:68:ed:02:1e:eb:46:5f:42:db:07:
66:7d:d9:1b:ec:be:46:83:c0:2f:81:da:10:d4:0a:18:e2:02:
96:43:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:11:39 2025 by rpki-client