Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: vzW2cR7opKfG/sK1eZjT95Tqyxx30Re7YGsxKbOnfB4=
Subject key identifier: A7:41:88:D3:16:EA:97:73:A6:D2:5D:B3:2B:F8:36:AC:24:F6:98:9C
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01968812859FAB46DDA650491C7ED3FA615D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 11AD
Signing time: Wed 30 Apr 2025 19:00:37 +0000
Manifest this update: Wed 30 Apr 2025 19:00:37 +0000
Manifest next update: Thu 01 May 2025 19:00:37 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: ex7nXHEsTbDwfSDD0YxCb47lrj3IJYsNA6Zv9YL93qA=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:85:9f:ab:46:dd:a6:50:49:1c:7e:d3:fa:61:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Apr 30 19:00:37 2025 GMT
Not After : May 1 19:00:37 2025 GMT
Subject: CN=a74188d316ea9773a6d25db32bf836ac24f6989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:a3:61:ab:a3:94:07:24:f7:91:ef:05:b5:
36:bd:46:c8:3b:07:62:96:5d:b6:28:2e:02:41:6c:
92:3e:e9:ed:6d:8c:17:25:1f:03:12:6a:29:38:c5:
d0:4e:c7:42:6a:3e:08:a4:ea:1e:4e:58:e0:33:8c:
81:a8:44:0e:15:02:d7:b0:dd:c3:d1:76:6a:7b:e8:
d9:6b:2e:93:ab:20:b6:4a:9c:79:49:2f:ae:5b:e6:
1f:86:12:65:14:23:a4:3b:fb:6a:e6:92:10:11:53:
e7:23:c2:71:30:07:38:a3:49:a3:9a:2b:d7:aa:df:
f8:2c:70:9f:68:03:c0:13:a1:30:da:9f:b5:fa:d5:
a0:4f:92:76:47:9d:26:fc:f5:f7:77:62:b9:e9:b6:
aa:99:76:ea:8b:40:14:89:12:c4:bd:e6:5e:56:77:
86:8c:41:57:09:d3:20:b2:19:fb:bd:46:dc:af:31:
49:d8:e5:fc:1d:47:64:69:d0:11:94:65:50:17:e5:
45:9a:3f:16:17:7b:68:ab:6a:85:8e:61:e6:8b:10:
c4:ab:d2:d7:e4:c0:e1:3a:d3:22:bf:9d:96:ea:3c:
d3:cc:a4:a7:6a:f3:dc:64:e7:e2:53:27:60:f4:66:
69:bf:a7:f5:1b:0b:eb:5f:70:4b:ca:c6:7f:a7:6d:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:88:D3:16:EA:97:73:A6:D2:5D:B3:2B:F8:36:AC:24:F6:98:9C
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e1:da:b4:d2:02:83:8d:6c:38:12:3d:a6:db:26:8b:49:4b:
ab:f4:66:f0:96:eb:29:11:e8:1e:e6:94:e7:e3:f4:62:39:42:
ef:98:0e:12:7e:40:b8:92:15:66:54:c6:77:a9:82:a2:e2:07:
28:d8:2d:34:99:63:07:b8:71:6b:75:21:41:58:e0:88:84:dd:
d4:79:7f:c3:79:15:1d:f9:32:0d:b6:3e:d5:7c:39:bc:a6:1c:
79:3e:e0:e3:45:b5:c2:95:56:3f:15:c0:c4:7f:e1:e2:0b:1a:
52:60:71:8e:95:55:91:e4:5e:dd:df:16:09:ca:e5:57:60:96:
e3:8d:cd:ab:71:81:29:e6:5f:9d:6a:52:17:b3:e2:7e:2c:5f:
16:37:2d:58:2f:a0:ce:81:db:c1:89:1f:a9:01:1a:dd:5a:e7:
e9:d4:c4:b8:41:cd:8f:87:62:81:32:6a:52:43:5d:ec:4e:9f:
38:20:b1:02:10:82:e4:6c:da:cc:66:17:a4:a1:86:55:39:b7:
82:0f:ad:52:bb:3c:12:88:c4:9b:c4:68:a8:6f:9f:b1:15:c7:
34:fc:55:03:7d:b9:0c:bf:bc:08:5d:ff:69:1e:0c:c8:b0:0e:
33:54:4b:20:47:60:3d:34:9c:17:25:20:89:dd:53:61:31:b2:
69:e5:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:19:31 2025 by rpki-client