Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: dWPlZWFO1dj1KCM3EpVrSiCMDqDU5dXsVfksOjxc4SA=
Subject key identifier: 00:6C:DF:42:B2:49:BB:FD:5B:68:BC:30:86:10:1D:F4:D5:2C:20:45
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01968359BDDD2BC19CB4758E669D0FC04A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0436
Signing time: Tue 29 Apr 2025 21:00:18 +0000
Manifest this update: Tue 29 Apr 2025 21:00:18 +0000
Manifest next update: Wed 30 Apr 2025 21:00:18 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: KwYNj0sYNiUOqvp21DXnuCfILtxPhFzCYbfbsb3GS4c=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
3: dSWnDMzGU7w05-szcewuViNoYXc.roa (hash: Z3YzI+In7TPyeUHO276uy8/ZGrKKO82F7EoRqQw0E6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:bd:dd:2b:c1:9c:b4:75:8e:66:9d:0f:c0:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Apr 29 21:00:18 2025 GMT
Not After : Apr 30 21:00:18 2025 GMT
Subject: CN=006cdf42b249bbfd5b68bc3086101df4d52c2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:fc:9a:5c:f9:4c:8f:b0:03:88:43:9d:30:
cf:46:73:b5:c2:e8:1a:db:f9:9d:3e:33:be:ac:34:
d8:16:24:36:95:95:28:1e:63:1c:a9:b6:23:30:61:
78:88:fa:2a:e2:15:33:a2:a4:c5:f9:fd:b1:11:96:
72:25:ba:20:1c:0d:31:ed:34:b6:69:29:e5:36:f9:
55:62:d0:99:82:dc:d6:ef:9e:2e:73:47:cb:29:57:
bf:1b:22:d7:16:44:cb:44:14:48:ab:ba:35:5a:b8:
13:9e:33:ec:25:54:6b:21:1e:04:74:a4:ea:70:0a:
be:e1:79:31:72:8d:69:27:e9:43:42:d5:b5:85:c5:
73:6e:6c:8c:b5:a1:e2:8b:89:18:46:a3:37:f8:78:
53:76:e8:ed:7e:ee:68:e5:1f:97:60:43:a3:4c:9f:
39:f7:ea:96:f1:ed:ca:85:ac:fa:2c:53:37:a9:8c:
5b:47:b5:0a:84:e6:a7:fb:e5:a6:05:b9:c3:c9:d1:
d6:aa:d3:85:70:9e:d8:a2:7c:0e:83:e5:48:cb:63:
91:41:a8:3a:5d:b7:cf:f6:90:a1:d5:c8:21:cd:ab:
3d:77:c7:ba:fc:b2:06:f1:0f:c4:97:48:c0:08:97:
f2:f1:4f:44:15:5d:52:5a:5e:19:c4:a7:78:28:56:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:DF:42:B2:49:BB:FD:5B:68:BC:30:86:10:1D:F4:D5:2C:20:45
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0f:bb:5d:a8:4a:f7:7f:88:1b:bd:52:77:8a:46:76:a2:b4:
ce:81:44:48:60:a7:15:ef:8e:c5:81:a8:2f:c6:7a:86:85:67:
64:08:2c:96:45:f8:ed:9e:ba:99:20:09:52:b2:f6:8f:07:96:
45:65:92:5f:e6:a3:30:4b:f6:d6:2c:e2:7d:60:8e:75:5a:63:
4f:b9:79:0d:79:a1:a2:06:18:e8:53:8b:90:ab:9d:dd:82:ba:
9b:e3:8b:08:3a:58:4f:16:c6:10:71:a7:96:87:e1:54:c1:bc:
f8:da:2a:bd:86:96:de:bc:d4:de:e3:81:ef:7f:a6:ac:c3:f8:
74:4b:c3:76:d1:48:d6:dc:82:d1:e8:1d:ad:f3:95:9e:c8:1d:
da:49:15:80:4b:b6:7f:af:88:2f:63:39:c0:12:75:26:d2:ef:
74:fd:20:08:4e:c0:98:ba:0f:c8:c2:3f:b7:f0:69:21:bb:fa:
12:41:be:b7:6f:26:0f:ef:40:a8:5a:27:9e:b5:ea:a8:6e:fd:
fe:fc:34:d6:45:80:97:2a:d0:e4:c8:b7:a8:7c:ab:f4:b3:34:
c6:7f:97:61:3a:51:2c:40:17:df:27:1b:90:67:c6:3f:63:0f:
09:b8:8c:fd:9b:a8:0c:a1:7f:97:56:0a:78:99:87:63:5e:13:
db:07:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:12:24 2025 by rpki-client