Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: 85J31uDpcxTEE/rZhFVmqRnpcR3wyGfzemkKmhgmr9s=
Subject key identifier: D3:B2:8F:CC:8C:9B:57:D4:1F:5B:4C:E8:68:76:EE:EC:8D:89:58:16
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019677C3C2C05795B2EEFDFF1716482870B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 15:00:40 +0000
Manifest this update: Sun 27 Apr 2025 15:00:40 +0000
Manifest next update: Mon 28 Apr 2025 15:00:40 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: iMXGsxXsNHzKbgwGcxxdiF7cLTCP7lCA3piNkWz/CWg=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c2:c0:57:95:b2:ee:fd:ff:17:16:48:28:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Apr 27 15:00:40 2025 GMT
Not After : Apr 28 15:00:40 2025 GMT
Subject: CN=d3b28fcc8c9b57d41f5b4ce86876eeec8d895816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6c:43:f4:32:96:e0:1d:a3:0f:24:77:de:3b:
ad:91:c2:c2:38:99:7b:52:09:99:71:90:c5:63:a9:
c5:64:ad:69:b3:d5:f7:cc:fb:8b:a2:7a:d7:1f:df:
b6:44:4f:3d:26:4e:35:35:4f:7f:e0:27:2c:b6:a0:
b7:af:65:b5:b8:6a:69:e3:5a:8e:e2:d8:8b:26:a2:
ce:60:67:78:7c:ac:b3:67:7d:7e:f1:e2:d7:e8:ff:
95:a2:38:58:2d:10:c3:4f:93:81:07:6d:b4:ed:65:
aa:70:7b:04:eb:25:8d:03:28:ca:76:32:87:65:dc:
c7:e4:55:2c:96:a9:98:41:da:b2:f1:27:da:2a:e8:
d8:cb:4d:ce:88:e9:10:dc:25:7f:f9:cf:0e:4c:5f:
c5:fb:a2:10:de:84:35:98:26:3a:8b:97:19:2d:c1:
47:e6:61:d7:c8:62:66:3d:2a:81:e6:1d:10:18:6f:
d1:28:f0:88:67:3d:5e:eb:e5:28:5b:d5:8a:59:2e:
71:7d:61:dd:a5:75:7c:38:38:f1:f7:74:24:f8:15:
67:3f:aa:98:9b:87:ee:b7:a2:3d:6d:f0:6f:62:ab:
1c:13:f9:19:24:e6:45:87:bf:5c:80:7e:fc:d2:f8:
33:00:06:bb:fc:b6:23:93:9d:3f:5f:37:b2:63:db:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:8F:CC:8C:9B:57:D4:1F:5B:4C:E8:68:76:EE:EC:8D:89:58:16
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b0:27:a8:88:cf:b8:47:2f:19:1f:ee:b6:2c:e2:0a:f2:1b:
f6:d9:27:ec:e7:e6:c1:25:90:3d:91:36:21:24:27:77:a3:28:
d6:79:1c:0b:17:54:0f:ee:7e:71:f3:05:4f:84:86:22:5f:eb:
a1:56:71:ee:4a:15:f9:3d:e3:7c:d4:88:91:82:66:03:9e:71:
50:e8:8b:55:b2:9e:e9:c0:69:b4:21:ac:9d:57:65:c4:4b:33:
1b:11:9a:23:c1:73:0e:9f:66:6d:99:18:59:c3:0d:69:33:7b:
80:4d:93:a0:ff:ab:aa:bf:fc:4f:ff:a9:6b:a3:33:ca:50:06:
97:b7:0f:c4:09:61:4e:91:86:4c:24:d1:27:9c:65:95:1c:a4:
74:47:2c:18:79:06:11:17:b4:1e:08:2b:7c:72:6c:3a:77:28:
92:6c:1f:63:ba:1a:92:5f:66:19:17:c7:c9:ee:96:f7:d6:c3:
86:a8:86:f2:94:3a:ee:1c:dd:21:48:87:1b:74:1d:d4:98:21:
30:c8:bc:ac:0d:84:08:2a:83:ef:e4:cd:c4:88:80:89:90:4c:
dc:02:d7:a5:d6:9d:4e:e1:70:1d:c3:52:d4:76:ac:a9:13:05:
55:98:da:cd:5f:14:91:9b:50:07:bc:35:22:aa:fc:16:02:4a:
ed:ea:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:23:17 2025 by rpki-client