Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: oeH2xNePvuswMEcTl8XTtjFMjrFsM77o7d968IuhB70=
Subject key identifier: 37:6F:54:84:AB:E7:96:A6:4D:3A:E6:C8:4E:7A:29:6A:15:D8:13:94
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 019673B00BA47393C8FD1B5CB420AA11CB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 0212
Signing time: Sat 26 Apr 2025 20:00:39 +0000
Manifest this update: Sat 26 Apr 2025 20:00:39 +0000
Manifest next update: Sun 27 Apr 2025 20:00:39 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: w/uqSgynoF+Xdbg7rG3vASkU3RJqVwc4hPklucco5JU=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:0b:a4:73:93:c8:fd:1b:5c:b4:20:aa:11:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Apr 26 20:00:39 2025 GMT
Not After : Apr 27 20:00:39 2025 GMT
Subject: CN=376f5484abe796a64d3ae6c84e7a296a15d81394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:7b:0c:bc:b9:ed:34:0f:5a:ad:12:ef:6e:
bd:6e:41:b0:8b:e4:9b:76:d5:9b:b4:a6:01:61:76:
d4:92:7d:ab:18:e0:a5:c7:ab:ba:da:d6:3b:0b:f2:
3d:84:f3:d5:f6:de:fc:06:64:31:23:53:4a:3d:1f:
f5:ab:a6:32:00:98:64:33:28:75:3b:04:e3:a8:2c:
a3:84:f0:8d:57:48:54:59:8b:b0:0f:fa:12:b5:9d:
b7:53:f0:79:9a:37:55:6f:67:63:f7:f0:3c:7f:11:
18:36:88:48:39:13:52:7b:3d:89:54:36:1f:ca:14:
d9:86:5c:fe:27:e0:8c:cd:da:38:ac:49:3b:bf:f5:
f2:5f:d7:4e:24:69:b3:df:2f:a2:7e:ab:c8:08:f6:
82:e4:65:69:1c:01:23:6a:ba:6e:eb:41:5c:d9:4c:
d8:e0:71:48:65:62:03:d2:5b:0c:17:a1:b0:36:dd:
5f:80:88:ba:32:86:3e:7d:f0:5a:5a:d4:e9:ba:82:
d2:89:db:56:7c:94:c4:6b:bc:71:ee:1e:94:39:42:
dd:d1:00:e7:f0:71:c9:3f:31:3b:2a:2c:f6:c0:66:
fb:2a:a2:2c:43:2b:85:7a:84:f0:ba:dc:bb:cd:a5:
8d:51:57:a2:85:e2:65:90:15:74:50:3f:84:d8:27:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:54:84:AB:E7:96:A6:4D:3A:E6:C8:4E:7A:29:6A:15:D8:13:94
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:79:4d:8e:f4:74:75:03:60:f4:7f:4a:ef:1d:a3:b6:70:16:
4b:75:88:93:7a:c1:aa:26:8e:e2:93:52:48:f6:c0:94:a6:cd:
6e:c1:f4:aa:2b:20:dc:50:56:a4:60:b4:ce:81:af:9c:0a:37:
5b:43:26:91:b3:43:fc:d0:69:6d:23:7a:e4:65:62:50:c4:40:
16:10:ec:18:20:56:96:6b:68:6d:90:f5:e8:df:6c:40:88:8c:
78:d8:32:b5:df:03:d7:1a:7f:10:a3:81:53:26:a9:71:05:8b:
a9:72:7e:7b:fe:a7:97:b3:1b:53:db:5d:ee:57:c9:f5:af:42:
46:69:6b:93:2a:98:9d:11:89:70:2a:4a:c4:74:e9:de:74:61:
11:29:f8:d3:a7:80:ea:94:2e:08:79:f0:30:b4:48:9c:1e:2d:
18:29:54:d6:a3:1f:73:ac:40:06:a9:e5:3d:2e:c3:8e:4b:62:
6e:97:8c:f7:80:63:6e:a6:91:ca:25:fd:c4:54:87:c5:a0:1c:
ee:86:b7:0b:4c:42:0e:a8:79:9e:90:44:a2:db:47:98:41:f7:
9f:13:b4:3c:af:91:4c:7b:83:3a:5e:0c:99:83:9e:c5:24:04:
9b:f9:3b:13:d5:14:d6:3a:99:3b:24:44:36:0d:a0:35:9c:b1:
cc:60:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:27:29 2025 by rpki-client