Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: Odq5SxQ7Ss6zSn6GOZN3Ny4fQROVry1L3ACOI+IJ24E=
Subject key identifier: 69:F9:BE:6C:45:D5:B5:DA:43:2E:40:32:30:8A:F4:67:C0:8E:BF:59
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01968C26013D73689EFA26A1858D4A8024A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 064D
Signing time: Thu 01 May 2025 14:00:22 +0000
Manifest this update: Thu 01 May 2025 14:00:22 +0000
Manifest next update: Fri 02 May 2025 14:00:22 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 9C30jJKVpTBfLjsoL9m0LCgeRBfe59S+izMJR4ZGCpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:01:3d:73:68:9e:fa:26:a1:85:8d:4a:80:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: May 1 14:00:22 2025 GMT
Not After : May 2 14:00:22 2025 GMT
Subject: CN=69f9be6c45d5b5da432e4032308af467c08ebf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:c3:0c:99:1a:c5:28:d7:2e:0b:74:60:79:
63:d5:ed:ae:a8:fe:2f:99:57:68:27:e6:7b:d2:d9:
13:43:84:5a:84:ca:42:b5:bc:39:18:6f:6d:dd:54:
57:1b:88:1f:09:f7:be:d0:13:a5:64:2e:4c:18:8a:
c7:44:d9:d8:55:a1:d2:d6:2e:86:dd:77:43:b1:2c:
5b:83:a4:ce:76:d5:49:5f:63:50:ae:35:81:5f:66:
d9:35:cd:ca:4b:12:08:a0:a6:5c:b1:cf:c8:73:ec:
e2:a2:07:b6:d4:9a:07:dd:19:7f:68:9b:8f:9d:1c:
6d:c5:da:bd:e8:9d:5e:50:94:c8:cd:78:b1:d8:55:
f9:0e:6d:b9:fc:67:12:9e:1c:eb:c8:96:49:a5:0e:
5f:b9:0f:c4:d3:61:7d:1d:0a:81:ec:57:a0:25:5d:
1e:57:f4:b1:da:38:2d:d4:97:ec:62:ee:97:61:fe:
15:6e:f9:e9:33:60:e7:07:41:a7:9b:5a:44:24:4f:
1a:1e:93:fc:bf:e6:65:17:2f:7b:19:ad:1a:97:12:
0b:16:75:6b:54:b8:2a:b4:c4:32:79:7b:4a:b7:0d:
72:11:af:d2:39:dd:ff:41:79:03:66:ca:a7:98:13:
bd:7c:45:74:f2:3a:09:15:81:24:a4:e4:d7:23:9c:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:BE:6C:45:D5:B5:DA:43:2E:40:32:30:8A:F4:67:C0:8E:BF:59
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:50:d5:73:26:3e:17:4b:82:42:99:23:50:60:92:6f:b5:e4:
e9:7a:fd:65:44:28:ee:ff:94:d0:7d:73:a9:1b:3b:50:c3:01:
af:94:ec:98:25:af:e3:50:6f:1d:3f:ec:0e:a8:57:e5:aa:97:
1d:b0:15:d2:c2:d9:ce:26:0a:84:df:79:ec:21:ca:f4:71:62:
18:9c:42:ed:eb:fe:25:f4:ea:76:20:af:50:f9:9c:22:ab:5a:
f7:44:a6:9b:06:44:c4:b8:31:e8:f0:45:4b:e7:0a:5e:ea:df:
82:ac:00:9f:f7:68:0a:19:90:46:a1:2b:d0:f5:69:3e:db:2c:
b5:14:55:41:ba:97:1e:7b:ba:1a:55:61:bd:3e:f3:10:28:2a:
4d:60:f2:32:51:a6:94:06:42:a4:5a:e6:c2:01:87:0b:99:47:
a4:c1:8e:86:2a:2d:be:c4:e1:f9:24:51:e7:49:2e:b2:e8:d3:
8c:7e:3a:87:45:4e:df:14:a3:e8:ab:7e:30:77:35:51:fb:57:
c9:bc:af:28:7c:0b:0e:4d:5c:61:c3:be:10:a3:6a:ec:95:6d:
ca:9f:92:ee:16:2f:64:2c:d6:14:f3:9a:7e:4b:ab:85:bb:25:
ee:54:54:10:0e:25:b2:e0:00:2d:d2:58:ae:e6:1f:90:14:c6:
9a:a4:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:05:28 2025 by rpki-client