Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: yII0dAzs/YfHmHJjrh52mMuE867mwGoZLgw1152NyfQ=
Subject key identifier: 13:09:4D:F5:B2:7D:48:D8:39:C2:C0:A4:44:C7:1D:56:4C:75:21:AA
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01969416A50B514AD6DC3893F4AB2EF20E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1523
Signing time: Sat 03 May 2025 03:00:33 +0000
Manifest this update: Sat 03 May 2025 03:00:33 +0000
Manifest next update: Sun 04 May 2025 03:00:33 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: cPr4fStdk7eBqJj2buGPLde3kFB+KVulIFg2c8dGDuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:a5:0b:51:4a:d6:dc:38:93:f4:ab:2e:f2:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: May 3 03:00:33 2025 GMT
Not After : May 4 03:00:33 2025 GMT
Subject: CN=13094df5b27d48d839c2c0a444c71d564c7521aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:9d:81:80:eb:a3:ad:62:af:5f:86:bc:2a:
90:ba:a5:c6:b4:e2:f8:64:9e:df:72:12:5f:06:bc:
6b:85:77:b3:7e:5b:c1:2c:54:f4:f9:d0:6b:f0:2f:
0e:d9:f1:6e:bd:ce:d4:d8:13:ee:52:d5:1f:38:4c:
96:96:1a:09:98:9a:ff:29:b9:c5:70:b4:a7:4c:57:
59:eb:12:16:ff:7f:96:56:4e:ed:6b:72:27:0d:dd:
0f:03:03:94:1e:79:23:3d:0b:dd:8e:8f:ab:0d:e3:
99:74:6f:7b:30:9f:50:86:74:04:c3:f1:df:ed:67:
ad:28:ab:12:dd:f0:ff:cf:90:06:8d:fb:6a:ea:5d:
7a:36:a7:21:f2:ff:b0:69:cc:9e:2b:b0:59:09:06:
07:3f:d6:ed:91:4a:1a:e1:a8:29:af:51:dc:51:d9:
5c:d0:16:6f:5b:c3:be:3a:bb:85:4d:6d:ee:55:05:
72:5d:2c:7c:58:2b:5d:23:b1:87:cd:14:6c:f8:b1:
3e:77:2d:1d:01:a6:0c:c1:69:4f:92:40:cb:ba:6f:
40:9f:71:8f:07:23:90:e3:85:a7:0c:73:5b:51:a2:
12:f8:82:2d:bc:02:73:de:0e:0b:33:e3:23:28:fc:
c3:8a:70:ad:4a:83:b1:90:e6:5f:0f:80:aa:68:77:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:4D:F5:B2:7D:48:D8:39:C2:C0:A4:44:C7:1D:56:4C:75:21:AA
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0b:d8:56:f7:eb:95:cf:c2:3d:85:74:e3:83:87:e7:49:99:
c8:b2:b5:77:bd:0e:d6:46:96:af:54:f5:38:b7:f4:72:b2:ee:
44:fb:fd:0b:a5:81:de:b0:c4:10:b6:ce:7d:44:23:e7:4b:06:
46:05:5d:1b:31:a6:69:6c:a4:59:33:41:d0:aa:6a:d5:bd:b9:
e3:84:aa:d6:02:6c:e2:9c:55:50:f5:0f:05:e5:a3:e2:69:b1:
db:ef:ca:4d:f9:20:14:3a:a7:14:3c:30:2f:b4:bc:6b:98:21:
b9:36:bc:bf:5f:c2:6f:0b:37:c7:63:ab:fc:2d:e8:5c:32:e4:
ed:ca:8b:e6:78:67:44:e4:2a:4e:cb:58:5e:45:ab:0a:04:1b:
5f:5e:a9:3f:9a:50:b3:e2:b3:41:b6:85:50:14:27:b7:49:d0:
4d:5d:42:a5:0a:2c:c1:1b:af:88:f9:b5:63:2a:bd:b9:67:3b:
f3:04:2d:8c:56:01:2a:28:fc:2b:6e:87:fe:19:54:2b:77:84:
df:de:8b:b6:0f:2d:03:c0:4b:65:a3:7b:4d:06:9f:d5:af:12:
b4:69:b2:99:21:e2:e8:64:f8:9f:50:b8:b9:c4:fd:b2:ac:4b:
6e:f5:a0:48:72:4f:11:96:fb:05:92:54:f2:dd:54:75:76:6a:
57:01:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:01:57 2025 by rpki-client