Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: v+Gox5eiPajtm/t+65w3J7QXHMvkMWS3mcN+UVkOy4U=
Subject key identifier: EF:2F:C9:85:D8:4B:21:80:32:41:8D:94:E4:D5:34:08:75:2E:EA:93
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 0196760C52EAC583FE9E622B83155FEE7224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 108F
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: zrN4F2nWqB8KAor2wo+yjCNFT9Tr2/OpJwAOdlU7+sk=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:52:ea:c5:83:fe:9e:62:2b:83:15:5f:ee:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=ef2fc985d84b218032418d94e4d53408752eea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:46:e1:39:d2:34:98:fa:82:f9:58:eb:5a:
a2:3d:30:b1:f5:39:38:17:a4:96:7b:ca:4c:14:82:
6a:96:ec:8a:39:c3:7e:f2:f8:a2:a3:25:f2:12:8c:
14:94:c8:f2:6c:3e:cc:76:10:54:43:d1:f8:0f:dd:
90:8b:dd:d3:ab:a6:da:db:22:b1:1d:ad:9f:d3:9e:
95:54:bb:0f:af:eb:9d:37:c1:3d:76:0f:52:f3:9e:
5e:bf:0b:72:86:e9:fe:e2:6b:8b:ca:5f:60:66:46:
63:b7:23:f7:51:d8:84:49:a0:08:df:1d:a8:81:58:
6f:59:45:ef:85:4c:f0:ed:70:85:58:9a:a9:ea:94:
40:97:6a:34:47:59:eb:0c:5a:07:9b:39:f9:77:73:
cc:a7:02:fd:42:52:91:76:f7:1a:59:43:32:ca:e7:
28:b2:0b:01:eb:b6:1f:fb:fd:21:f6:ad:09:ee:89:
2d:e5:77:ea:71:70:1f:0a:4d:6f:c6:ec:71:36:78:
e0:0c:a6:21:37:00:63:1b:ba:65:be:46:cc:6a:eb:
35:ce:8e:3f:f3:0f:9c:8e:4a:f0:42:c0:bf:88:45:
ad:51:a6:60:59:9e:ef:2a:45:dc:c8:0b:c8:dd:e4:
cb:9a:9c:c9:75:05:6d:7a:cf:5e:9d:ac:47:d9:e5:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:C9:85:D8:4B:21:80:32:41:8D:94:E4:D5:34:08:75:2E:EA:93
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:34:18:6d:41:27:f9:ff:8a:ea:07:e7:fd:11:04:ef:66:
19:7f:11:fd:71:b5:35:17:71:87:26:48:b0:51:29:eb:c2:1c:
af:fd:47:91:69:1b:17:40:c6:98:db:9f:ce:24:77:6e:77:7b:
de:ea:14:59:9a:bc:05:ea:99:2a:4c:15:5f:e6:9d:1a:e2:4c:
95:c8:e3:8d:c6:b8:30:a4:40:3a:6f:ec:4e:4e:90:5b:f4:4c:
5d:2e:a9:7f:7a:2d:ac:b3:78:e1:58:1b:69:5b:af:e9:d2:86:
01:15:72:17:75:08:40:38:48:7c:aa:6e:19:d7:5e:08:40:e7:
b6:30:33:6e:c2:f4:91:45:bc:c6:2b:1c:0c:ae:0c:8f:83:10:
30:1e:26:2f:b0:cb:51:41:03:5a:05:f1:38:bf:d9:61:a7:57:
71:39:ce:83:20:00:8b:bf:cb:dc:1a:95:28:60:95:cb:a4:af:
ad:37:b0:b0:08:b2:a1:67:07:a4:81:39:e2:5e:57:0f:86:61:
1d:b4:f7:3e:cf:6a:5a:1f:52:27:51:84:66:fd:54:03:71:21:
4d:08:55:51:87:d4:01:57:02:fe:e9:fe:94:5a:a8:1c:56:77:
75:c1:d0:fc:89:f1:ee:0a:bc:91:79:11:1b:38:08:17:9f:00:
5a:ce:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:10 2025 by rpki-client