Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: 1SKYkSkTbwPs0tWjfycyqrJG0w0QYn5XfhanSA85mZM=
Subject key identifier: 36:6E:C2:0C:0A:43:A3:82:A3:2A:97:44:B2:12:14:F2:8E:DF:D2:97
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019672D42849CD72B6F30AAB58018B21772C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 05C0
Signing time: Sat 26 Apr 2025 16:00:28 +0000
Manifest this update: Sat 26 Apr 2025 16:00:28 +0000
Manifest next update: Sun 27 Apr 2025 16:00:28 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: 4HZN/AfZqrQXxj3r80W1FvDC13yV7Ut+QKBXFlsenYQ=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:28:49:cd:72:b6:f3:0a:ab:58:01:8b:21:77:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Apr 26 16:00:28 2025 GMT
Not After : Apr 27 16:00:28 2025 GMT
Subject: CN=366ec20c0a43a382a32a9744b21214f28edfd297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:a0:6c:ce:78:c1:a8:44:a7:81:b1:d2:76:
9d:b7:31:83:ee:7f:3d:cf:4c:0b:bd:55:85:cb:ca:
30:c5:8f:97:70:01:c6:ad:0c:8f:68:f0:02:2a:f4:
15:25:c4:95:d5:b9:57:aa:4d:2c:43:31:67:04:2b:
45:80:4e:0a:40:6a:49:5d:63:ea:30:21:b6:fd:8f:
b6:df:5e:87:0f:08:83:48:98:05:ff:a1:20:1b:ba:
c0:a3:40:c6:49:e1:da:b2:b1:69:86:8a:6d:ad:f2:
47:91:25:e7:a7:50:fb:fb:b1:dd:ec:48:c7:de:c2:
d9:3e:d1:e6:f3:c0:00:67:96:12:db:35:3b:01:3e:
10:99:38:39:eb:fe:7e:1d:39:1a:82:26:c3:cd:54:
b6:07:cd:12:62:17:89:b2:38:00:ca:e0:19:f5:57:
ca:47:94:b9:f1:50:c3:5c:e8:36:1b:91:81:a5:d9:
0e:c1:c9:8b:42:e9:a7:24:3e:88:b2:fa:1c:f0:97:
99:18:ba:bb:cc:78:4b:7b:3f:b4:6f:c8:27:66:f5:
ab:8d:b3:0a:44:52:6d:b8:95:ce:5b:c7:49:45:ac:
b0:09:2a:fd:ef:f0:7b:23:d5:c6:32:d9:ad:c8:50:
d8:82:86:ad:df:d3:ba:a9:93:59:5b:29:8b:38:5b:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:C2:0C:0A:43:A3:82:A3:2A:97:44:B2:12:14:F2:8E:DF:D2:97
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:c3:45:19:94:cb:0a:4b:e8:7e:d7:37:be:81:63:cc:33:
37:67:3e:8a:ad:ab:23:b1:a7:f8:37:24:79:45:78:2d:73:55:
b8:f4:1f:61:42:18:15:fc:d8:0a:3b:39:18:cb:e2:e9:1b:c6:
c3:a4:d2:b0:9d:c2:2e:03:a9:99:bf:e3:46:a6:6f:0d:61:1e:
c2:14:6b:55:2b:76:33:74:28:63:33:f6:9e:cb:6e:06:80:7f:
fa:d5:f7:0a:63:a6:d5:4d:bd:06:2b:f5:32:5a:cb:04:d9:d4:
22:7a:ce:a8:8f:4a:35:4c:78:22:b0:53:09:08:ed:dc:f8:49:
05:3b:97:49:13:10:bd:34:13:b9:fa:19:60:d3:64:ed:57:73:
01:a1:0e:c2:1f:13:40:da:ce:69:67:9c:1a:1a:fc:52:83:1e:
d7:a8:3b:7b:8c:0e:5b:60:d6:eb:46:90:ff:b2:26:95:47:1c:
d2:e0:c2:4a:b5:9f:8a:c8:db:45:79:93:41:f2:3e:c7:2f:d3:
9c:b6:47:78:98:58:0f:84:41:63:3b:4c:a9:d6:74:8b:a1:e2:
71:9f:5f:c0:61:71:ad:c2:ec:bd:12:cc:52:57:bd:f0:1d:1c:
ba:42:d4:c3:ba:1b:75:b8:dc:ae:92:03:59:c1:47:cb:dd:cd:
ef:0a:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:28 2025 by rpki-client