Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: zHegSd3OzEVkMVXiPhiIPlOx6rKKJ93BsCE6dC1HmgQ=
Subject key identifier: A4:19:B8:53:6A:CF:F5:57:78:F2:20:F5:B9:8D:89:ED:F2:62:FA:93
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 01967EA18F36FED5DC38A698EA0748A6DD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 04D1
Signing time: Mon 28 Apr 2025 23:00:39 +0000
Manifest this update: Mon 28 Apr 2025 23:00:39 +0000
Manifest next update: Tue 29 Apr 2025 23:00:39 +0000
Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: tWlm1s2nXLH9ymSOFqbR5MlRhlzqN5Ptf/pKeSeBTds=)
2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:8f:36:fe:d5:dc:38:a6:98:ea:07:48:a6:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Apr 28 23:00:39 2025 GMT
Not After : Apr 29 23:00:39 2025 GMT
Subject: CN=a419b8536acff55778f220f5b98d89edf262fa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:0f:4f:56:11:3c:b2:0e:cd:47:fa:2c:12:
f4:46:f1:b7:f1:55:4b:97:4f:f3:2c:95:22:9b:5d:
ce:19:39:dd:ee:b1:25:97:a0:91:e1:b2:3b:96:a0:
7a:5a:db:f7:9b:86:af:d8:2f:74:1c:72:77:fd:11:
6d:75:ea:2d:ae:ab:4f:3c:61:85:3c:9b:f8:cd:0b:
1c:5f:72:2b:3e:0d:77:6b:64:4d:75:8f:34:5a:85:
cb:f3:e3:46:f7:71:14:eb:aa:a4:38:2f:c6:4b:0a:
8c:07:f3:af:3f:04:ae:48:69:c9:db:0f:3e:10:62:
8f:44:21:3b:14:8c:d8:4d:2d:cd:11:ca:b7:a9:c1:
be:30:92:df:c3:1b:03:93:b2:60:87:80:4d:4d:d2:
b6:a7:f2:6b:83:5f:0c:7d:c8:fe:12:56:f0:9d:65:
13:33:f0:b1:49:4b:61:2f:1f:f6:7e:45:f9:21:8d:
1c:34:e4:6a:b1:10:68:0d:a2:d6:39:47:74:e4:17:
4c:6e:33:d2:09:f4:70:7e:44:c9:eb:71:c1:55:68:
47:4d:89:ec:a8:3f:31:ff:87:06:1e:95:83:b6:53:
97:7c:83:6a:5d:64:8b:c2:d0:5a:82:69:b4:ae:60:
08:42:84:5a:21:79:84:33:8a:f7:3d:05:07:2d:c6:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:B8:53:6A:CF:F5:57:78:F2:20:F5:B9:8D:89:ED:F2:62:FA:93
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:47:4e:17:80:13:84:5f:ea:0d:53:dd:e7:ea:83:b1:2d:c0:
ac:a9:90:46:af:e8:ee:c9:d9:61:4f:1a:93:c5:3b:d8:db:7f:
35:51:5a:05:d2:d7:fa:d4:0a:dc:81:2a:97:2e:af:67:f3:a1:
cd:c1:14:c9:12:c7:e7:7e:51:76:73:15:e8:d7:da:34:ec:94:
ed:46:49:d8:bc:c9:3a:e8:2c:04:8b:29:6d:9f:95:09:5d:3d:
94:b8:05:0e:9f:d6:94:af:44:6c:10:78:65:00:1c:10:a6:c1:
bf:a2:c4:31:64:49:be:c5:42:ca:8f:e9:aa:17:ed:ca:5a:0a:
ec:2c:c7:0c:2a:bb:53:9f:e5:37:da:2a:90:1d:5a:25:4b:c9:
ad:db:59:6c:2b:30:7d:9b:87:bd:00:f6:9c:2f:36:9e:8d:24:
f9:45:c0:7a:29:77:3e:9f:e6:a7:1e:75:2b:67:11:75:f7:b6:
12:c9:0b:c3:db:fd:d8:a6:75:dc:1a:ca:6a:38:81:8f:04:d7:
44:ce:70:3b:9f:68:df:42:87:0a:58:1b:ee:5f:39:87:8f:72:
a9:9e:16:29:94:7d:0c:f4:77:1f:3f:43:18:6b:6a:b8:ab:ab:
dc:9a:7a:52:c4:10:2e:52:f3:9d:93:17:21:95:75:f7:d1:47:
12:dd:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:23:50 2025 by rpki-client