Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
File: IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft (raw, json)
Hash identifier: kWGC+9Y0ZlnBA03gKzhoDx/1L5h5kZdjXjAvfQ7vDeE=
Subject key identifier: E7:3B:FA:29:E2:A2:FD:2D:03:D2:E8:BB:2E:85:EE:7F:E5:F2:E8:81
Authority key identifier: 22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
Certificate issuer: /CN=22f553fef5c1859d952300ad3efb511e58afda01
Certificate serial: 01968058BDFC24D627D4022CE21E28B95176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
Manifest number: 150F
Signing time: Tue 29 Apr 2025 07:00:21 +0000
Manifest this update: Tue 29 Apr 2025 07:00:21 +0000
Manifest next update: Wed 30 Apr 2025 07:00:21 +0000
Files and hashes: 1: IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl (hash: h8eL2+RCEIVeXfP/rmkAIgEfjQ7pNSP/0oh+//+9WoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:bd:fc:24:d6:27:d4:02:2c:e2:1e:28:b9:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f553fef5c1859d952300ad3efb511e58afda01
Validity
Not Before: Apr 29 07:00:21 2025 GMT
Not After : Apr 30 07:00:21 2025 GMT
Subject: CN=e73bfa29e2a2fd2d03d2e8bb2e85ee7fe5f2e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:08:02:87:37:13:25:69:d0:a0:b2:fa:17:
05:42:e2:ef:6f:54:14:a8:ad:16:81:f4:20:98:07:
f9:74:09:a9:ac:81:0d:35:87:c5:37:e3:3a:a5:e6:
9e:c4:36:25:81:cd:16:be:14:56:47:5e:38:69:93:
56:fa:d6:6d:fc:12:85:7b:30:a1:0e:3e:a4:2c:4c:
30:dd:29:0a:99:c3:44:dd:b5:66:60:d3:88:1b:85:
6a:d1:85:c8:9a:b5:a9:20:f9:04:f3:b6:82:c7:63:
aa:91:0a:7a:92:92:8b:ef:50:33:39:cb:1e:88:a7:
51:69:0c:76:d5:ce:bd:f2:16:95:ce:45:10:0a:47:
7e:a8:5a:89:c5:71:c7:36:4c:8f:91:f2:bf:c1:53:
e9:dc:0f:50:12:f4:3e:9b:04:f1:1f:fc:a3:a4:7d:
2f:60:f7:65:9d:22:a8:d4:0a:82:a6:a2:53:7b:bb:
d5:8c:1e:45:3b:86:2c:ca:53:59:61:54:e9:5f:52:
e8:45:ef:79:7d:a3:6f:54:75:97:af:d0:f6:44:96:
33:ca:e9:62:34:e6:10:69:a9:2e:d6:e0:90:a7:5b:
9f:6e:4f:e6:bf:f8:d5:d3:04:b9:56:4e:1f:66:7a:
fb:45:f4:5c:26:d2:44:9c:85:50:02:36:21:a8:b3:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:FA:29:E2:A2:FD:2D:03:D2:E8:BB:2E:85:EE:7F:E5:F2:E8:81
X509v3 Authority Key Identifier:
keyid:22:F5:53:FE:F5:C1:85:9D:95:23:00:AD:3E:FB:51:1E:58:AF:DA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvVT_vXBhZ2VIwCtPvtRHliv2gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c502ba-d843-4bfd-989d-66d9e861b478/1/IvVT_vXBhZ2VIwCtPvtRHliv2gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:af:32:2c:55:89:35:af:a3:2a:85:c6:11:7a:26:24:74:10:
7a:6e:6d:0f:81:bd:09:75:93:30:66:74:ed:a9:6a:96:f8:93:
1e:df:30:a0:e7:e3:81:4d:24:af:38:2c:bf:a4:b2:3a:ce:a7:
37:32:09:96:49:c8:e4:3e:bb:34:b4:1f:9c:45:db:98:a3:f9:
73:e0:5f:d9:3e:cb:b0:bb:b6:61:7e:a5:a0:85:34:a3:08:21:
8b:e7:b8:12:b7:78:3c:b0:9e:70:1b:2e:2e:56:cf:99:76:67:
cb:2f:4c:fe:3f:79:2e:8b:16:06:9b:e0:c1:77:e6:d1:14:d8:
1c:f6:81:00:2b:4f:2d:ca:d9:0f:e5:ce:86:63:c6:9c:3d:a2:
8d:1d:70:27:74:fc:dd:b1:a8:11:ec:35:62:e1:fd:0c:8e:47:
37:fd:bc:b5:6d:b6:cd:9a:c9:59:9a:bd:4d:65:a2:de:09:d9:
c4:94:21:d4:c1:86:25:eb:0f:88:f7:1a:c5:5e:24:24:1e:a4:
ef:9a:0b:24:9e:0e:36:b6:0a:45:5a:02:44:3a:cd:2d:e1:de:
b8:a4:78:31:90:b2:d8:0d:df:ab:f2:a4:8f:f2:24:aa:2c:9b:
50:e7:dc:a4:ec:34:2c:47:2c:ef:27:14:06:1f:06:ff:0e:54:
ec:95:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:12:29 2025 by rpki-client