Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.mft (raw, json)
Hash identifier: rj59JTN0ZXRW7f0WpK/XII13J3B19qchnKlRJQAuhW0=
Subject key identifier: 38:E3:8A:17:D0:64:7F:7B:8D:BF:72:44:4B:81:D3:37:07:0C:CC:73
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 01967868734CD7811D48E2C4F1161E53092C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 18:00:33 +0000
Manifest this update: Sun 27 Apr 2025 18:00:33 +0000
Manifest next update: Mon 28 Apr 2025 18:00:33 +0000
Files and hashes: 1: IZUnwiTwCiiy9MtOExLXSNXKUWk.crl (hash: YKvMWa94+4n41w4ZEfEk37k4oB7IpPTCw35xUWynRDM=)
2: l8INnv3QTRexkISN97lg6HuKeCY.roa (hash: pDEsYARUuEJK1pYQPfyythtLkxkCfRaxj9c1qzwCEIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:73:4c:d7:81:1d:48:e2:c4:f1:16:1e:53:09:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Apr 27 18:00:33 2025 GMT
Not After : Apr 28 18:00:33 2025 GMT
Subject: CN=38e38a17d0647f7b8dbf72444b81d337070ccc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:58:f1:fe:b2:be:67:99:b6:fa:c0:84:be:
3c:10:67:c0:6b:03:a9:82:1e:fc:da:f1:bf:42:a8:
96:69:98:b2:3d:e7:12:60:13:8b:67:62:62:bf:51:
f2:2e:e4:10:df:c9:24:67:ad:4a:0f:43:a5:58:a1:
b1:fc:aa:3e:be:47:52:19:08:33:e8:38:c3:f6:9a:
68:e8:de:5d:5b:5b:21:26:83:ce:3d:77:11:38:4e:
06:be:45:95:bb:81:38:3e:af:5d:49:cf:da:14:0c:
36:fc:53:13:f0:ab:02:e1:3b:48:23:1f:2b:4b:c6:
5e:a4:e9:b5:87:16:2b:15:e3:03:f9:d2:8a:26:0f:
dc:03:8b:15:cd:dd:12:39:6c:57:e4:5b:3e:af:4f:
f7:8b:b5:8e:0e:4d:e5:60:1f:b6:8d:b5:da:e0:20:
df:95:b1:c5:61:78:3b:12:09:93:f8:da:1e:04:2f:
37:04:f8:33:19:4d:9c:9d:87:60:a2:d2:d6:85:29:
08:aa:ec:94:6f:6b:5b:29:4b:c8:8b:f1:41:7c:8e:
42:52:55:4a:aa:d9:40:58:d5:34:7f:6d:85:64:9a:
98:cf:e0:f8:65:f3:c4:7b:58:f8:98:10:c6:6d:97:
71:70:35:c8:70:4d:a8:69:16:b4:7e:41:74:aa:9c:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:8A:17:D0:64:7F:7B:8D:BF:72:44:4B:81:D3:37:07:0C:CC:73
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:3e:be:de:08:0f:ac:76:c4:87:df:7f:4f:a1:6e:db:a5:
cb:49:25:2b:b9:76:23:57:f3:e7:23:22:72:6e:b3:5c:f0:00:
7c:88:62:f6:3a:2a:ab:9d:02:de:a5:37:ab:a7:7f:97:1f:42:
7e:d4:41:f2:c1:3f:0f:31:fe:02:a9:3f:7e:99:89:f3:8a:16:
21:f1:d9:1f:78:15:df:6d:99:7e:1f:eb:5c:7d:31:e6:1e:04:
cd:81:13:8f:03:94:20:16:67:a5:46:50:d2:f0:6c:a5:12:cc:
4e:ee:29:39:56:41:f9:25:de:c9:07:e7:b8:13:06:9e:e4:cc:
3a:cc:ce:a6:fa:67:6d:df:59:d2:c1:1e:c0:1a:d3:96:9b:4c:
b0:a8:b5:c2:62:59:bf:8d:5b:80:2e:36:8b:5e:6a:3f:1f:cd:
ee:7d:49:16:80:dc:b4:f8:ed:b5:6c:9c:d6:3b:e8:82:3f:43:
ee:5a:69:93:b7:98:3b:81:53:c3:b4:39:46:b4:a3:0b:f5:4e:
dc:74:1e:42:2b:89:03:7e:f0:b0:d3:1e:13:c9:d9:58:9f:17:
6e:d8:62:66:79:d8:dc:99:69:f4:ff:b6:8e:5b:3d:9c:b2:81:
f1:bf:8d:a3:09:0b:0a:6f:b7:3e:ad:24:7c:15:98:e5:40:d5:
b6:d0:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:13 2025 by rpki-client