Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: CxzDlMu/REEXYx/2NDdWE6AOnxqMwZ5ztdFggfylWA8=
Subject key identifier: 25:0F:43:E2:86:66:B5:77:84:D1:39:18:4C:49:89:D9:78:50:4A:24
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 019681A2CB2AA0D42933677E543DABFCCA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 13:00:51 +0000
Manifest this update: Tue 29 Apr 2025 13:00:51 +0000
Manifest next update: Wed 30 Apr 2025 13:00:51 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: PTvBzqRA8mmRcftKXCT9ZTNx9IkovQEgJno87p+Qk9Y=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:cb:2a:a0:d4:29:33:67:7e:54:3d:ab:fc:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Apr 29 13:00:51 2025 GMT
Not After : Apr 30 13:00:51 2025 GMT
Subject: CN=250f43e28666b57784d139184c4989d978504a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:7f:01:b0:b4:26:fc:41:ca:e3:6a:14:af:
34:21:c3:1e:db:f7:f5:31:ff:73:16:bb:1e:b0:a8:
34:67:21:30:18:86:4d:ab:84:bf:2b:55:35:4e:40:
50:81:7b:35:eb:3c:e0:36:51:df:ec:c9:37:62:da:
af:96:e6:23:2c:fc:82:3f:59:8c:a3:b4:b7:d2:7f:
af:b5:83:43:78:b3:76:29:6c:2d:1f:2f:6a:e4:6a:
35:89:c7:c6:87:af:40:29:c8:a4:a7:64:bf:8d:e9:
60:08:94:f9:e7:eb:23:3f:31:9f:28:dd:81:54:bd:
28:37:a1:7e:3e:7a:e1:5a:75:5c:79:82:c5:73:7e:
01:14:c4:0c:47:18:2b:58:51:7b:10:94:6c:1b:a8:
81:7d:df:1f:42:d1:6a:a2:76:41:68:c5:b3:49:d5:
c6:7a:0d:6c:6e:63:f1:96:a6:da:4e:3e:4f:69:93:
21:78:db:65:65:55:95:8d:37:92:a1:05:76:dc:87:
dc:a0:37:5a:5e:bc:b7:16:fd:c8:22:17:25:72:60:
05:e1:41:bd:53:57:46:26:0d:af:94:58:09:30:a2:
4c:5b:d9:ee:57:93:6c:26:5c:1b:77:4f:1b:22:47:
02:8f:d6:a8:91:af:55:40:3c:8d:3d:ec:df:75:79:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:43:E2:86:66:B5:77:84:D1:39:18:4C:49:89:D9:78:50:4A:24
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:67:36:87:5d:49:57:d1:e6:36:27:b3:6d:1f:ca:56:c5:
b7:34:fc:5d:ae:64:1f:e4:51:33:8e:16:1f:f3:a0:1b:13:2a:
a3:a1:6e:c5:c4:21:80:a0:2c:63:1b:aa:65:2f:8c:a8:31:69:
35:ec:83:28:ae:44:05:50:46:22:e5:52:ee:b6:a0:cc:a4:ce:
5d:c5:98:22:ee:0c:23:f9:69:02:ea:d2:ef:c3:4f:68:45:d3:
82:11:5c:5b:bc:70:bf:79:ea:07:c4:f3:d5:c9:aa:b1:75:45:
60:06:95:42:f4:71:a6:ff:89:fc:d9:46:d6:6a:d2:c5:aa:02:
89:7d:84:ef:dd:d2:8f:fa:49:84:88:79:9c:93:e2:25:e1:ee:
f2:95:4b:2d:c7:11:65:03:fa:b0:de:b9:37:cc:ed:68:9f:0d:
f9:5a:4f:8a:7e:a7:0e:88:e2:b9:59:9d:3e:d2:1e:01:3c:02:
8c:d0:b9:03:1c:25:7f:c5:71:bb:02:f5:fb:5b:40:e0:8e:a6:
69:94:6e:08:d1:1d:6c:aa:fe:61:d5:86:22:0b:b4:81:05:fa:
d6:2f:a5:6c:26:e5:1e:e5:29:1d:b6:4c:94:de:08:76:56:b5:
e3:88:2b:64:ce:5a:9d:65:df:06:29:9e:f2:83:c5:97:c7:ce:
7f:77:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:22 2025 by rpki-client