Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: YBs1T8AM3mz0KQUckecz0ihW13OfEVh0CxLgffJfXXY=
Subject key identifier: D4:BE:26:59:65:E5:AE:3F:75:15:D5:6F:D2:2C:A9:6E:D8:E1:9E:A9
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 019676B0B98DE76F76E5ECC6251C9F8B02A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 151D
Signing time: Sun 27 Apr 2025 10:00:15 +0000
Manifest this update: Sun 27 Apr 2025 10:00:15 +0000
Manifest next update: Mon 28 Apr 2025 10:00:15 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: mmgNGxATlQqOX4KTYfgoYx1wc8FRzLxJ3UtHR7VlTZk=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b9:8d:e7:6f:76:e5:ec:c6:25:1c:9f:8b:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Apr 27 10:00:15 2025 GMT
Not After : Apr 28 10:00:15 2025 GMT
Subject: CN=d4be265965e5ae3f7515d56fd22ca96ed8e19ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:42:b6:b6:a1:29:77:a9:4f:f7:f1:aa:97:
10:ff:96:74:dc:37:f7:44:3e:dd:f0:99:6e:88:5b:
10:88:11:02:bc:69:fb:45:ec:e8:3e:69:9f:d2:96:
eb:83:7a:b5:20:d8:e5:62:40:2f:de:2c:f0:b9:e5:
f8:6b:2e:b6:19:b6:fd:e2:bc:e7:dd:36:c8:db:41:
0c:66:5c:59:22:f7:76:17:2d:30:93:3a:b0:39:cd:
08:70:e9:49:be:79:5e:40:42:0c:48:83:9e:1e:cf:
27:37:56:9e:c8:ba:86:09:ff:64:f8:d7:63:e0:9c:
be:6d:a2:60:93:1e:67:48:d4:19:ab:67:40:f4:ef:
bb:89:50:d3:e3:b2:6f:86:64:50:30:68:76:30:5a:
df:3f:52:73:5a:ca:26:b6:70:df:cc:f7:ea:83:b7:
14:9c:61:a4:8a:ee:c9:f4:da:1e:b7:35:8f:ba:99:
74:86:3b:70:5d:5d:43:1f:15:b3:27:4e:87:64:48:
72:97:83:fb:11:65:0b:28:8a:1d:0e:36:3f:6f:ac:
64:fa:ae:b1:47:e4:99:ae:9d:12:a0:1a:24:9d:f0:
c0:44:2e:c1:ff:d3:d4:cf:cc:61:59:fe:06:3a:42:
01:ca:b4:70:a3:d4:ea:08:3b:b4:db:05:04:03:54:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:26:59:65:E5:AE:3F:75:15:D5:6F:D2:2C:A9:6E:D8:E1:9E:A9
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:20:45:14:ae:53:18:68:b3:d4:2b:72:9f:be:c4:31:75:
e0:f6:92:a9:e3:20:b0:ed:93:ae:78:74:83:90:bb:67:c3:ae:
92:44:79:4f:48:e4:13:fa:f8:09:d2:4c:74:77:3d:b9:e6:a9:
1c:24:bd:29:ca:7a:bb:12:e0:ce:0e:87:c2:01:83:9f:9f:34:
b3:8f:82:1b:f8:10:1e:b8:06:7b:c2:b7:af:7a:95:79:9d:0d:
5d:81:b7:06:43:9a:b3:8f:8c:37:f9:72:83:b2:a3:fd:f8:9c:
fb:e5:13:ec:7f:4b:42:71:52:c0:b6:2f:4f:2c:95:3e:dd:32:
99:1e:18:34:f9:09:34:2a:e0:3b:fe:eb:60:b4:fa:db:08:b0:
c0:11:5a:87:38:fd:df:df:75:f9:eb:b4:bf:0f:07:24:58:a2:
aa:10:0d:60:d2:08:72:24:c4:79:ea:57:33:b1:23:eb:cc:3a:
05:ab:ba:d0:4a:8a:35:6e:bd:95:99:75:12:22:57:39:1f:bd:
aa:6f:3d:5a:8c:f0:a4:d7:57:ce:f5:66:1e:51:d8:ae:1a:72:
ed:3a:97:f0:ac:e1:dd:f2:25:06:bd:40:d0:86:63:14:c8:e8:
69:a9:29:52:59:ab:f2:96:5f:8b:12:76:36:1a:7f:d1:d4:0f:
b1:8a:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:26 2025 by rpki-client