Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: MNgtaeyKgaUqbE+mS5VZUDd5BovpgAxbROvOR6Ca7yU=
Subject key identifier: 9A:B3:A2:02:3D:CF:72:3E:A1:EB:3E:06:A6:BC:81:29:41:7F:CE:D9
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 01967ED8E2289117709697035DED76D52A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 013A
Signing time: Tue 29 Apr 2025 00:01:04 +0000
Manifest this update: Tue 29 Apr 2025 00:01:04 +0000
Manifest next update: Wed 30 Apr 2025 00:01:04 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: NcyzFQxFMEXIn3Ij/vrSGgqycIrL1LQ8L5L9XxApzns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:e2:28:91:17:70:96:97:03:5d:ed:76:d5:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Apr 29 00:01:04 2025 GMT
Not After : Apr 30 00:01:04 2025 GMT
Subject: CN=9ab3a2023dcf723ea1eb3e06a6bc8129417fced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:be:58:35:ee:10:0a:74:c2:93:d7:34:4f:
73:fc:57:b3:da:00:07:bb:bd:4a:04:b1:3f:f4:ef:
36:a3:61:b1:75:c6:07:19:4c:d1:34:0c:ea:a0:3f:
0d:4b:fa:e0:0f:06:a4:fe:e0:75:4b:44:40:ff:c4:
f1:1b:2d:f2:55:20:9d:69:6b:bb:6f:0a:3a:ed:71:
d7:d7:d8:ff:df:d0:5e:fc:ae:2b:c9:62:ec:52:26:
18:f5:c4:66:57:5f:16:81:b1:ae:b5:b7:1e:de:35:
da:0d:b6:a7:27:9e:7d:cd:5c:02:89:84:4b:dd:ab:
b1:c6:10:b3:89:a3:64:57:01:01:e9:49:96:8c:6c:
2e:0e:60:22:42:79:ba:5a:e7:95:f4:e1:81:09:75:
a3:4e:e1:57:9e:5d:88:ed:10:79:7e:e7:ec:30:93:
46:49:15:e6:dc:88:65:37:1d:79:40:0d:e0:72:38:
11:c6:84:9d:d6:03:09:88:e7:f8:93:62:c8:96:10:
a8:5f:3e:a3:81:cc:bf:03:76:45:ef:b2:e0:95:c2:
3e:a9:a9:8b:e5:11:7f:2b:09:33:03:98:3b:c2:d3:
38:f1:ab:50:86:49:a4:1f:d2:17:7d:d6:ba:43:84:
dc:90:39:bb:ad:a3:b8:d7:91:c6:80:b9:71:15:9f:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:A2:02:3D:CF:72:3E:A1:EB:3E:06:A6:BC:81:29:41:7F:CE:D9
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:ae:e8:8c:18:e5:69:89:f0:dd:30:4f:07:a4:6a:df:cc:
22:3b:6e:6d:bb:11:13:50:8e:f3:d9:fc:e4:92:61:00:64:83:
27:21:5b:0e:b9:ab:6b:6b:67:b2:9c:e5:5e:d2:36:d4:ca:c7:
ba:c7:76:67:c3:4c:29:54:f8:73:61:75:3d:8e:97:50:1e:db:
68:94:e6:a5:7a:dc:3f:74:44:cc:94:1b:20:ee:60:22:42:ac:
c4:11:e1:b6:d3:0b:2e:73:e5:9b:03:07:cc:71:af:4d:3b:df:
65:10:f0:b8:5d:94:a3:bb:ae:95:b0:d5:c8:43:5c:45:0e:0e:
80:be:9e:b8:12:1c:30:2f:00:df:27:0a:15:96:09:4c:05:82:
8f:f8:fb:fb:58:d2:33:cf:e4:33:96:f0:1a:72:04:cd:00:f6:
6f:0d:c9:23:01:5a:9a:23:a7:69:09:1f:1a:23:6c:a0:a3:69:
8e:da:d1:88:58:79:6b:8e:40:90:92:53:1d:90:db:f2:13:a6:
b5:30:99:51:36:75:a2:e4:df:67:0a:05:a5:52:19:d3:85:6f:
7b:ad:63:a5:6c:3b:f5:40:a2:52:b6:d1:03:3f:dd:76:d2:b9:
9c:b2:fc:2b:8c:f6:64:c7:93:bb:ac:45:cf:2a:71:a5:79:70:
24:97:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:59 2025 by rpki-client