
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: EZxsSZ8CbFO5iMOQbIC+WhdKQY7jOL21qLmH7GvtaZA=
Subject key identifier: E6:66:78:1D:41:CB:79:A7:A8:73:AB:BD:F1:3F:0E:CC:40:27:B5:C5
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 01967831B2D38E5083274193B543F3BF9363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 17:00:45 +0000
Manifest this update: Sun 27 Apr 2025 17:00:45 +0000
Manifest next update: Mon 28 Apr 2025 17:00:45 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: QHDW5yWV72CWczwBQN3ynny9wcYqmS5U/6xFCnso0IQ=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b2:d3:8e:50:83:27:41:93:b5:43:f3:bf:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Apr 27 17:00:45 2025 GMT
Not After : Apr 28 17:00:45 2025 GMT
Subject: CN=e666781d41cb79a7a873abbdf13f0ecc4027b5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:9a:2d:96:b0:7c:01:db:56:74:2f:7b:a3:
2b:22:4e:f5:84:dd:55:29:03:98:91:11:03:c5:64:
ea:74:3f:cf:1b:79:eb:41:b6:8a:42:c6:4c:dc:9f:
cb:71:13:0f:0b:7e:5a:c7:28:16:5a:53:e1:bb:bd:
6b:fc:c3:15:12:db:d4:98:8b:95:08:b0:c3:d9:d1:
2e:d3:03:a4:21:35:ca:01:96:46:c1:de:01:93:21:
a3:50:70:fe:a8:4d:5b:c6:4f:db:82:6f:a6:6f:b1:
78:84:e8:63:66:2a:7a:d6:b3:b3:5d:f7:15:16:7e:
e0:ac:a5:4b:70:e0:f3:f4:47:fc:fe:b1:7a:78:9d:
c5:4d:bd:af:fb:c3:03:49:19:eb:4a:06:4c:96:18:
d5:94:93:9e:26:3e:a7:02:94:3e:f3:74:8e:c6:db:
d6:aa:4b:47:e9:20:96:67:99:85:c5:57:54:f7:d2:
21:f1:f9:c7:8f:04:52:c9:4c:22:c9:d8:49:45:0e:
d6:7b:ba:63:14:f0:82:06:e9:2b:24:d5:83:d8:13:
ed:81:36:6b:c9:6a:94:1d:16:77:10:4e:53:9e:dd:
5b:92:1e:83:cd:62:19:23:d7:53:96:71:41:78:ad:
5f:d7:0f:00:25:51:0e:98:99:3a:99:0f:a8:7b:3a:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:66:78:1D:41:CB:79:A7:A8:73:AB:BD:F1:3F:0E:CC:40:27:B5:C5
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:39:be:34:5f:b1:b2:b4:2e:bb:4c:5d:89:86:35:85:41:
3c:c3:f7:5e:f7:65:a0:4d:9e:a8:73:c0:80:6c:09:d2:3f:f7:
95:9c:58:1a:8d:2d:c6:37:51:3e:92:19:e8:10:38:79:c3:39:
64:ce:62:69:e5:16:17:59:04:5e:14:5e:74:6b:fa:a8:c0:ff:
54:73:77:93:8c:42:26:2b:ba:8f:5d:3b:c0:2c:5c:5c:43:a8:
bc:15:c4:62:61:69:86:a3:c3:bc:93:fa:69:d8:60:dc:a3:2b:
99:6e:6b:a3:17:78:fd:0e:61:70:8c:5a:e4:91:b5:0b:ed:49:
81:26:a9:01:f6:be:4f:ec:14:96:de:16:78:fc:ce:5c:db:47:
81:bd:3c:d8:ab:90:92:14:34:bd:b3:af:c6:5d:df:97:ae:bf:
b0:d2:f8:a4:09:4b:85:dd:a8:73:05:d9:0e:b2:7d:27:1d:2c:
9c:71:1f:9e:7f:ff:b8:f9:88:e9:58:70:63:5b:a8:ce:09:58:
a2:4a:84:62:62:39:53:a7:56:73:47:ad:cf:20:03:d3:16:c2:
70:5f:67:96:9a:41:f9:15:b2:55:86:86:55:f3:8e:0f:b8:1b:
91:12:f4:27:17:02:a6:3f:65:06:66:14:81:1c:49:c1:59:4b:
6c:d5:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:07 2025 by rpki-client