Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: qRwH9kNzJk2xe1P4jNlZvVYZutVci4RSfKnUoBLPUEM=
Subject key identifier: 9A:32:79:26:BE:26:03:4D:F4:91:76:37:D2:8C:6C:B1:8D:58:02:EC
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 019679443EBB621502ACE079B534C027D063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 22:00:37 +0000
Manifest this update: Sun 27 Apr 2025 22:00:37 +0000
Manifest next update: Mon 28 Apr 2025 22:00:37 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: Wk+q5ptNPVIKVfRJElrRHQlhuRc32VEgisWuYWkbSvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:3e:bb:62:15:02:ac:e0:79:b5:34:c0:27:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Apr 27 22:00:37 2025 GMT
Not After : Apr 28 22:00:37 2025 GMT
Subject: CN=9a327926be26034df4917637d28c6cb18d5802ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:d6:ea:9b:7d:a5:58:35:5f:68:7e:ce:a0:
a5:e2:8f:e4:f9:30:7c:ba:f0:61:28:29:65:ae:d3:
ff:a3:50:d7:b4:79:34:f1:a8:b6:c2:bd:48:de:19:
e7:98:4d:0d:4f:88:fa:27:27:cd:c6:24:43:35:dd:
d3:11:a7:aa:b9:7d:b2:99:ec:a2:3f:65:bc:40:47:
8e:c4:73:79:8d:1e:8d:76:6f:d2:21:33:72:51:66:
05:ae:da:75:82:03:83:68:80:96:6b:52:a0:72:f8:
33:30:51:b8:34:84:6a:df:d9:66:cf:b0:8f:c3:dc:
7c:88:a8:11:d9:90:e8:e0:a3:0b:e5:4a:66:90:7f:
81:fa:53:51:89:aa:68:a8:9c:3a:a3:0a:27:0f:d3:
88:d9:ae:8e:5d:5e:41:eb:cf:ef:26:72:be:8b:b4:
b2:c4:d3:64:32:09:23:95:15:54:83:3e:70:f6:cb:
72:23:20:dc:7c:b5:29:cb:ac:91:33:0c:9e:df:99:
a8:0f:f6:6e:cf:36:3e:01:eb:61:a7:64:89:41:ac:
c7:f5:5e:62:2f:1d:0d:36:15:63:70:90:88:25:18:
f9:9c:ee:81:6b:04:31:63:3f:d4:19:87:66:81:3c:
67:50:9f:d0:b9:d4:66:5c:bb:7f:f3:6a:84:77:e6:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:79:26:BE:26:03:4D:F4:91:76:37:D2:8C:6C:B1:8D:58:02:EC
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:c6:a0:e4:a4:09:c2:31:61:13:06:13:cc:13:2c:00:59:
6f:c4:41:72:cf:c9:59:68:49:5f:68:f3:91:9e:fe:e9:1a:0e:
38:f3:12:56:c4:ed:07:21:e5:fa:54:f5:ea:55:aa:29:28:8f:
ec:af:ef:13:58:fa:89:f9:f1:c3:23:2f:14:0b:11:1e:cf:89:
c9:62:f1:c5:34:ae:d0:dd:84:3f:64:8c:6f:15:11:b2:99:e6:
b0:cb:77:93:90:e8:98:60:f4:32:99:a8:65:47:47:2f:d0:db:
56:9c:59:c2:35:bc:78:21:36:ec:99:ff:2d:3d:14:90:2c:fd:
f9:63:fe:a6:99:27:39:fa:78:64:5d:7b:03:45:b1:2d:8f:76:
36:bb:88:7e:5e:57:c9:7c:de:f8:c3:0b:f0:4c:89:9c:2c:28:
71:1f:00:0e:df:e1:d6:6d:e5:5e:0e:ef:a0:f6:02:5a:d3:ec:
45:c6:83:5e:2e:0e:0c:f1:9c:00:85:45:77:b4:99:1c:df:e5:
21:8b:de:96:93:35:86:77:fa:83:e7:04:8d:89:78:6e:25:d0:
f4:35:00:ac:8c:7b:08:dd:78:b4:40:81:11:74:8f:5c:00:a8:
b6:f6:cb:64:31:68:76:a8:70:3d:fc:22:52:39:15:e1:69:1e:
de:7e:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:21:10 2025 by rpki-client