Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: 2+hkvqyRb1MlY+TRd+NgeSq0hDw307DeG8YObYEXEWw=
Subject key identifier: 4E:8C:F4:4F:C8:DB:3C:F5:DF:AD:3C:17:D2:C1:FE:53:27:17:E7:05
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 01967A1FB44F126A8870C0BB3E91C995B7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 0F78
Signing time: Mon 28 Apr 2025 02:00:20 +0000
Manifest this update: Mon 28 Apr 2025 02:00:20 +0000
Manifest next update: Tue 29 Apr 2025 02:00:20 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: OlhDKSvcnrzFobfH09F4U/UNahPW30X40+94zeRP2XU=)
2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:b4:4f:12:6a:88:70:c0:bb:3e:91:c9:95:b7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Apr 28 02:00:20 2025 GMT
Not After : Apr 29 02:00:20 2025 GMT
Subject: CN=4e8cf44fc8db3cf5dfad3c17d2c1fe532717e705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:c7:f7:f3:94:2e:cf:77:a6:1d:ed:80:7f:
c5:f8:d6:f2:35:1a:20:a5:35:c5:36:04:5e:c7:52:
68:2a:39:1a:2a:cd:ee:a0:8a:a1:4f:48:2d:12:04:
0a:69:27:b0:22:f2:34:44:fc:25:07:3d:9d:e0:28:
fd:77:de:cb:16:10:30:6e:d9:ea:d6:23:67:2b:e0:
a7:dd:e8:93:55:48:cc:55:77:f7:49:7a:e4:76:c7:
48:49:2e:81:37:4d:c0:0a:9b:c5:c3:dc:7c:28:49:
cf:29:36:36:54:a6:e2:ee:ff:af:62:58:6a:42:67:
3c:7b:4d:d8:d9:f8:df:de:0f:0f:01:d4:fc:db:6d:
33:4a:d1:81:36:eb:8a:88:c9:89:92:e8:77:74:a0:
f8:94:89:bb:a5:8d:27:a6:2c:54:38:d1:b2:bb:fa:
56:68:3f:bf:e3:48:af:2b:93:4b:a8:15:a0:7d:6f:
a5:24:56:2b:ae:74:04:25:ea:ee:ff:c7:eb:37:ab:
c4:94:0e:f3:e3:9f:b8:44:0c:97:f6:0d:a8:8d:f6:
5d:72:6e:c5:da:c4:2a:b7:ab:52:f4:3a:f4:24:80:
54:ad:64:a7:1d:bd:da:5d:3d:3b:87:08:28:89:4c:
1f:3f:67:6b:96:48:53:ce:47:e4:64:29:36:37:d8:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:F4:4F:C8:DB:3C:F5:DF:AD:3C:17:D2:C1:FE:53:27:17:E7:05
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:79:04:81:41:f0:0e:bf:b6:28:83:63:9e:d0:a5:05:08:65:
82:65:f4:43:46:e4:93:1d:86:ba:4c:29:14:fb:b7:0f:86:82:
b9:2f:d5:7e:e9:ed:f9:be:14:3f:2a:8c:91:65:23:bb:1d:03:
7d:6d:44:86:9b:38:e2:08:84:ce:ed:ce:23:ab:b1:88:49:84:
43:8c:3f:4f:92:ef:a1:3e:1a:81:3c:e0:87:ce:3d:ca:80:df:
b5:95:ee:c2:54:10:b9:72:40:8a:9b:4d:b5:ca:5a:2c:91:97:
38:9b:3c:b3:be:a9:25:d7:2d:c7:83:e8:20:d8:30:b2:f1:f3:
82:0d:2a:ea:31:e7:cc:4b:f5:3e:ac:b5:e9:f1:dc:21:0d:22:
9f:5c:32:f4:4e:2f:bf:59:d0:0f:8c:11:44:dd:0b:4b:10:f8:
e0:31:57:38:11:f7:34:b0:87:57:10:4f:aa:6b:5d:c7:ce:11:
1a:54:34:57:b3:9e:5b:7e:cd:36:9c:dc:26:95:c9:13:b5:f5:
4c:00:37:d9:c5:d3:85:d6:4d:30:b1:50:19:4f:9b:72:dd:ed:
ea:51:45:eb:ad:c1:3b:57:18:98:10:46:1e:a6:37:e6:d0:37:
b8:bd:2d:b5:3f:14:3e:8c:ee:f8:53:37:37:a5:94:49:d2:5f:
6c:da:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:17:49 2025 by rpki-client