Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: j1P+OxN8eNSXFJgsY517jLNwdY/YQOsPhYkivK+5AuI=
Subject key identifier: 0C:BE:1A:78:B4:48:19:B0:70:FD:61:8A:32:06:C2:C9:E8:CC:9E:85
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 01968058988DF5E044C7D2F06246CA8A360E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 07:00:11 +0000
Manifest this update: Tue 29 Apr 2025 07:00:11 +0000
Manifest next update: Wed 30 Apr 2025 07:00:11 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: UngIuEuHC+nqyUtonTxNOzJZanawvZkdidl78QctIZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:98:8d:f5:e0:44:c7:d2:f0:62:46:ca:8a:36:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Apr 29 07:00:11 2025 GMT
Not After : Apr 30 07:00:11 2025 GMT
Subject: CN=0cbe1a78b44819b070fd618a3206c2c9e8cc9e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:9f:58:db:b0:0b:9f:9b:57:98:4e:b6:b9:
c4:48:9e:f6:4d:06:41:5b:55:5a:ef:63:15:cb:c5:
5d:79:c6:35:45:ae:8a:4a:2f:0a:90:1a:d6:e5:9b:
c6:a4:a0:a2:a2:f9:f5:7d:93:51:a9:44:61:bb:dc:
d3:4b:ca:91:0e:67:a1:89:59:18:67:5e:57:63:db:
1e:ca:22:93:67:e8:bb:cd:92:53:c7:eb:ae:66:97:
15:23:9f:0f:c2:d6:6e:24:73:6f:e1:7c:a0:23:9f:
6a:4c:1b:17:4e:fc:29:7f:89:22:6a:51:88:49:f0:
c4:50:01:55:a8:64:ae:23:59:bd:a6:85:55:e1:0f:
93:92:a0:01:61:4f:dc:af:e0:52:6a:cb:fc:e2:7b:
ae:c9:a5:21:75:78:a4:bf:57:e4:b4:61:13:a0:ee:
ad:7e:31:f2:c9:33:ce:d0:e9:c1:90:e1:dc:ed:47:
e0:bf:cc:a9:82:dc:41:40:f2:50:a9:83:44:5b:18:
70:d0:a0:ec:80:76:85:ce:2a:23:fb:5a:e1:a5:ae:
3d:40:62:15:f8:1a:6e:06:c6:df:2f:43:a6:91:20:
84:bc:d2:db:4b:92:19:1f:57:57:0b:fb:9c:14:60:
48:15:7a:8b:88:bb:74:60:8d:0d:ab:79:64:2d:5f:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:1A:78:B4:48:19:B0:70:FD:61:8A:32:06:C2:C9:E8:CC:9E:85
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:7b:1b:54:5a:a2:fd:00:d1:33:e4:d0:43:67:f0:b2:ca:
c0:97:97:e5:1b:6d:99:6f:a0:13:d4:8a:f1:7f:15:07:be:12:
7e:2c:74:c0:fe:6a:75:e2:68:7b:58:1b:82:6e:4c:78:20:25:
1b:fa:9c:70:ef:6b:24:e1:5a:bb:c5:f1:c6:b2:49:03:3c:3e:
91:6e:82:d3:d0:e1:45:bd:9e:04:d5:51:5b:47:b9:66:a3:53:
62:52:27:9f:f6:70:3a:be:15:0c:23:7f:52:5c:68:27:f7:41:
e8:32:13:7e:46:53:6f:36:37:cf:d2:59:f2:a0:34:6b:bd:10:
c3:07:6a:18:94:8b:9b:83:4c:e0:c7:29:bf:e3:7e:c8:4e:61:
61:05:8f:b3:aa:5f:cf:38:85:43:58:ff:5a:ac:a8:48:70:5b:
c5:37:04:ce:50:9a:dd:02:3a:47:a4:86:e3:e5:1f:f0:2e:8e:
f7:07:7b:93:87:73:f7:f1:65:69:56:b7:55:f8:86:09:1f:7f:
bf:10:ac:c6:b2:16:77:88:ee:de:81:93:4a:d5:23:ef:3f:50:
02:7e:65:a0:a1:17:48:ca:d2:37:bd:36:12:cb:c9:d5:99:41:
01:04:ff:a9:43:65:8e:3f:4d:92:97:22:a2:c0:c2:15:8c:2c:
8a:a0:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:59 2025 by rpki-client