Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: hDhW5G/aUEbGVIMLjZLoP9gCVp9AKDCpJm5AGA2QvHU=
Subject key identifier: 4E:27:9D:56:76:60:86:CA:1C:E1:B2:27:AB:91:21:82:00:38:E9:FB
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019683FF8A302113C92BBB9B36E94ABBAB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 03A2
Signing time: Wed 30 Apr 2025 00:01:24 +0000
Manifest this update: Wed 30 Apr 2025 00:01:24 +0000
Manifest next update: Thu 01 May 2025 00:01:24 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: p0iTBH4SULvuuDpBnAHjBdB5FtpsjXF1EGQ8fd7WkBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:8a:30:21:13:c9:2b:bb:9b:36:e9:4a:bb:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Apr 30 00:01:24 2025 GMT
Not After : May 1 00:01:24 2025 GMT
Subject: CN=4e279d56766086ca1ce1b227ab9121820038e9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:75:ab:78:cb:bb:aa:e1:30:e3:bc:06:ac:
dd:cb:07:dd:46:a5:b7:4a:17:38:11:12:56:5c:96:
0c:bd:03:a9:24:30:1a:8a:2b:ac:fa:eb:ff:36:c3:
cd:3f:27:a2:57:9f:84:5a:19:4f:c0:42:f4:1a:03:
d9:26:eb:7a:7d:a7:15:1f:20:df:af:dc:a8:95:74:
68:4b:91:76:0e:2e:03:f2:d1:b5:88:75:f2:5d:33:
82:05:3a:28:08:d1:39:b0:30:d6:4a:85:90:21:8d:
1d:8e:cf:19:51:c7:ff:81:1c:ab:c5:ad:ef:e8:35:
c5:b8:43:59:f7:04:a5:84:fe:79:86:a7:cc:18:74:
54:e5:87:71:16:8e:ea:c6:3a:41:27:66:67:d7:a3:
46:d8:9d:34:67:51:56:13:04:b6:40:f2:69:7d:c8:
f4:bb:e5:2e:99:44:9f:d7:d5:52:cb:8c:c6:0b:76:
8b:6d:ed:b2:2f:ce:bb:18:e1:21:81:09:31:32:4e:
bd:dd:ff:a3:dc:ec:70:aa:32:05:21:2b:46:a4:c0:
c4:40:c4:53:a3:d7:fd:2e:fa:06:8a:2a:f4:a9:0f:
db:41:23:15:32:1a:ec:91:22:a3:c2:15:b3:16:55:
72:d0:d5:c0:ba:7b:01:85:c5:cd:08:76:d9:b3:d6:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:9D:56:76:60:86:CA:1C:E1:B2:27:AB:91:21:82:00:38:E9:FB
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:38:15:d2:60:26:07:8d:72:34:f5:9d:96:39:f9:32:67:e5:
75:57:92:3f:a4:b5:8c:f9:6c:f0:78:1f:5a:00:45:59:85:3f:
47:42:a0:dc:37:ee:a4:a2:c5:81:5a:2b:47:e9:3c:bd:e7:85:
ea:5b:5c:d3:dd:68:ca:77:fb:70:19:dc:c2:49:b8:16:61:c5:
99:8d:a7:61:c5:1c:d4:73:23:b8:86:40:b3:bf:ef:d6:58:d6:
67:3a:7c:dd:2e:7b:49:8a:04:8b:d1:c3:0e:1e:c5:93:07:90:
74:9f:45:31:5b:ec:45:1e:8d:d9:1c:a4:e1:ef:b8:91:bc:c3:
57:b5:f4:3d:15:53:f6:37:0b:84:1d:2f:44:da:ed:23:30:8c:
49:18:c3:ae:f3:66:cf:d8:10:f1:04:3c:aa:8e:72:e8:07:d4:
2c:93:5b:64:d3:d2:3a:6a:a4:76:0a:15:2e:32:60:c0:6f:aa:
a5:73:9d:d9:e9:f8:74:4c:3b:ab:52:2b:b2:c1:78:23:1f:bb:
78:bd:2c:4d:38:85:72:31:85:2c:6e:1b:44:05:1b:6d:38:7f:
ce:15:4c:5f:19:b7:82:e1:20:2e:14:e5:bd:08:01:c0:5a:8e:
6e:9e:83:44:2c:28:4d:81:be:14:c4:53:3e:b4:7d:8d:7d:2c:
8a:77:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:07 2025 by rpki-client