Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: Fo/Z0p0v3Nrp68vMPXH71SOUBW9bySyiRKF7LyjOvUA=
Subject key identifier: 10:C8:04:A3:AF:F5:C8:64:89:01:F5:24:72:61:2E:5C:77:B0:67:CD
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 01968B4AC7374CDE2C862B938C2B10465234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 07E1
Signing time: Thu 01 May 2025 10:00:55 +0000
Manifest this update: Thu 01 May 2025 10:00:55 +0000
Manifest next update: Fri 02 May 2025 10:00:55 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: up+8BZKoMGUS9qg2JhCe3X1ttdsO4Ntp03mReEm0IUQ=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:c7:37:4c:de:2c:86:2b:93:8c:2b:10:46:52:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: May 1 10:00:55 2025 GMT
Not After : May 2 10:00:55 2025 GMT
Subject: CN=10c804a3aff5c8648901f52472612e5c77b067cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:82:2f:f2:27:a1:6e:88:50:20:4c:88:51:
61:94:2b:42:ce:9f:b5:0f:7c:5e:25:ff:2b:ef:f4:
46:16:9b:27:ba:97:0c:31:25:21:7b:70:0f:09:31:
82:29:cd:fa:9a:67:e3:fc:be:a1:e6:fc:6e:65:37:
65:62:85:5c:38:08:6b:2b:11:bb:ca:af:06:3a:64:
4b:f7:bc:7c:64:0e:79:a5:b4:fb:81:15:53:26:12:
08:d3:9a:2c:bf:f0:eb:b6:e9:9b:7b:dd:d9:f9:6c:
98:f7:9c:f5:51:06:e1:13:1b:2d:3d:df:8f:e8:a5:
b3:43:98:d9:09:03:1d:02:90:34:8b:09:9f:95:7f:
de:fe:6d:29:ab:1f:cd:0f:2a:d9:9c:9c:fc:eb:5a:
4e:17:50:1a:97:9a:eb:99:74:68:08:09:71:a9:93:
90:25:29:f5:b0:6a:77:b5:df:17:1e:86:01:a8:99:
71:e9:6e:b1:75:dd:22:47:92:94:7d:3f:df:69:e0:
f5:4d:7c:f7:71:ce:2d:9e:89:ae:9c:3d:63:b1:33:
31:f8:50:86:c8:b6:42:70:bd:67:95:da:cd:3f:d1:
e4:8b:c5:85:38:b4:ff:e9:d1:f2:9e:fd:15:e3:92:
60:47:ad:9d:4c:fc:b4:20:a5:89:71:8f:dd:44:e3:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:04:A3:AF:F5:C8:64:89:01:F5:24:72:61:2E:5C:77:B0:67:CD
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:4e:6f:2f:ab:da:97:13:17:1b:05:4d:46:60:b1:73:9a:
3e:cf:f6:f9:88:9c:d8:d0:fe:4e:bf:ad:a1:f5:bf:20:e3:84:
53:ac:58:c7:dd:3c:a6:31:79:60:c7:04:b2:04:00:35:fe:a1:
62:23:81:20:26:93:42:4d:53:91:60:09:aa:20:8b:35:73:bd:
23:3f:e3:fe:7f:70:3f:d4:8b:e3:b6:90:96:45:1f:04:7d:0a:
c4:75:41:5b:aa:55:71:9d:c2:f9:2c:4e:4a:53:54:77:a1:79:
b5:42:da:42:0d:24:0a:0c:46:03:06:0c:dc:e3:36:51:ab:f1:
8c:1e:b5:d3:dd:f3:44:a5:ac:db:67:d4:91:b4:15:ea:35:86:
72:39:85:a7:69:c0:2e:81:04:1d:d8:46:18:9c:a9:39:39:97:
0d:92:ca:f2:62:76:31:9c:cb:50:cf:66:b8:f9:9a:bf:9a:0b:
78:c7:54:c0:0a:85:14:85:8a:ba:63:b0:15:8e:29:34:44:6d:
1e:e2:8e:e7:79:b1:1a:1e:f1:6f:73:5e:ed:bb:59:a0:e9:1a:
da:3b:d7:7f:4c:4e:2d:7b:b3:88:7b:fe:d4:38:73:77:20:8b:
9a:ad:84:a4:05:18:43:fa:c1:c5:c8:ff:c4:57:fe:28:e0:da:
1b:8c:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:09:36 2025 by rpki-client