Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: bKGdGGIXZDXnUlX7IUSwOYiSvIhFrb7GC3LGA87+8PA=
Subject key identifier: 09:F4:CB:BC:03:8E:FB:BF:1A:1B:5A:49:03:99:B5:3A:5A:1B:10:9C
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019677C35F68DC39ACA53898E802F2E195EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0151
Signing time: Sun 27 Apr 2025 15:00:14 +0000
Manifest this update: Sun 27 Apr 2025 15:00:14 +0000
Manifest next update: Mon 28 Apr 2025 15:00:14 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: PYmDeahek0UHHEjl3SeX/FOe0TULJ6VnMI1uoDuyUc0=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:5f:68:dc:39:ac:a5:38:98:e8:02:f2:e1:95:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Apr 27 15:00:14 2025 GMT
Not After : Apr 28 15:00:14 2025 GMT
Subject: CN=09f4cbbc038efbbf1a1b5a490399b53a5a1b109c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:4b:f2:25:d9:cb:b9:33:a3:bc:93:52:40:
b0:9e:33:60:fb:c1:d8:65:63:6e:d7:9d:e6:a3:0b:
5e:4a:80:db:e9:c4:10:6d:66:1d:fc:07:21:a7:53:
9f:d9:2a:07:a9:f8:92:23:75:a2:bf:ab:af:f6:38:
56:04:52:d3:ce:d9:06:45:a2:59:53:dc:ea:7a:35:
70:d2:a5:f8:c0:dc:a3:88:01:85:53:7e:1b:89:d1:
d3:f8:7b:0a:01:a7:5d:df:b6:52:f6:8d:55:25:74:
b0:12:f0:01:30:bb:82:e8:e9:9b:33:c1:88:dd:78:
6d:71:52:aa:ec:4b:33:35:cb:e2:14:d0:39:cc:0f:
55:a7:4c:a7:72:a4:3c:27:44:8f:e2:4d:0e:f8:39:
93:0e:e1:63:90:ea:4e:6e:9f:8b:a6:d0:d9:79:99:
cb:c0:5c:24:6c:31:46:76:44:03:a5:eb:dd:9e:45:
01:cc:2c:56:fa:e3:10:58:45:48:4d:82:a8:a8:fe:
72:c0:e0:81:57:3b:ef:32:17:99:f1:41:88:4c:45:
99:e2:2f:e4:43:11:20:e7:29:b5:9f:51:1a:54:cb:
c4:71:56:97:de:72:d6:d5:e6:08:77:ac:d9:f1:b6:
52:a6:af:94:92:f2:ae:ce:7d:1a:b4:ab:3e:71:c9:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:CB:BC:03:8E:FB:BF:1A:1B:5A:49:03:99:B5:3A:5A:1B:10:9C
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:69:0c:dd:ed:d4:33:2b:4d:52:2e:af:61:3f:48:e5:38:
e8:da:25:49:e4:7a:22:d7:5c:43:bb:43:5d:fb:4d:27:c8:83:
41:07:90:11:dc:2c:9e:cd:2b:a3:c1:0f:2f:c0:5d:06:52:ac:
ae:55:0a:58:43:55:77:4e:db:97:f2:93:a2:05:35:b5:7f:c1:
0a:28:06:3d:94:44:fb:e0:cc:db:60:04:4f:d1:6f:85:93:5c:
1b:5f:f3:89:c2:71:c6:dc:07:03:de:7f:f4:1f:44:d3:51:3d:
a3:83:18:f8:f2:f4:20:78:19:2a:3f:a1:54:cd:17:5e:8c:f6:
41:9c:2a:47:ce:30:bb:51:3d:51:a0:fa:a6:15:64:e1:a6:78:
7c:b0:7e:23:b9:84:7d:36:f0:18:7d:c5:ea:32:28:37:77:5d:
dc:2b:2c:ff:2e:3e:73:81:24:51:e2:91:1c:be:72:6b:25:38:
c5:73:e7:f0:4a:08:1d:dc:f7:97:57:d9:b8:23:50:36:5b:6a:
68:75:a4:e9:02:7c:56:40:19:bf:c2:a0:e5:83:a4:8b:19:47:
5c:2e:46:23:ac:45:38:61:d8:22:49:d3:dc:83:8a:63:9d:48:
32:8f:e8:8d:1f:21:4c:16:05:73:70:d5:c4:02:c2:b3:36:3a:
21:5a:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:16:55 2025 by rpki-client