Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: iB8p3QuYdK60xYDNxZ3i1GmejXeZAtSidIsIm+6DPa0=
Subject key identifier: 7E:D7:06:36:95:99:E6:59:D2:3E:49:79:D6:9C:86:6D:8E:71:AC:73
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01969002F44837E4A25AEE48F1781B5BBD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 12D8
Signing time: Fri 02 May 2025 08:00:34 +0000
Manifest this update: Fri 02 May 2025 08:00:34 +0000
Manifest next update: Sat 03 May 2025 08:00:34 +0000
Files and hashes: 1: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: hrKmJNtWGonAN6PV4z0qT+ctOxaw23uFa3qUvRy3Qd0=)
2: ZCDIooS_ImzZeN5QrbFaFhO5dyA.roa (hash: TP421izhVwKSZitQyZKTA1SgQgPy6vE7WxBJa4Db6y0=)
3: xOQ7AmZa9_C69z9KUz6w5PLIpQA.roa (hash: 8+VSRj7tw2mCh7Z/e6KhYhg5OTkoPLOgLEVa0Q5ZizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:f4:48:37:e4:a2:5a:ee:48:f1:78:1b:5b:bd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: May 2 08:00:34 2025 GMT
Not After : May 3 08:00:34 2025 GMT
Subject: CN=7ed706369599e659d23e4979d69c866d8e71ac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:be:9a:2e:ce:df:90:d6:8c:e8:00:d7:f6:
e4:3e:c1:47:6d:c1:74:8e:9f:03:9f:3d:8c:9c:f4:
3a:8f:32:11:f7:65:09:03:12:ee:fc:c6:d2:32:c4:
00:3d:ad:ae:9d:26:81:7e:90:0c:fd:58:41:df:91:
06:a0:aa:f4:18:77:2c:7e:11:cf:ef:73:ad:8f:dd:
c3:89:40:5a:6e:23:4a:ae:b8:53:53:82:f2:6e:ab:
91:b9:91:2b:dd:23:da:a0:aa:f0:ef:31:75:76:75:
b5:a3:66:6e:ed:02:e4:ff:0f:87:5c:1e:ec:e7:04:
18:3c:13:d6:81:56:36:18:1a:71:b4:be:27:82:b3:
20:78:87:7b:0a:8b:01:dc:95:78:de:7f:50:c7:58:
47:78:13:13:79:b6:d1:17:a4:dc:dd:61:42:69:f3:
1e:fd:60:cb:bd:b5:de:74:ac:68:3b:91:37:d1:6b:
5b:1e:3e:8d:14:c4:9b:03:9c:69:57:44:69:20:e0:
2f:15:65:71:0a:76:9f:9f:c1:2c:20:7a:fc:a2:c2:
10:1d:78:79:24:e2:cb:b6:6c:e1:9f:a8:de:04:ee:
e7:7a:5c:c9:1d:7a:cf:5c:9a:ff:4c:57:a4:ab:14:
e1:db:52:7e:4d:d6:82:05:fc:40:4c:54:6b:14:ca:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D7:06:36:95:99:E6:59:D2:3E:49:79:D6:9C:86:6D:8E:71:AC:73
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5e:0c:a1:f9:84:52:c7:de:58:40:94:ab:a6:97:7d:44:62:
91:72:c1:c8:95:5b:b8:60:c9:6c:f6:6e:a5:de:a4:47:44:59:
d9:a3:8f:36:48:27:6f:c6:b7:0e:59:e6:43:52:d0:e9:02:1b:
93:c9:f8:47:9e:0c:4f:f8:5f:78:d8:69:fe:d9:67:42:58:03:
b8:36:4a:ea:5e:7d:1a:a3:da:1e:b8:02:79:7a:db:b5:d0:d8:
8d:00:17:fd:ce:9a:4b:a6:2a:ee:6a:07:36:a1:4f:77:6b:05:
9c:8f:ba:af:c4:21:84:db:1e:4f:53:55:8f:a6:20:9d:f8:15:
55:fc:86:da:63:01:5f:83:ee:e2:c3:91:b9:64:f9:e0:30:ea:
18:ad:c3:54:6e:8f:14:ac:b7:9c:01:e2:c0:82:b2:c7:d3:6c:
30:b2:e6:eb:94:ce:91:4a:d6:4d:98:ae:25:c8:52:47:49:d0:
02:41:c0:a3:0f:56:15:9e:ec:52:4f:35:a4:f9:28:0b:91:88:
53:24:45:f1:ad:52:43:50:49:49:7e:c5:d6:9a:18:72:36:19:
56:25:18:93:0d:6a:10:b4:59:33:5a:c6:7f:33:56:75:d2:93:
24:bd:ab:29:72:d5:20:ab:6f:11:48:c9:b7:b0:0c:1d:22:a2:
16:24:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:12:18 2025 by rpki-client