Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: i3vJPhNyKZzjL27825ZsC/b/2jb6LLe/ZcQMffBYF9g=
Subject key identifier: 23:D8:02:43:56:8C:34:B1:4A:13:40:89:F4:45:57:EF:EF:B6:E3:D8
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 0196753033CE3C2B1D975A395CC8676A2299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 10F9
Signing time: Sun 27 Apr 2025 03:00:15 +0000
Manifest this update: Sun 27 Apr 2025 03:00:15 +0000
Manifest next update: Mon 28 Apr 2025 03:00:15 +0000
Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: 5omJhgyeGjusT8YEI/eE2rFSRwH5EllSvyWAICClnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:33:ce:3c:2b:1d:97:5a:39:5c:c8:67:6a:22:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Apr 27 03:00:15 2025 GMT
Not After : Apr 28 03:00:15 2025 GMT
Subject: CN=23d80243568c34b14a134089f44557efefb6e3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:a4:cf:0b:34:a5:0c:a3:28:49:b8:6f:c7:
a9:81:e2:67:78:14:5a:80:ec:ae:84:1f:a4:1b:c7:
22:24:e0:d2:be:1f:6f:8d:6b:c7:ae:e3:47:24:b0:
17:6d:d5:4f:82:b1:c5:0d:6c:e8:d4:65:f0:f7:94:
4c:d6:1a:07:b5:21:3e:fb:d4:38:96:08:9b:ac:f1:
d1:af:40:2c:26:a7:37:92:60:8b:19:99:60:ce:3a:
55:6c:81:40:bf:8a:a7:75:d2:80:c3:38:e6:5a:48:
67:6f:f8:58:30:e4:43:6a:9d:5e:5f:a6:c3:89:a4:
78:6d:2c:b5:6d:1e:36:16:64:c7:d2:df:a5:fe:75:
de:4f:1f:48:d0:4e:a5:79:df:1d:35:93:56:4e:b8:
d6:24:fa:c0:ba:0a:c4:de:cd:29:41:76:3d:a2:36:
9f:9c:e1:aa:02:41:28:66:ab:f0:65:0b:21:d9:be:
77:37:d6:e5:d6:dc:90:35:d9:62:d8:c3:d6:44:d2:
60:7c:ed:bd:6e:c9:98:e3:c9:d3:92:6b:57:15:74:
a0:9a:d0:57:53:7f:bb:6d:93:cd:2b:63:80:bf:c0:
2b:c8:6a:93:23:6f:c3:a8:67:b6:d1:ed:1e:28:bf:
8c:04:0e:b0:57:8b:0b:b1:6c:0d:80:ff:0a:f9:ac:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:02:43:56:8C:34:B1:4A:13:40:89:F4:45:57:EF:EF:B6:E3:D8
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:05:07:d7:58:c1:1b:d7:ec:bf:62:0f:fe:0c:00:e0:26:4d:
af:1e:ca:f5:49:f2:d2:bb:89:b8:56:1a:ff:23:b8:84:5c:17:
69:34:c1:17:82:94:d2:b1:5f:06:b0:b0:03:33:74:91:62:9d:
6c:14:e8:94:02:ae:be:68:29:1c:a8:1a:41:a0:0b:3a:80:02:
70:68:2b:20:0d:2d:2e:e2:55:25:d0:b2:9e:ce:69:55:41:25:
48:f5:67:df:4b:e5:b1:cd:8a:96:d3:f3:a9:50:d7:d2:0b:8c:
15:98:e8:5a:28:bb:6a:21:01:9f:72:e3:fb:40:3e:bd:0b:fa:
91:3f:db:a7:01:fa:42:1b:f2:1c:0b:10:46:35:2c:ab:cd:5d:
7b:71:42:23:56:85:d3:75:e3:64:d7:79:f6:a6:99:ca:bb:cb:
cc:84:c7:f6:e4:4a:ba:04:74:87:56:3e:05:81:0b:c0:34:b2:
8e:d7:d6:1d:9a:b7:26:1a:db:85:38:81:e7:b4:dc:58:c6:7b:
a9:2c:d5:c5:39:26:d0:45:e9:d3:72:ef:fa:5f:d0:fb:63:04:
62:94:66:23:a4:cc:a4:05:40:67:a5:cb:41:3a:ad:0f:12:0d:
30:2b:37:9f:4b:78:64:11:23:e9:59:e9:16:54:dd:13:5e:98:
1d:22:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:21 2025 by rpki-client