Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: E70mNqlJOUN8eqDPAsxE079o1zhrd1Z7WvyyldRdFNo=
Subject key identifier: 2D:46:FB:E6:2B:6D:6B:A1:F7:A9:FA:F2:DB:30:18:2A:19:42:9E:54
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 01968435C2A5A7CBF3A8AEB5AB3781F5DD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 01:00:37 +0000
Manifest this update: Wed 30 Apr 2025 01:00:37 +0000
Manifest next update: Thu 01 May 2025 01:00:37 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: t7UQBVx0qvRSIealEN+R5n/X+DuaexRICaij0d1zY1Y=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:c2:a5:a7:cb:f3:a8:ae:b5:ab:37:81:f5:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Apr 30 01:00:37 2025 GMT
Not After : May 1 01:00:37 2025 GMT
Subject: CN=2d46fbe62b6d6ba1f7a9faf2db30182a19429e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:d4:d0:a8:6e:ca:ec:b6:73:31:26:71:b4:
6b:34:ce:d1:39:a6:7b:94:80:ed:f8:60:84:30:14:
4f:fc:7f:8a:d2:1b:61:34:28:46:97:50:78:63:5c:
95:ce:f3:0c:52:8b:36:57:dd:46:f1:6c:b0:9f:fb:
e7:86:b6:38:d6:df:21:ec:06:71:06:3e:b9:08:88:
d9:3e:07:a9:ca:0c:9b:0b:39:16:d6:27:0f:18:df:
b8:f2:b0:fd:42:06:da:52:e9:95:be:c5:60:84:0d:
c1:fa:09:df:f3:0e:3c:59:fd:5a:93:93:a4:ab:c6:
c7:30:1a:44:92:6f:a0:8f:63:0c:88:90:c7:1b:d6:
84:ad:9b:63:6b:7a:11:87:b2:04:d5:cb:be:33:95:
ff:31:fd:a6:65:c2:f8:56:30:21:06:98:90:a1:a4:
2a:a9:10:d8:31:27:e5:00:7c:39:18:9e:e0:f0:a6:
f1:52:e9:30:14:5f:2c:c9:c9:92:98:76:95:47:6c:
3f:35:aa:49:b6:83:9e:80:56:02:fb:6c:4d:71:ef:
3d:c2:62:c4:53:db:35:2c:3f:91:51:a6:65:55:8c:
dd:dd:01:c3:55:7f:86:c6:74:18:1d:9c:60:36:4c:
92:2e:bb:7c:f8:5e:b6:04:10:6e:e3:cb:04:c5:cb:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:FB:E6:2B:6D:6B:A1:F7:A9:FA:F2:DB:30:18:2A:19:42:9E:54
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:7b:2c:f5:8d:e6:a3:7d:ef:66:98:55:00:5b:15:7f:66:
47:77:6e:97:2e:ff:1e:e0:85:8d:c1:1d:94:dd:5f:d1:f9:5b:
fc:cd:d7:20:af:f9:78:aa:93:40:90:f6:18:f6:57:49:8a:de:
c3:b0:ef:36:37:ba:aa:96:73:3c:52:17:30:55:84:a7:ef:a6:
57:c0:0c:11:7e:bb:6e:62:bd:20:8b:ff:45:14:3f:cd:d8:f4:
9c:21:ab:d2:b7:b9:b3:26:d3:46:27:ed:32:b5:bc:05:c1:03:
35:41:41:9a:5a:0d:bb:c4:28:21:e6:48:c7:9b:9f:90:fb:d6:
56:e1:71:48:5d:19:c5:ce:af:bf:cb:3c:f7:b9:43:c6:6e:d0:
54:c6:25:0c:68:0b:f8:56:48:7c:98:0b:ea:72:f5:62:ec:ca:
4c:09:02:5f:f3:b0:09:10:fd:33:ee:0e:36:f0:65:43:fc:97:
a1:e3:8f:c5:66:ce:68:5b:e6:d3:6c:e4:fb:91:88:ee:b5:2d:
18:fc:b1:b4:ac:46:75:6e:5a:66:45:33:75:20:19:d5:2a:da:
97:7d:ac:bf:4e:9c:78:e0:0a:1a:5b:0f:ca:33:37:36:cd:2b:
3b:7a:83:b3:2e:98:c5:3b:78:1c:59:15:d6:83:3d:72:23:05:
dc:15:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:23 2025 by rpki-client