Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: URWrZ2wgG2lW9jL7zWFu90CErEL2/kRTWVhQ8OIOfpw=
Subject key identifier: 65:EF:36:59:F9:F8:1F:5B:81:69:0B:A4:38:7A:FC:C4:9A:CD:B0:AF
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019673AFD5A306B3CBED5E5CDAC4209F8DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 20:00:25 +0000
Manifest this update: Sat 26 Apr 2025 20:00:25 +0000
Manifest next update: Sun 27 Apr 2025 20:00:25 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: jj4yT/b1zPhR9jx4ud1HkaP0dj0gYFSX0r9oEpnLmL8=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:d5:a3:06:b3:cb:ed:5e:5c:da:c4:20:9f:8d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Apr 26 20:00:25 2025 GMT
Not After : Apr 27 20:00:25 2025 GMT
Subject: CN=65ef3659f9f81f5b81690ba4387afcc49acdb0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:cd:31:7d:c5:37:45:77:70:bf:cb:b8:7a:
58:c6:a4:d8:3b:d5:4e:5b:73:ce:76:94:ec:d7:3a:
33:33:14:cc:21:42:7d:15:bc:74:e1:7b:03:03:20:
41:eb:b4:a9:2f:44:74:1b:59:12:60:12:74:aa:34:
c7:0b:7c:6e:6e:fd:c8:80:0b:8d:6f:9c:80:13:df:
ac:e0:06:a2:bd:51:80:0d:4f:89:58:b9:ad:80:5f:
42:a7:ad:24:88:60:d6:9f:6b:7d:6c:dd:8f:2e:5c:
d5:4e:cf:b0:82:50:6b:c9:e5:f9:7c:44:7c:91:dd:
c8:dd:a9:6d:a0:27:16:4f:48:0b:97:1b:85:82:34:
15:c7:a7:2e:f1:52:ce:2e:b9:5a:aa:c6:ac:cb:ca:
bd:83:71:d6:2f:e5:18:7e:1b:5c:33:b6:5e:54:5e:
e0:96:25:8f:f7:ab:61:ef:27:b3:69:0b:b2:b9:3d:
e8:41:b6:ff:33:2c:8a:ce:b5:92:27:dd:67:94:8f:
48:b4:60:cf:42:a9:ae:ed:27:06:0a:06:7f:17:81:
17:1a:ef:30:7f:ab:0e:42:49:17:69:dd:54:67:46:
0a:92:eb:ad:ca:74:86:e7:fa:6a:52:d0:71:6f:c8:
53:f9:ea:90:fc:7b:fe:13:36:79:41:83:60:39:9f:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:36:59:F9:F8:1F:5B:81:69:0B:A4:38:7A:FC:C4:9A:CD:B0:AF
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:8d:49:9e:d9:26:09:8f:dd:2b:1e:85:46:41:d8:a5:0f:
c6:97:c6:fa:c8:e9:33:ae:10:10:17:63:58:54:06:ca:8f:a8:
9a:f5:d0:9f:13:08:44:5b:39:c0:fc:77:d0:77:ea:7c:8b:e0:
d9:0e:9b:4b:69:58:fc:be:35:06:43:8e:48:70:cf:fa:15:0e:
e5:5f:80:8b:4f:96:5e:d1:16:07:f8:56:66:69:79:e1:0d:31:
50:8c:10:12:af:a2:f5:dc:36:1b:df:84:36:83:e7:2d:d7:cd:
2c:23:14:37:0a:f1:58:96:81:e5:ed:f9:1e:34:59:ec:c3:af:
9a:ad:c4:d9:3a:a9:73:81:ab:a0:7c:dd:40:cb:3f:7d:0d:81:
c2:7c:b3:ca:d4:12:f7:0b:09:1a:26:1e:42:db:26:ae:0e:00:
ac:c3:d0:b3:91:53:0d:39:c5:23:ea:ea:66:4a:07:d5:04:ff:
4c:ef:c9:ed:00:c2:45:26:7e:92:63:fc:09:89:cd:67:3e:6e:
42:e2:f9:59:a9:08:ab:3f:d1:64:a6:37:db:e6:3b:72:8e:ab:
1d:15:29:d0:21:17:3e:f5:d4:cd:73:b9:92:ed:1a:5a:52:ef:
58:e8:3e:04:f9:10:ef:cd:f8:4e:17:91:8a:71:d4:7e:e4:a9:
bf:35:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:40 2025 by rpki-client