Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: K4+c6YAT/X3POqZRXbWESHhBzlZIqDNPeXKwu9nTtCA=
Subject key identifier: B2:8D:08:6C:69:F0:AB:20:6B:6F:DE:6D:0F:7D:BE:1D:58:A7:7B:8E
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 01967BA0385997F6DCF68A8552402FE75839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 05E5
Signing time: Mon 28 Apr 2025 09:00:19 +0000
Manifest this update: Mon 28 Apr 2025 09:00:19 +0000
Manifest next update: Tue 29 Apr 2025 09:00:19 +0000
Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: iS0RWelBHRIjRfFtM49qbJB2vM68IHDxhWlTmKB60rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:38:59:97:f6:dc:f6:8a:85:52:40:2f:e7:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Apr 28 09:00:19 2025 GMT
Not After : Apr 29 09:00:19 2025 GMT
Subject: CN=b28d086c69f0ab206b6fde6d0f7dbe1d58a77b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:c5:57:d2:74:59:68:15:b4:11:11:d2:3e:
9f:51:be:cd:cf:65:21:8d:dc:05:f0:be:57:23:6d:
b8:c8:31:6e:3e:2b:7c:3c:27:04:8e:8d:51:8f:12:
5f:4a:15:4b:29:fa:47:19:a8:68:bf:5d:1c:2c:b2:
c5:ff:1e:65:1d:ba:13:76:a3:84:f6:64:56:19:5a:
f5:f2:d2:d7:85:4d:05:94:52:e8:bf:a7:61:a5:9f:
30:ef:a5:87:2c:d1:ae:5d:10:32:f2:2a:14:49:24:
e8:4f:8d:52:52:3a:fd:36:db:d4:c9:00:22:52:56:
1b:f6:5b:74:db:17:5d:f8:13:e7:5e:5f:2d:88:71:
2e:2b:75:a1:fc:6d:dd:31:ee:dc:34:d4:25:09:99:
e0:f2:35:e7:0b:63:28:0a:ab:44:0d:1d:df:c4:42:
93:06:09:b8:39:33:cf:ec:ae:12:d8:95:8e:b2:7f:
13:3c:01:f6:df:0b:c3:fb:fa:5b:59:48:ed:a6:96:
98:23:5b:77:ba:7e:23:ed:07:70:4e:e5:b7:aa:c7:
2c:22:16:be:dc:ed:5a:d2:c2:c2:27:f2:95:6c:ec:
3b:83:2d:e0:72:f2:7a:76:4b:cc:57:2d:8a:40:3e:
59:40:19:f2:1a:07:7c:67:ba:e0:cf:b4:76:49:05:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:08:6C:69:F0:AB:20:6B:6F:DE:6D:0F:7D:BE:1D:58:A7:7B:8E
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c4:6b:db:af:f3:2c:97:ab:ae:14:4c:83:2b:9d:37:af:2b:
0a:f2:09:e7:1a:0f:a2:af:7a:3f:17:cd:f6:08:f9:c5:6a:05:
f6:ad:f2:b5:42:df:4e:12:97:46:78:ef:01:7d:b0:08:83:82:
69:e2:62:94:86:7d:c2:8d:ab:c1:5c:fd:a2:ff:aa:19:a7:8d:
c5:77:39:45:91:0e:a7:4c:49:a2:f4:60:6e:b3:56:cc:de:a7:
cf:d7:5c:bb:23:68:15:04:78:9b:2b:00:e8:9c:b0:e7:27:d1:
a2:09:44:46:20:48:e2:a5:c9:be:79:07:6a:3a:47:fa:8a:94:
31:a4:07:06:76:39:a7:3a:1a:68:79:d7:5c:aa:b5:d7:9d:c8:
ac:ae:ac:c1:d3:0b:78:24:5d:cb:d2:3b:74:d4:fe:ed:45:93:
5f:2a:7c:51:dd:fd:77:09:7e:5b:0b:19:1e:8c:f0:89:07:4e:
50:1a:87:ff:4d:64:52:1e:27:46:b6:74:52:d4:fd:8e:79:6f:
0b:4d:a7:4a:07:77:7a:e5:e0:da:65:c6:13:e6:7c:28:f8:24:
38:81:fc:00:48:e5:ff:04:b7:0c:5e:82:e7:c8:33:46:11:e4:
2c:1f:5a:5a:fa:37:85:78:b3:10:95:78:3d:b9:02:73:00:db:
b8:25:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:24:05 2025 by rpki-client