Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: tkkbWDHASdkc0ocP1CNB+db+eMORnWiOHgUDn4/lKDw=
Subject key identifier: 53:F8:DF:9B:BB:7A:53:9B:09:E8:50:52:B0:89:A7:F9:D4:EA:D7:91
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0196790D315011DC4E1F15A3E83271F5AAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0A8C
Signing time: Sun 27 Apr 2025 21:00:29 +0000
Manifest this update: Sun 27 Apr 2025 21:00:29 +0000
Manifest next update: Mon 28 Apr 2025 21:00:29 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: KQbJHIwGExD+KsCuxsQnhdIB2N+y7KayWg/57sMNhtM=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:31:50:11:dc:4e:1f:15:a3:e8:32:71:f5:aa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Apr 27 21:00:29 2025 GMT
Not After : Apr 28 21:00:29 2025 GMT
Subject: CN=53f8df9bbb7a539b09e85052b089a7f9d4ead791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:02:0c:98:67:dc:00:02:24:f9:08:57:b4:
19:ac:8b:1c:57:0c:a4:9a:87:62:ad:0d:79:c7:f4:
a8:e5:d7:d9:d9:31:6a:f0:0c:37:f4:e1:f0:bc:9d:
5c:86:c7:30:d2:5b:e1:8b:d8:c2:67:52:0b:4c:97:
f5:92:f2:8d:fd:21:e4:fe:f6:42:88:dd:9b:d3:50:
9b:c3:e4:9b:ec:8f:b2:8d:5d:05:d4:39:39:a4:d7:
3d:32:99:40:85:76:ac:6c:2f:a6:5e:6e:9f:55:d9:
3f:c1:c1:7d:80:46:0f:35:52:6d:3f:08:29:a6:c3:
76:97:e1:90:e8:22:14:32:07:be:24:11:60:4b:24:
b0:2a:bc:79:20:29:f9:f2:d1:98:bd:2b:d7:73:f9:
d9:46:3f:cd:60:77:8c:4b:e1:f1:f6:51:1d:95:ee:
19:26:bc:b4:55:d7:da:e6:7e:6e:88:1c:58:63:0b:
ce:30:f9:86:45:49:97:37:26:2f:5b:72:d7:96:ee:
54:24:54:57:f7:30:05:35:33:3d:93:69:74:b8:43:
f5:cd:ae:2c:9f:d7:c0:e4:3b:59:90:ca:d5:d5:2a:
95:de:40:0c:10:05:f2:ce:80:b7:c0:fc:bc:b0:09:
2a:0b:64:fc:37:e5:74:9f:92:0b:5d:59:84:99:77:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:DF:9B:BB:7A:53:9B:09:E8:50:52:B0:89:A7:F9:D4:EA:D7:91
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:aa:10:fb:e6:42:2f:57:e2:e5:d6:2e:ac:66:c6:7d:bd:
19:c0:89:3a:2b:e5:0d:8d:89:99:d0:b0:7a:69:ec:d7:d9:92:
f9:9a:d7:d8:04:0c:d0:35:f9:3e:6b:3a:4a:c9:25:64:8d:a5:
2d:28:6f:b8:37:a5:35:5c:dc:b1:d8:0b:57:b4:71:46:92:31:
e9:31:fb:d7:29:62:4d:95:e2:bd:f5:29:82:68:dd:03:8c:05:
e1:44:1a:73:ba:0f:0e:c6:e3:38:58:4d:f1:36:ef:23:4e:ca:
92:0b:68:ce:ac:69:45:7e:f0:ed:a4:bb:f6:b9:46:f2:13:9c:
6f:fe:bd:c1:e2:44:e9:7a:5a:9c:8a:d4:c4:16:26:d5:d7:f6:
7b:be:59:ce:38:d6:9a:a3:3f:22:dd:e5:20:44:56:b4:84:e2:
0b:3a:b2:77:f2:94:bd:83:ae:a9:c0:f9:95:e9:55:27:d1:b0:
f2:90:ad:4d:8c:e0:5e:77:10:22:0f:06:a6:9a:fb:19:81:d6:
27:55:e8:b6:97:9d:65:62:50:d0:d4:2e:35:39:02:05:4f:50:
a4:0f:22:a7:ed:98:8b:0a:94:d9:c3:1d:f8:fa:46:e5:b7:7a:
1a:44:25:7e:c2:f1:9a:8c:cb:67:ef:2a:61:1f:45:6a:ec:c6:
c3:82:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:45 2025 by rpki-client