Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: sMBcEy28q6vOuBBL3c2HghwDC2I3mQDIa0hjdlOuuj4=
Subject key identifier: 4C:F1:46:FE:4E:D6:54:38:6E:E7:E9:0E:CF:17:9B:AB:E8:F3:F5:19
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 01967FEB441FC087AEEDDD0E51FB5360841E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1020
Signing time: Tue 29 Apr 2025 05:00:46 +0000
Manifest this update: Tue 29 Apr 2025 05:00:46 +0000
Manifest next update: Wed 30 Apr 2025 05:00:46 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: 7/CfePsFQ+RYsKbIMrGsUDiuDG8e56GtKF+3oxTHDjY=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:44:1f:c0:87:ae:ed:dd:0e:51:fb:53:60:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Apr 29 05:00:46 2025 GMT
Not After : Apr 30 05:00:46 2025 GMT
Subject: CN=4cf146fe4ed654386ee7e90ecf179babe8f3f519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:f0:58:16:3f:a4:03:ac:fa:2a:13:fa:72:
7d:f8:31:5d:ca:a7:59:8c:1d:72:76:97:39:b3:65:
00:b4:65:d1:3e:24:0e:0c:1e:c0:1c:5f:c1:4a:1c:
3c:95:84:5b:1c:9a:c3:1d:44:c1:e1:3a:6c:a9:34:
ea:4d:3f:4e:75:1f:94:14:3f:14:01:5e:bc:8d:4f:
2d:28:65:27:46:8b:e1:e2:ef:0c:1a:df:63:67:16:
13:fc:9e:e6:75:6c:e2:54:04:03:b4:eb:97:98:3e:
1c:1c:18:38:fc:93:2c:f2:9e:50:a6:c5:5c:57:5d:
1d:a9:f8:89:5c:63:5a:9c:82:45:43:0a:05:52:ad:
91:02:c3:e4:f1:0c:d0:77:e1:68:87:54:d8:91:78:
05:78:0e:e4:71:12:58:cd:6b:99:24:a9:29:8d:3a:
55:68:14:6f:50:58:c2:df:5f:f1:55:3f:db:0a:e6:
d3:b8:6d:de:3a:fa:30:6e:30:85:b2:0e:72:45:be:
0c:f5:af:e7:a3:6f:35:3c:1c:7b:6c:93:62:8d:da:
ce:f4:0b:65:09:37:96:6b:c9:db:56:1d:f6:7e:90:
48:a9:c0:52:5e:22:7d:87:12:86:cb:5c:26:30:34:
7d:a9:ce:7e:dd:ae:49:10:e4:62:3c:dd:29:22:40:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:46:FE:4E:D6:54:38:6E:E7:E9:0E:CF:17:9B:AB:E8:F3:F5:19
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:77:48:4f:cb:b9:30:22:6a:80:d3:6a:98:bb:ba:bb:1e:29:
a3:93:8b:85:b9:f8:5c:10:ee:ce:8d:99:01:4f:b8:fd:66:00:
14:e1:a5:c0:95:91:b7:be:4b:fd:5b:9d:13:c0:b8:1f:ba:73:
64:ab:60:a7:b1:86:79:de:28:02:04:ec:a5:5b:ec:98:0b:b5:
e1:7d:fd:15:12:13:b2:4a:e5:6e:ae:c4:1e:2c:c3:b9:b1:90:
4a:e0:5d:6b:2b:4b:ed:45:74:8b:04:40:9d:90:c2:a5:a4:59:
55:5c:4c:24:a1:1b:5d:8b:2b:d4:1c:7c:9f:ea:51:ac:bf:6b:
4a:d6:e6:19:b4:1d:74:76:1c:fd:48:a7:1e:70:8b:e4:cf:2c:
9a:60:70:a0:ce:bd:fc:c2:be:24:ac:60:0b:7c:97:8f:4b:43:
3b:87:c4:e5:c2:86:a7:5a:fc:d4:7e:c6:88:28:79:74:0c:e7:
ea:cb:d1:8f:2c:b0:11:2b:b9:eb:da:ee:a8:14:4f:62:2c:b1:
ae:6e:6a:28:e7:f3:1e:4d:38:b7:da:85:8e:00:e0:55:29:2a:
d4:37:47:0d:17:17:34:4e:49:94:cf:0c:a9:11:81:d6:44:5b:
37:27:7c:0a:fa:6f:4a:b6:e5:b9:e4:ff:8c:9f:14:bf:16:5c:
e6:2e:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:16:01 2025 by rpki-client