Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: +YPw3kCI8pYkNHnXpy8mOKEGyD+oWKf7INKvYkTEEBo=
Subject key identifier: A4:E8:7A:08:88:E0:C6:D3:33:F3:4D:5A:CC:BD:26:94:25:FF:07:27
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 019681D9803528DAF011E3ACE7C65397D41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 139E
Signing time: Tue 29 Apr 2025 14:00:36 +0000
Manifest this update: Tue 29 Apr 2025 14:00:36 +0000
Manifest next update: Wed 30 Apr 2025 14:00:36 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: 6RAn5009oMQEndCZfTwUgNYPbTF0LIQSIT2gZnEoA6k=)
2: aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa (hash: b2SmcSH4KOG2Jvamzo/dYIoESNg2kaU1WJmva5O/UBE=)
3: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:80:35:28:da:f0:11:e3:ac:e7:c6:53:97:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Apr 29 14:00:36 2025 GMT
Not After : Apr 30 14:00:36 2025 GMT
Subject: CN=a4e87a0888e0c6d333f34d5accbd269425ff0727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:a2:c5:be:35:ce:5d:72:b3:26:99:a1:ec:
68:fe:78:69:36:6b:ee:71:a8:3a:f9:3b:f6:0c:74:
36:df:17:59:6e:c5:ba:a1:22:e8:dd:ed:1d:7f:1e:
51:03:2a:b5:12:bc:7a:ce:1d:9a:96:23:77:11:8f:
10:f7:15:6d:01:52:b6:49:a9:78:9b:cb:5b:95:09:
3c:7e:66:c5:8b:76:41:dc:0e:eb:8d:e1:0c:2d:bb:
01:68:7f:1b:7d:59:97:f9:7a:49:ee:8e:26:95:4f:
1c:43:be:b9:de:92:99:e0:00:2a:0f:f4:07:1b:be:
49:ea:e6:00:b0:dc:c8:54:da:53:12:4d:05:e9:4c:
50:2b:c2:01:c1:45:0d:f4:84:d6:2f:f4:85:54:1b:
90:98:05:ca:e7:f1:90:43:49:88:2a:29:8d:20:ae:
71:b7:f0:65:a5:c9:95:ef:69:c3:31:93:88:a4:ad:
9c:98:5c:52:08:d7:ff:c1:f9:95:95:10:e5:fe:b0:
49:01:52:1d:d7:cd:b8:26:94:52:38:23:ed:a3:36:
02:12:b3:43:a1:59:93:82:d8:97:d4:6c:c7:92:9e:
3f:9a:c8:01:79:2d:1c:83:a1:c4:0f:90:32:6d:df:
43:0e:38:2c:46:c5:23:4c:04:14:18:18:9c:9f:bc:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:7A:08:88:E0:C6:D3:33:F3:4D:5A:CC:BD:26:94:25:FF:07:27
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:3a:d9:7f:8a:fe:89:19:ab:44:3b:01:af:ba:cc:ff:66:
09:5f:ae:f6:42:d6:d6:c0:0a:0d:e1:4c:91:80:3d:57:35:29:
fb:67:6e:5b:d1:02:41:e8:ab:0f:72:47:6c:20:e7:4f:2f:2a:
c7:65:6a:ec:fa:89:a6:5a:6e:63:18:cf:7e:39:74:05:2f:36:
aa:6d:e6:d1:d0:1c:40:f8:55:16:3d:b3:6f:29:2d:c8:6d:b7:
9f:29:e6:cd:af:a0:03:79:12:03:30:5c:61:23:8d:2a:94:c6:
fa:e5:49:69:28:72:ba:bc:93:de:e2:b9:dc:43:58:d9:6b:fd:
ce:2d:4a:f0:0e:52:df:6a:f6:a4:17:23:16:50:d1:58:b2:0a:
27:46:cb:aa:0d:2f:98:f5:b5:bf:f8:bd:ce:3a:92:12:61:e8:
66:c2:48:11:10:19:cc:b1:6d:24:67:21:fd:b0:37:f2:32:fa:
69:23:99:58:f4:ba:fa:28:48:38:a9:6f:23:b6:46:97:31:06:
9c:ca:e2:fc:a5:65:3e:e8:b4:6d:b0:e6:15:d9:01:49:ff:a7:
c6:7e:d8:22:4d:e7:3c:30:0e:75:7a:5a:76:08:8f:c8:d4:14:
26:fd:de:66:49:74:b2:53:ce:c5:7b:66:70:7b:7e:6b:26:5f:
c4:02:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:08:59 2025 by rpki-client