Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: L7Fz51soRvaUcCiZbUqg/kX1z4aLWE6ssrFXndS5Iu8=
Subject key identifier: B0:07:B9:58:7E:64:32:7B:17:EA:2C:B1:F5:E9:E0:D9:A0:A6:B5:DE
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 01968C261BC780ECD790808D830C868B1569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 14:00:29 +0000
Manifest this update: Thu 01 May 2025 14:00:29 +0000
Manifest next update: Fri 02 May 2025 14:00:29 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: PY53K0EqGi5QXbeuf7ealrUoyFLZE5WlgdTXfJWTHIY=)
2: ZaqC_eqAOQjtM4jTMkAtfUr_HnA.roa (hash: qyBeXguoUs9hwnrHmonqUvuWFW9pHnQHNdEGLzV2NBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:1b:c7:80:ec:d7:90:80:8d:83:0c:86:8b:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: May 1 14:00:29 2025 GMT
Not After : May 2 14:00:29 2025 GMT
Subject: CN=b007b9587e64327b17ea2cb1f5e9e0d9a0a6b5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:a1:ff:2e:61:6a:c9:9e:60:d7:2e:16:cc:
46:f2:51:ce:c1:a3:0a:fc:c8:8e:5e:2b:97:c8:7e:
7c:a1:07:32:fa:a6:9f:0f:83:31:1b:86:b6:86:02:
e4:ee:88:01:ac:32:f5:b0:fd:7c:b3:f4:41:f6:d6:
09:d6:7c:3a:ea:f5:c4:d9:51:c9:fa:b8:65:e5:90:
98:f2:77:f7:6b:a1:b5:9f:69:2b:30:8b:7a:59:9a:
da:62:4c:8f:40:5c:12:7a:b1:ea:95:00:40:59:68:
6c:43:fe:6d:5e:72:8f:47:02:84:16:3c:21:9e:0c:
7e:56:59:bc:89:bd:9d:99:72:19:0d:34:b0:51:1e:
71:4a:08:a2:ef:8c:a8:17:30:50:3f:85:b9:f9:bf:
d3:04:2e:6e:46:d5:42:55:1e:b1:9b:0c:e3:93:f0:
a2:19:56:3e:f8:87:24:d3:ce:19:bb:17:70:2b:20:
a2:19:de:52:82:00:41:30:ea:bd:c2:93:5b:fd:17:
e1:b6:b9:96:04:f0:78:e4:9f:67:4c:91:1d:c3:21:
b2:b4:10:2a:d2:2e:26:74:9a:42:44:66:d0:59:80:
c0:e7:60:c2:39:c1:79:d2:9b:70:93:cb:f7:8c:52:
fe:8e:83:86:3a:e1:96:e5:17:00:ae:b0:13:f2:44:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:B9:58:7E:64:32:7B:17:EA:2C:B1:F5:E9:E0:D9:A0:A6:B5:DE
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:7e:59:65:db:99:6a:5e:6f:28:10:29:d5:4e:74:86:14:
ba:84:3c:5e:72:8e:15:27:49:44:3b:59:82:a1:65:4b:44:8a:
37:43:ba:36:d5:20:05:a0:4b:19:33:c0:61:57:ba:b5:57:ef:
c3:d4:25:27:e9:44:de:09:cf:8a:0e:34:06:f5:3d:cf:50:4a:
37:d7:4f:50:ce:e4:c9:c1:46:7e:6f:f3:a6:53:5e:64:e3:1f:
83:a3:d8:c0:43:23:9a:ec:fb:4f:11:5d:50:c8:50:52:4f:ce:
bd:bd:e8:23:ad:3d:be:5c:82:f6:71:3f:1c:dd:be:0e:99:60:
7d:0b:49:79:48:8f:fb:43:40:62:3e:eb:dc:65:86:cf:6b:37:
9b:f4:49:dd:29:28:86:f8:41:10:84:53:d5:c6:a3:b9:af:ee:
0f:51:27:b9:34:0f:69:5c:18:b0:e7:74:3b:07:5b:07:94:bc:
a7:8d:22:6a:f5:e3:e7:71:65:12:51:8f:68:07:53:95:e7:75:
09:0a:37:bc:dc:dd:bb:ae:52:0c:fc:66:b0:a2:4e:8d:0b:22:
5f:6e:d5:14:1f:dc:71:da:33:d3:e3:57:9f:83:93:8b:75:50:
ee:d4:30:e8:d9:50:d5:2f:d4:e9:5f:a8:c8:3d:3a:b0:de:1e:
40:c8:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:37:29 2025 by rpki-client