Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: LwEeop0fQnZQpbkOdqMdL6eK+qoAo0OqetkJZtdDdaw=
Subject key identifier: 63:ED:4D:14:F9:6F:88:91:4C:9C:C1:88:93:D7:37:D4:BF:CD:5D:36
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 01967F0FA21E355FE77177BB1DB608E32270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1222
Signing time: Tue 29 Apr 2025 01:00:53 +0000
Manifest this update: Tue 29 Apr 2025 01:00:53 +0000
Manifest next update: Wed 30 Apr 2025 01:00:53 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: mpdjQWpzT9T8dCNJNRecPZn6sCz+rp0Y+QDV9c0s2FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:a2:1e:35:5f:e7:71:77:bb:1d:b6:08:e3:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Apr 29 01:00:53 2025 GMT
Not After : Apr 30 01:00:53 2025 GMT
Subject: CN=63ed4d14f96f88914c9cc18893d737d4bfcd5d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:3a:20:03:87:c3:7a:07:ab:aa:93:dd:8c:
40:bf:38:4c:b0:9b:08:17:e9:d3:79:3c:e1:e1:a3:
b4:67:2b:b8:27:02:83:38:e9:0b:42:97:62:34:3e:
25:c2:c0:e4:17:05:03:a7:f6:ad:07:58:39:5b:4c:
92:64:57:50:8e:03:9c:1f:5d:67:bf:1c:fc:99:2a:
09:25:e9:9e:d0:71:75:59:9c:a3:e6:0e:83:d9:ad:
a8:cb:47:a8:9c:9a:c9:5a:44:f4:0d:c9:34:ce:47:
06:bb:d9:a9:0b:bd:4a:9c:80:8a:bc:b3:20:48:0e:
46:a2:bb:8d:6f:55:99:19:75:6a:2c:9f:36:7d:f8:
f5:51:8c:d1:0a:db:06:a1:da:1d:33:54:d5:54:7f:
13:5c:7a:d9:2e:79:ab:8c:e4:c0:57:78:6e:35:55:
2e:b7:9f:93:b3:28:4b:35:9f:98:d9:dc:08:0e:39:
6c:f7:26:a0:88:ea:31:1f:e3:a9:47:6c:85:d4:11:
fc:a5:16:1f:25:00:ad:37:cb:cb:24:af:8e:c1:31:
93:33:ab:da:c8:55:0a:d9:aa:80:ff:3b:4e:11:27:
ca:7f:9c:56:ee:63:3b:30:6e:bb:01:68:c3:e1:f3:
7a:13:0b:b7:01:23:49:31:1a:50:f2:de:28:4f:c4:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:4D:14:F9:6F:88:91:4C:9C:C1:88:93:D7:37:D4:BF:CD:5D:36
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:03:1d:a9:29:e4:b5:3c:3b:b6:9a:9d:f2:fe:9f:e9:15:
d3:bc:22:c7:02:16:36:2c:86:ee:3a:60:b9:2a:6e:92:2c:5c:
fb:87:e8:2a:02:fc:0a:46:be:7e:af:de:3d:e8:54:a3:35:5e:
b8:54:4b:32:da:ca:bf:57:96:78:fb:ae:80:25:12:3a:80:f8:
9b:d9:3d:57:43:6e:dc:1e:47:7b:3c:d6:e7:b6:4f:22:43:73:
a5:eb:69:ea:07:37:f1:b9:94:c6:8e:a0:c4:8a:a7:25:4b:e2:
04:48:57:9d:64:bb:1b:3f:8a:19:34:0a:c2:b2:9d:1c:17:71:
c4:53:6f:b8:87:76:08:82:5f:c2:11:ba:16:32:bd:27:bd:0a:
63:4e:91:c2:37:73:60:92:61:e2:03:e6:05:cd:88:4a:9d:c5:
91:56:29:2c:3f:b8:84:2a:9d:79:11:9f:81:75:d8:33:30:17:
44:bc:58:62:24:fa:fd:5b:e6:ae:cb:a4:84:07:56:ce:1b:00:
07:06:36:e3:72:0e:f9:1e:75:00:b1:ed:4f:2b:37:ac:e1:37:
f3:f3:ce:21:57:4c:cc:4e:ef:e9:49:37:9b:10:d8:a7:ee:3c:
be:01:51:42:82:82:14:42:72:d8:74:e8:8d:50:42:8a:fc:ea:
ad:3f:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:29:50 2025 by rpki-client