Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: R5zVB3PqH6ECyL+Fw8soWEC3nNWnXTyRTQ3ZWe0Ln+w=
Subject key identifier: CA:0D:5A:48:86:50:33:2F:F0:A0:81:5A:CC:6E:1F:2C:A7:0C:5A:E9
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0196760CD98F7447BC3D72FF1B9CB945B7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:15 +0000
Manifest this update: Sun 27 Apr 2025 07:01:15 +0000
Manifest next update: Mon 28 Apr 2025 07:01:15 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: LdeLAvpT/KiLh7Vi+q3c6Q3TfIOux18wXKF5NoK7ARI=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d9:8f:74:47:bc:3d:72:ff:1b:9c:b9:45:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Apr 27 07:01:15 2025 GMT
Not After : Apr 28 07:01:15 2025 GMT
Subject: CN=ca0d5a488650332ff0a0815acc6e1f2ca70c5ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:bd:e2:19:00:cc:d7:d9:99:ae:72:7f:ca:
17:3b:04:75:24:8f:89:78:62:f7:0a:38:e0:70:f9:
9d:58:f0:ad:c8:f5:2c:5e:00:1e:18:67:88:d3:bb:
c3:2e:4d:fd:9a:67:87:4f:f3:2c:52:1a:7e:91:03:
c0:c2:2e:3f:16:0e:5c:af:3f:4b:77:12:23:61:af:
8f:e3:68:0a:52:99:1d:25:b5:08:a6:a2:c4:d5:17:
a3:e0:bb:72:19:00:46:6a:aa:2c:4d:65:d4:a8:01:
0f:16:e5:0a:9b:8e:30:24:65:cc:c8:3d:63:74:ab:
8e:1c:fa:93:ad:1e:0e:bb:09:b7:90:eb:07:08:58:
7a:45:a8:3b:51:73:39:ea:b5:98:60:3a:59:76:a9:
d1:fe:36:c4:31:7d:6a:1a:75:68:fb:c6:a9:3b:5a:
cf:6c:2a:2c:05:d8:6d:5f:63:da:5a:be:8b:dd:7b:
fd:60:9b:b1:fb:ad:c7:48:a3:ed:e9:42:53:19:a2:
75:e0:f2:4c:78:4a:df:a2:8a:90:e4:f5:40:82:3b:
b4:f1:f9:9c:24:b4:22:60:ab:dd:bb:27:dd:70:a3:
2b:5d:47:77:f5:4f:71:ad:00:e8:8b:71:90:f3:5b:
52:88:50:34:1f:20:9d:5f:24:9d:8e:2b:b9:8a:d0:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:5A:48:86:50:33:2F:F0:A0:81:5A:CC:6E:1F:2C:A7:0C:5A:E9
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:f8:c8:f3:e2:e5:c0:b6:f6:1a:30:ba:c9:01:a1:2a:0e:
32:2a:75:db:fe:57:94:4c:d2:45:62:cd:af:20:ae:f4:69:12:
75:2c:68:96:f8:7c:ec:e1:bf:2c:99:5e:8a:02:f1:52:70:aa:
06:f2:33:f4:bc:a7:b2:60:8f:d9:84:a2:fb:64:3b:ea:d7:93:
5d:db:10:3b:36:13:9b:aa:c2:9e:fa:22:62:32:b6:c1:17:87:
69:04:b7:bb:08:50:b4:9e:4e:0a:61:5c:37:e9:76:69:8b:a9:
e9:d1:2b:10:c6:15:e4:4f:d8:76:bf:42:1c:df:18:27:da:96:
b1:a7:13:b2:0d:92:09:22:b6:1f:6c:82:d9:78:39:cc:77:53:
33:7f:82:0f:53:e3:da:3c:cf:39:1e:68:e6:dd:90:3f:97:0b:
f3:e3:83:54:fe:0d:63:74:ad:82:3b:41:c8:93:44:f1:91:a3:
77:da:a4:fe:cf:6d:2c:5f:84:44:30:88:27:88:4b:66:78:dd:
cc:8a:a2:a0:10:ab:45:43:78:f0:85:98:d5:be:72:5a:2c:b9:
f4:62:a9:b2:91:ca:72:c9:8a:6a:10:31:c4:f6:21:99:bd:d5:
94:60:37:e0:e0:2a:b9:9b:9a:f2:13:90:9a:e3:3f:67:79:2d:
ab:7a:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:20 2025 by rpki-client