Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: 4zuxBTzJ7kx91x4hU90hIAzcJ6DLbQ0BPKCbnErPcFA=
Subject key identifier: 20:52:09:DA:CA:31:20:93:45:C5:13:17:E7:6D:F5:AA:F4:ED:34:5C
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 0196D74003FDCA3FF9E22F7C2B2FD1CCE887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 123D
Signing time: Fri 16 May 2025 04:00:18 +0000
Manifest this update: Fri 16 May 2025 04:00:18 +0000
Manifest next update: Sat 17 May 2025 04:00:18 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: XfrV2cEXFJvdy29J82jKU06RPf+cB7o5SexeZOzwpMY=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:03:fd:ca:3f:f9:e2:2f:7c:2b:2f:d1:cc:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: May 16 04:00:18 2025 GMT
Not After : May 17 04:00:18 2025 GMT
Subject: CN=205209daca31209345c51317e76df5aaf4ed345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:ea:35:20:5f:ec:4b:41:af:a4:d6:a8:b4:
9b:8c:23:25:af:cf:3f:b8:55:8e:6e:cd:ad:e5:55:
f2:83:19:e0:c0:8e:ae:c6:2d:59:66:09:2f:7b:9e:
fe:93:11:68:b2:48:b5:3f:32:d3:b1:35:42:16:1a:
48:5f:c4:1c:a2:10:58:31:56:38:ef:7e:ab:f5:51:
43:be:ee:f5:04:31:01:50:a0:1d:32:da:fb:e7:e7:
c6:33:39:85:17:83:69:f8:e9:e3:70:e7:90:25:92:
95:9e:f2:5f:b0:59:1b:2c:d1:74:0c:fb:95:11:54:
d3:65:ad:fa:54:45:29:67:00:33:5f:8d:d2:78:5a:
c7:53:57:76:38:d5:76:43:c9:5e:ad:f9:b5:80:9b:
8d:7d:35:10:b1:59:ed:26:c0:0e:66:e7:6b:48:23:
88:fd:71:7b:bc:f7:69:07:2b:6e:82:ea:d4:15:59:
88:7a:60:4e:63:46:3e:6b:ef:3d:cd:ec:fd:66:d8:
06:a0:64:96:55:a5:3c:49:98:81:86:a5:5f:ed:67:
b3:f1:c3:b9:36:6d:10:14:19:f2:09:d0:97:f9:6c:
f2:1a:cf:ac:66:d4:d3:9f:a2:0c:e4:50:dc:e8:9f:
70:af:b1:55:6d:32:f9:ff:ad:5b:d3:cf:46:a9:44:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:52:09:DA:CA:31:20:93:45:C5:13:17:E7:6D:F5:AA:F4:ED:34:5C
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:63:5c:e0:4f:50:5f:cc:cd:86:33:70:c5:91:bc:a3:f6:
b3:41:81:65:2f:c0:86:2b:b0:c6:2a:62:28:89:36:c8:63:18:
0d:de:ad:03:f0:d7:67:b7:5d:39:8f:87:ec:d8:60:08:d6:4a:
76:6f:6e:9c:74:83:29:b8:bc:70:9d:16:92:2e:4a:85:e2:83:
07:bf:b3:f0:a7:bd:d8:bb:ca:4c:34:ff:32:6f:a0:ba:d2:f9:
38:94:d7:03:10:ca:85:6f:28:63:36:f7:24:2e:86:ec:9e:7e:
05:c1:69:77:34:03:8f:26:4e:5f:1f:20:10:63:72:e1:6b:2b:
2f:2f:98:01:a2:3e:92:f9:ae:cf:3f:9b:b9:14:94:af:25:cb:
53:65:ea:ea:b8:ba:20:7b:d7:0e:83:43:65:75:67:f1:49:c2:
53:16:49:c6:74:f7:0c:ca:b6:98:23:f6:05:90:bb:46:ea:92:
d5:de:3b:eb:d9:a9:39:a4:e1:6c:f3:6a:81:65:fe:e3:02:d1:
82:b5:7a:20:eb:74:87:0a:7f:0e:c1:d4:e7:e6:46:cf:56:45:
1f:b3:9f:ed:cd:50:4c:a8:8a:b3:4e:10:7d:7f:39:0f:d2:03:
83:bc:38:cd:09:ab:64:d2:df:0b:7d:25:5b:1a:8a:47:06:77:
80:e2:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:11:34 2025 by rpki-client