Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: RN9zs/V/CyZBJUGlvtUheTJXqRo3W8HeQLzjDcl2SZs=
Subject key identifier: 72:3E:F9:0C:96:15:DF:C2:9C:5E:66:F3:40:8D:BE:0B:B5:FC:42:00
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0196A12D628D4B376B2C91710C1F19BBDDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1229
Signing time: Mon 05 May 2025 16:00:28 +0000
Manifest this update: Mon 05 May 2025 16:00:28 +0000
Manifest next update: Tue 06 May 2025 16:00:28 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: Ffvj7cdopSTbIaxyX89L4oGNeSBNKQ9qR9g/apNbAYw=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:62:8d:4b:37:6b:2c:91:71:0c:1f:19:bb:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: May 5 16:00:28 2025 GMT
Not After : May 6 16:00:28 2025 GMT
Subject: CN=723ef90c9615dfc29c5e66f3408dbe0bb5fc4200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:a8:e9:f0:9e:74:fa:a6:d7:cb:cc:be:ae:
4c:d5:5a:7c:5a:c4:42:3c:28:8e:31:71:94:f8:7f:
74:4f:5b:5f:0b:44:57:3b:7f:e9:93:cf:2c:56:9a:
a3:38:b6:b5:ab:69:1d:87:fe:75:a1:7f:15:45:21:
ab:70:9c:ef:92:9b:84:69:c3:de:30:ce:35:06:ba:
87:1c:a2:c4:e4:bd:e9:ef:c4:35:6a:4c:a3:95:1f:
ed:2f:92:6b:11:e9:14:bd:a6:2f:3c:d6:30:5f:b3:
85:28:0b:37:77:da:9b:a6:9a:ad:c8:45:a5:81:c3:
74:eb:15:b3:dd:81:d1:65:87:90:87:c0:a1:39:1d:
6a:91:c2:f3:ae:64:95:b3:aa:bc:b6:eb:37:0e:92:
56:59:44:b8:9d:55:31:05:25:64:2e:76:37:71:0b:
54:45:a4:67:ee:e7:48:27:d2:31:49:7c:88:63:a2:
e9:1d:e3:92:8f:f5:32:ca:1f:cf:3f:07:b6:fc:23:
4a:85:c0:9e:b1:15:a2:a5:31:22:f2:a1:a7:94:f7:
a1:7c:75:c3:5f:a6:ea:31:4a:3e:d5:bd:46:02:71:
09:84:d2:00:c4:04:d0:2d:92:91:29:d0:24:bc:96:
48:52:ac:fe:a4:9b:82:64:17:48:3f:69:4e:b4:63:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:F9:0C:96:15:DF:C2:9C:5E:66:F3:40:8D:BE:0B:B5:FC:42:00
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:56:cd:a4:b9:6a:d5:45:b9:a2:b5:bc:f8:74:9c:90:e1:67:
13:a0:3e:d7:0a:7d:80:11:ff:5c:56:e9:3c:98:a4:d2:4c:15:
56:f8:3f:00:b8:3a:7c:83:cb:d5:f0:21:c9:3f:22:4e:bc:15:
2d:b0:c5:63:1d:c7:7d:b2:ef:df:73:da:ce:d7:6b:d3:6c:b0:
e0:66:a5:11:50:8a:7b:a9:67:0b:53:76:ab:fb:19:83:92:97:
0c:59:a9:93:c2:96:00:fc:88:4f:21:10:d0:3b:11:49:4b:4c:
49:36:a2:69:17:26:7d:2c:24:30:60:ea:95:38:6d:ea:aa:e1:
2c:d6:eb:8f:d3:06:ca:d0:06:9a:46:6a:64:43:76:3e:9d:42:
82:ec:1c:d9:b3:b5:bc:ab:c8:fb:28:54:1e:fc:59:e8:51:5f:
8f:f7:4a:27:b0:2a:50:1f:6d:0a:89:33:6d:8e:df:59:72:90:
06:19:67:aa:35:0c:46:b4:4c:6c:21:22:74:1c:6f:7b:0a:71:
50:37:0e:c8:ab:a4:0d:9e:e0:1b:38:ec:0d:3f:b9:3f:ba:85:
09:29:f5:53:05:ee:93:20:b8:f8:d1:80:f3:7a:8d:88:37:25:
83:e2:f7:53:22:85:7e:75:e1:0d:39:1c:96:16:d7:fb:6a:07:
c8:1b:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:01:28 2025 by rpki-client