Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: OcAzCDunOqzvmvx1K+CI/poMkPtYnTFksen04FUEyf4=
Subject key identifier: 16:9A:A8:6C:0F:1C:34:78:46:4F:5C:EF:70:24:C0:9D:3C:49:80:1F
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 0196CDCF3F92392A65E14204EBC96FB02228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 050C
Signing time: Wed 14 May 2025 08:00:33 +0000
Manifest this update: Wed 14 May 2025 08:00:33 +0000
Manifest next update: Thu 15 May 2025 08:00:33 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: jopL61n3fPTColyesppiLcqeu/uj2w9LidG2geXlQPo=)
2: M9VdnF4uhv3S8ynJo1kTEBW1AUE.roa (hash: wgWraMBXBDnGqGgz/A6JsNtS6LmlDAkjX4m8FBkaGn8=)
3: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:3f:92:39:2a:65:e1:42:04:eb:c9:6f:b0:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: May 14 08:00:33 2025 GMT
Not After : May 15 08:00:33 2025 GMT
Subject: CN=169aa86c0f1c3478464f5cef7024c09d3c49801f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:ec:ae:5f:ff:a6:b2:f4:62:63:87:23:17:
7d:1c:19:67:8c:fb:86:87:81:80:e3:f5:e2:6f:03:
f3:ca:96:cd:07:ae:2a:03:60:3e:93:52:74:e0:99:
2c:6b:b2:31:34:3d:e7:36:81:3b:f2:d9:4d:3c:ee:
56:ce:fc:03:8d:84:c2:63:af:58:21:fc:8c:6a:a8:
d5:e7:90:96:90:f6:fd:04:2d:46:9c:19:33:66:85:
10:a7:bd:53:f8:24:5b:98:45:9e:f5:73:8e:c9:eb:
c1:20:9f:83:c2:0c:a5:43:2b:38:d4:cb:5a:84:82:
27:e0:90:9d:d9:cc:4c:05:36:f2:3e:31:5a:c0:19:
80:6f:b3:5a:a0:6c:0d:5a:6f:30:82:55:f5:36:f3:
0f:db:f0:bf:05:df:e1:07:d0:cd:e0:9d:4f:79:5e:
6b:c7:50:2b:53:28:eb:a4:31:e2:53:43:81:ca:ae:
1b:78:85:ce:48:5a:28:f3:85:e2:fb:ca:7c:db:13:
53:6d:d3:d7:c1:43:da:01:32:dc:4c:01:75:9e:3e:
dc:82:cf:c6:17:5f:c8:90:b2:ae:0f:8a:5e:8c:b2:
4f:bc:c2:d6:b5:95:c5:06:fb:7c:f1:27:06:a0:45:
ba:5b:c8:83:12:5a:48:e3:e6:da:93:11:dd:39:2b:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:A8:6C:0F:1C:34:78:46:4F:5C:EF:70:24:C0:9D:3C:49:80:1F
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0f:38:2f:40:f4:47:a5:be:67:56:f3:e1:a6:47:2f:c3:6b:
08:96:c3:de:5c:6d:4d:06:64:75:aa:77:f6:51:12:3b:03:f3:
68:4b:01:a9:35:40:8d:66:b0:7e:9f:98:cf:7d:8e:e3:e6:8d:
78:41:a3:de:be:05:d3:d0:24:cb:7d:d6:1f:00:3e:f6:e2:e8:
f9:d5:6d:c3:cb:78:39:01:15:80:b4:b6:9e:28:e4:4e:57:e3:
45:d3:23:18:06:50:cf:57:a2:5b:88:f3:54:f2:01:7f:c6:3e:
d6:97:da:0d:6b:92:15:c4:d3:20:dd:11:1d:f4:6c:64:60:3f:
59:85:90:b3:63:47:96:60:6c:27:5e:32:68:f7:6e:d1:35:a9:
88:4f:9f:01:d9:7e:64:03:2d:a5:0d:52:bf:92:25:cd:97:6d:
4a:e2:d2:a9:40:82:75:39:45:60:19:03:46:e8:c1:2e:6d:f1:
3d:10:c0:b8:3a:4c:82:14:cc:d9:57:c0:12:cc:a5:f2:ed:31:
4e:9a:35:0a:1d:21:08:6d:84:55:9a:3f:a2:f0:11:79:7b:c3:
10:03:0c:e0:1c:7c:b7:08:bd:17:e1:fc:04:29:d2:a2:87:7c:
3a:d3:d7:0d:7d:2b:41:98:8e:94:5a:c6:9e:44:47:c7:8e:e0:
38:22:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:22:17 2025 by rpki-client