Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: CtsxjxnLrA2UauVrA2WTAJNZxf4BbGe6usp22Px8EQM=
Subject key identifier: 41:0A:4B:CC:7F:4F:BD:F0:45:E1:EA:09:95:6A:0E:12:8A:BA:CB:FB
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 0196C871E034DAECCFC7E84C34E1885C18F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 07:00:28 +0000
Manifest this update: Tue 13 May 2025 07:00:28 +0000
Manifest next update: Wed 14 May 2025 07:00:28 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: Hw9VhKciMBYjjedKVIbB4wkvylLWzGBkVEXcA0ZJ+s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:e0:34:da:ec:cf:c7:e8:4c:34:e1:88:5c:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: May 13 07:00:28 2025 GMT
Not After : May 14 07:00:28 2025 GMT
Subject: CN=410a4bcc7f4fbdf045e1ea09956a0e128abacbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:12:97:b7:a2:17:b1:9c:fe:b3:36:51:87:
1d:96:62:33:a2:06:ba:d9:38:af:23:fc:8b:8a:8d:
64:36:d7:77:2d:a4:96:f5:8f:a4:62:01:3d:13:40:
59:78:8b:03:5b:16:2b:3f:0b:29:f1:63:7b:f2:9e:
01:99:2d:4a:40:7e:de:d9:b2:8a:a8:db:f7:53:bc:
93:06:2f:76:a3:9a:7f:1f:a0:3b:fd:64:f2:c8:32:
94:24:96:18:1a:5d:40:eb:7a:47:8b:9f:ee:b7:37:
34:79:03:60:2e:52:04:80:f8:82:73:6e:48:a9:c9:
55:22:bd:b0:9f:bc:21:e8:a9:ea:6f:91:f5:80:e3:
0e:57:31:8d:ef:4e:c1:b3:40:a4:67:23:08:9f:e9:
e0:5b:c1:ea:41:49:b8:a2:6c:f4:80:74:73:e1:ed:
3f:6a:72:88:56:18:82:58:3b:ee:3a:14:5f:eb:7d:
4e:8d:4c:44:11:ea:2c:b5:66:43:2e:c9:59:36:42:
c0:af:bc:c8:f3:64:5f:55:1d:92:69:3f:43:7c:f1:
72:4f:f5:15:18:97:70:2c:35:d3:1a:02:ab:a4:58:
a1:ea:8a:57:b9:7f:f8:fe:b8:f9:ba:d4:3f:72:06:
31:a8:69:13:06:8b:51:ee:aa:ef:2d:45:79:20:eb:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:4B:CC:7F:4F:BD:F0:45:E1:EA:09:95:6A:0E:12:8A:BA:CB:FB
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:c5:77:75:09:33:73:bb:8b:81:33:57:df:57:67:c9:9f:
28:74:70:9d:32:4f:27:e0:d7:62:d1:28:d8:98:f9:31:3a:1c:
c4:35:66:d7:f7:8a:0a:23:47:c2:83:81:71:a8:fe:e5:ff:24:
bb:0a:23:82:07:ef:c7:f3:ec:99:48:59:e8:05:28:43:9d:e0:
47:81:81:e6:c5:59:7b:11:01:11:ba:7c:ca:ee:9b:71:60:cb:
48:ba:96:09:4f:a6:2d:2a:80:f6:ba:d9:00:42:2d:94:b9:a4:
d1:d1:05:85:e1:e1:b7:63:cf:0a:b7:8d:ac:af:83:eb:0e:a8:
9d:a5:94:a4:bb:98:a4:10:c1:93:fc:df:ff:2b:d6:5b:5b:0f:
e1:f1:e6:82:7d:09:3c:66:cb:31:23:69:90:68:ce:ae:c7:fe:
6d:5f:4e:b2:0b:ea:c4:99:22:e9:0e:d2:df:27:ad:74:ad:36:
fc:10:0d:53:1b:9b:47:c8:e0:23:d7:39:3d:e3:ae:e3:f9:44:
fe:aa:1e:47:99:b7:48:2b:84:9b:3c:1b:57:1d:1c:70:39:9d:
f4:7b:8d:37:71:06:d8:41:f9:8e:52:3a:72:39:5b:1a:2b:c8:
ed:7e:a8:cf:0d:5b:be:5c:49:57:27:ed:fc:22:c9:7c:0d:f2:
c4:04:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:38:45 2025 by rpki-client