Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: 6kD42hklntaI+pldOMH/gTzMkdLl2mUqKx8VlWuLAP8=
Subject key identifier: AA:F6:2E:39:78:B6:20:0C:DC:80:24:11:94:D2:46:E6:0E:25:40:94
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 01969FE42F8AA8B592EB09D8F8DC1961637F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1325
Signing time: Mon 05 May 2025 10:00:53 +0000
Manifest this update: Mon 05 May 2025 10:00:53 +0000
Manifest next update: Tue 06 May 2025 10:00:53 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: eDxMkextFYPFSQwhsEz7asrkYwi49LwO90bY3oeI1Vw=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:2f:8a:a8:b5:92:eb:09:d8:f8:dc:19:61:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: May 5 10:00:53 2025 GMT
Not After : May 6 10:00:53 2025 GMT
Subject: CN=aaf62e3978b6200cdc80241194d246e60e254094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:bc:2d:41:2c:5f:a5:9b:cf:34:fa:a9:1d:
7a:34:75:ac:59:90:a2:97:84:7a:1c:cd:d8:1a:32:
38:73:a0:e4:e9:0c:b3:52:8c:a6:92:d9:22:92:00:
31:3b:81:21:8c:80:8b:7d:62:57:a8:dd:4e:1c:68:
16:8e:70:14:76:b7:a4:31:b5:46:cf:93:9b:9c:32:
6f:71:74:cd:19:c6:d8:01:0c:55:f9:96:5a:94:de:
ca:5b:12:02:4a:81:a4:5b:cf:bb:65:92:7d:6b:76:
9d:85:f8:80:c6:30:ca:36:f7:7c:1c:ce:dc:c1:a7:
c9:29:c0:f5:47:5a:75:a2:a5:96:93:d5:b4:1d:81:
9b:6a:65:64:89:53:ac:46:76:53:00:62:fe:14:90:
6c:83:c4:93:08:d7:f5:6b:94:57:d8:9e:2a:62:07:
df:cb:ba:e5:d7:31:e5:54:f9:10:3a:a3:d2:d0:ad:
c9:61:bd:e0:88:6b:49:c9:54:7a:a9:ed:1b:c9:10:
46:e6:06:4d:fe:c6:c0:28:ea:e3:04:e0:04:8a:27:
21:68:d2:16:6e:49:35:38:d9:ca:4b:45:aa:25:8d:
e9:7d:1f:10:8d:92:47:a6:dd:1c:a2:e1:59:b2:a1:
67:bd:2b:87:25:5e:e6:d1:da:f0:72:c1:a4:e2:e9:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:2E:39:78:B6:20:0C:DC:80:24:11:94:D2:46:E6:0E:25:40:94
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:62:0a:18:a6:73:21:bb:19:14:e5:b1:94:32:1a:23:48:
d1:55:82:b9:f8:cc:2b:02:72:7d:b6:54:66:72:0a:4e:dc:a0:
48:88:04:5a:e1:fa:2c:fc:e2:5a:00:64:9b:9a:2d:dd:6e:49:
fb:3a:c0:0f:42:04:0d:c4:c0:5d:dc:0d:d9:94:7f:58:09:6e:
cc:01:b9:12:b3:e9:41:18:99:55:c4:9a:c8:21:4a:44:94:15:
43:1d:ef:9d:3d:a9:2a:86:96:66:b5:01:94:6c:57:24:a5:4e:
a3:3d:ec:7e:e2:28:d5:f3:a7:97:6e:ff:f1:c1:8c:72:aa:eb:
a1:61:56:5b:23:d3:7f:86:ee:e3:e6:3f:56:67:dd:a4:18:11:
8f:54:b7:38:70:e1:91:f6:e2:3f:a4:fd:e9:21:d8:95:20:99:
1e:30:27:ec:13:75:2d:4e:0a:e0:70:15:0b:f4:cc:be:d9:f6:
85:ca:48:80:ae:b1:b0:a1:32:f7:f9:40:99:e6:c2:99:29:e6:
82:31:03:df:51:ae:4a:01:89:80:a3:4b:fd:67:04:d0:be:73:
19:59:6d:a2:46:2c:49:de:f4:91:74:ea:d3:83:4e:2e:c4:b0:
52:b8:76:c4:00:94:93:fd:5f:6e:e5:b0:b0:91:a8:4d:19:31:
8a:bc:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:27:50 2025 by rpki-client