Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: NRJHStIkLErTy7BTYbGo3quSavOn/DPZNa8DAfEMqIU=
Subject key identifier: 96:C6:63:84:42:51:30:3D:29:88:1D:3A:83:29:25:BF:D1:33:0D:56
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 0196B85A26947FB5FA17439F559833C84775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1493
Signing time: Sat 10 May 2025 04:00:37 +0000
Manifest this update: Sat 10 May 2025 04:00:37 +0000
Manifest next update: Sun 11 May 2025 04:00:37 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: uQkg+xABekXnSr6mhuk0oC5qb6CKfVyyYVLQMp2rbvs=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:26:94:7f:b5:fa:17:43:9f:55:98:33:c8:47:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: May 10 04:00:37 2025 GMT
Not After : May 11 04:00:37 2025 GMT
Subject: CN=96c663844251303d29881d3a832925bfd1330d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:54:60:84:1d:45:d5:5a:ba:75:6c:1b:53:
05:e4:8e:c4:34:51:47:94:6a:0b:20:95:4c:6e:9a:
ff:ff:76:fc:2f:da:b5:a6:e3:dc:c3:53:66:57:20:
c9:e2:48:c2:55:28:69:c6:bd:fc:fe:3a:52:ba:8b:
ad:6a:19:22:e0:fa:77:2c:4b:09:1c:e9:1f:3e:7e:
99:03:70:fe:b3:c5:2c:d9:97:f0:58:01:9a:8c:fa:
e4:db:25:b4:7b:13:7c:35:68:f8:28:77:51:e7:d9:
90:68:1b:7d:7f:ef:10:18:46:47:5a:33:a7:7d:73:
76:50:69:5e:7f:16:5f:c7:a3:22:3b:76:aa:5c:19:
4b:4f:b9:67:6d:65:a1:40:af:7d:76:7e:e2:34:ee:
cb:55:8d:ad:9f:48:ec:7d:ba:f4:67:9c:ad:33:36:
c9:d8:91:ba:c2:70:ed:44:51:02:60:cb:82:4f:f5:
98:9f:b0:f4:07:6c:10:aa:22:35:e7:ae:19:5d:65:
ee:4e:6d:c9:16:b9:7d:74:5e:b1:4c:66:64:bd:18:
fc:0e:23:c1:47:ba:fc:f4:c5:b2:17:56:20:30:52:
0e:44:df:97:19:93:d2:4d:79:0c:be:97:8c:4e:22:
76:00:73:60:1b:3c:20:fd:30:99:94:3e:13:ec:6c:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:63:84:42:51:30:3D:29:88:1D:3A:83:29:25:BF:D1:33:0D:56
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9a:d2:8d:e4:8c:73:93:e0:73:43:1d:f4:75:b9:2d:c4:69:
be:ce:58:41:df:f9:f9:1c:44:be:de:6f:fb:23:51:da:15:7d:
48:13:a2:66:28:90:d3:f4:01:bf:13:aa:50:c3:94:01:e5:30:
fc:23:4d:98:53:12:8f:f1:e6:10:c0:c0:00:4d:b9:80:04:97:
3f:96:a1:d4:7d:56:d9:c4:19:a6:e1:43:7c:be:29:c0:55:11:
c8:c5:06:3d:15:b6:85:ba:f1:2f:df:d8:14:e5:eb:a3:b1:2e:
e8:12:56:f0:f6:3b:c0:cd:91:96:21:8e:69:c0:75:02:a9:0d:
a4:51:dc:3f:3a:85:c4:e7:c7:4e:f9:41:52:48:a1:26:b1:c5:
b2:86:6b:a8:e4:ed:3d:a8:d2:fb:cf:18:92:55:28:dd:58:4b:
af:84:57:4c:01:25:82:6c:f9:f6:ef:a0:77:bb:9b:1d:6f:a1:
8c:04:0a:31:19:e0:0c:d9:5e:62:dc:8d:5a:ca:99:5b:5e:da:
1d:64:11:23:9c:df:53:4c:26:1f:eb:ed:d3:31:37:15:75:8e:
b0:1c:4e:f4:1b:ae:b1:bf:3b:58:d2:eb:b7:17:87:f8:44:1c:
ec:c6:ea:28:b2:bc:26:c8:61:55:56:1c:76:08:6e:13:6a:f2:
25:bd:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:21:00 2025 by rpki-client