Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: Wip+1OHSmjJcbMS8xAQ6auVp244KquJvNw759ctwmGE=
Subject key identifier: 57:2F:E1:F6:A9:69:D7:89:33:BB:42:E1:F1:38:C5:37:95:49:A0:4F
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0196C5A8115B2700334E39F1DC129612FB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 18:00:48 +0000
Manifest this update: Mon 12 May 2025 18:00:48 +0000
Manifest next update: Tue 13 May 2025 18:00:48 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: zjm8e5BQa1mcNBK8k4KDfGMc6xrNLpsllu4xUmPsF08=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:11:5b:27:00:33:4e:39:f1:dc:12:96:12:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: May 12 18:00:48 2025 GMT
Not After : May 13 18:00:48 2025 GMT
Subject: CN=572fe1f6a969d78933bb42e1f138c5379549a04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:9d:9d:cb:80:f6:03:2f:86:c3:74:88:59:
93:31:14:f9:85:b2:d1:97:44:53:15:63:94:cf:53:
ea:c7:ad:c6:81:37:04:6f:11:ba:bf:c3:1d:4d:0a:
57:e1:3c:05:39:12:b7:ac:12:bb:92:b7:63:bf:e9:
7b:a5:66:b6:59:30:aa:92:aa:0d:95:74:88:b4:ab:
84:e3:b9:72:64:b7:51:fd:9b:ec:78:c3:37:87:ad:
07:c1:12:54:bd:9e:1e:66:af:67:da:f5:58:c8:c0:
87:85:b8:37:6c:c4:c3:91:55:9d:36:1e:a0:b7:4c:
68:fd:d7:d5:9b:86:84:a8:4d:c4:fe:e3:d6:b9:2c:
db:bc:32:89:c8:0c:b7:67:d1:f7:b2:8b:eb:61:49:
6d:50:02:7d:0a:e2:3b:a8:d4:a1:18:59:23:2c:66:
dd:2b:63:ec:fb:52:87:26:55:2e:0a:a9:15:b0:d1:
60:37:d9:3a:6b:3e:ab:43:d7:08:76:23:82:8b:02:
c5:0f:ee:2e:02:f8:f3:81:62:69:aa:b3:da:29:90:
51:b4:39:55:a6:c4:2d:a9:2f:f9:d8:d1:2c:7c:fc:
ea:45:a9:70:6e:bb:ed:d3:e3:7c:34:30:07:7f:9c:
dc:08:49:de:b5:48:09:ea:40:8d:12:ab:46:ff:2d:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:E1:F6:A9:69:D7:89:33:BB:42:E1:F1:38:C5:37:95:49:A0:4F
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:9a:4b:99:d3:26:28:f2:5d:83:b2:22:48:41:16:82:02:
60:af:f0:30:86:b9:39:ca:74:57:c6:63:7b:90:56:bc:49:97:
55:fb:0f:d6:60:e9:63:9c:b3:81:75:9e:51:09:1b:ad:82:fb:
16:99:b1:d0:f7:29:52:79:d1:0e:a1:2e:80:0a:a2:a6:12:a6:
b0:ac:6d:ee:a0:65:8e:33:8e:f2:82:31:4d:32:5f:eb:db:d0:
dd:22:2e:bc:5c:5a:71:5d:07:e0:dc:aa:ce:3b:e0:4b:31:13:
c5:0f:fc:b4:bc:cb:86:48:1c:e4:4d:08:3c:2c:05:3f:5c:04:
ce:20:1f:2a:53:f7:51:7f:ff:ad:9c:3b:d3:13:da:26:b9:bb:
97:7e:94:87:c6:40:d6:c5:d9:24:19:7d:90:f2:09:ca:ad:f4:
9a:1c:99:d4:05:17:c5:59:ca:74:53:05:82:38:01:91:96:56:
33:b7:7c:e4:c2:d0:11:24:50:31:4b:05:16:ae:e0:55:76:f9:
5c:c3:57:b8:a5:9a:a2:e4:72:a6:f4:96:f9:6d:62:ca:7f:b2:
2d:f6:18:e7:78:4a:43:6b:ac:91:ca:17:5a:c1:95:cb:e7:3d:
b4:d8:78:56:9d:82:ca:0e:3b:50:70:55:0e:ba:d8:94:3a:28:
51:31:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:24:54 2025 by rpki-client