Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: 02ZknxusiLa5YbPDKldVWs4gGSzu+oe8SPN4VFFQpyc=
Subject key identifier: 2F:CC:FF:76:49:15:D4:5E:3F:DD:A1:E7:B8:27:CB:AE:5A:46:C5:0B
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0196AE44BB289C651BED83B243C0ABBCF7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 114F
Signing time: Thu 08 May 2025 05:01:01 +0000
Manifest this update: Thu 08 May 2025 05:01:01 +0000
Manifest next update: Fri 09 May 2025 05:01:01 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: SenCw4JGu3nhlHaKsicJT1cpzuM02OcGf96ZQZSschQ=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:bb:28:9c:65:1b:ed:83:b2:43:c0:ab:bc:f7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: May 8 05:01:01 2025 GMT
Not After : May 9 05:01:01 2025 GMT
Subject: CN=2fccff764915d45e3fdda1e7b827cbae5a46c50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:74:9d:ef:87:03:b8:9f:f6:9a:bf:8f:c6:
28:c0:9c:9b:d4:c6:89:2d:22:4b:ca:5b:f6:0f:d4:
0d:8d:fb:ad:a9:cb:bd:70:07:60:56:93:dd:7c:c3:
6e:a6:fe:56:a1:8c:31:c6:f0:b7:6b:9b:0c:16:15:
d7:4d:f8:9c:49:1a:af:ed:20:38:12:fa:e8:46:eb:
5f:16:74:c2:41:32:25:73:ff:2f:0c:fd:99:91:ab:
2d:41:27:42:24:e9:62:17:2d:0f:35:b3:f6:d1:5f:
f1:9b:1d:af:0b:85:63:50:0b:ea:e9:ef:4b:e4:3e:
e2:75:ee:df:e6:41:66:de:d4:68:2b:aa:b8:2d:19:
65:1a:64:ea:45:06:dc:c5:9b:7c:34:ef:77:aa:0f:
4a:81:73:62:11:51:18:ef:76:43:4f:5e:b0:1c:a8:
2b:b2:19:b3:e8:7b:a9:43:0d:2b:66:5e:23:ee:dc:
92:f7:15:ce:ce:6b:91:05:cf:cc:9c:0b:41:dd:26:
36:66:ab:a2:5f:95:b9:a4:de:89:6f:d4:2a:21:c3:
ab:75:03:e9:b5:3b:d6:e3:30:21:b7:bd:4c:44:1e:
93:d8:fd:30:d1:58:9a:99:56:b8:e1:50:e2:e4:60:
c5:27:7d:9e:15:15:fc:93:42:ce:1c:b0:4c:26:c7:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:FF:76:49:15:D4:5E:3F:DD:A1:E7:B8:27:CB:AE:5A:46:C5:0B
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:44:c9:40:eb:59:8e:c7:01:f1:6a:e9:98:43:69:9c:d7:77:
f1:20:79:3e:81:f4:72:80:a9:0e:2e:79:c7:24:bc:ba:fd:89:
4f:cf:37:e1:54:5f:25:cf:84:51:fe:af:90:3f:e4:ed:51:b9:
8c:f0:40:b6:b8:67:19:0e:52:f7:4b:d8:68:e9:f7:76:8c:93:
ed:49:e6:36:cb:48:ae:f5:0d:34:70:5a:50:e3:47:90:85:b6:
50:09:91:01:49:c0:a9:a4:b3:b5:a4:9c:9d:92:18:53:01:18:
32:4a:e4:33:c4:ca:98:d5:a4:c5:07:f3:37:09:65:54:b3:11:
39:72:5b:b0:a0:94:29:fa:48:77:9b:f8:b1:8d:10:06:cc:d0:
62:1a:b4:be:ad:18:42:17:5b:da:25:a8:64:a2:b2:cd:f5:38:
1f:42:ff:22:f9:06:ae:e8:bd:76:f1:1d:06:ed:c8:ab:99:07:
1f:63:2f:d8:38:5a:22:54:1e:93:44:cb:8e:ef:cb:0a:c6:6b:
1f:59:0c:40:38:39:2f:79:a6:a4:bb:24:de:51:84:bb:00:89:
7c:51:43:61:22:5f:e1:37:91:95:01:45:23:91:3f:63:9b:a9:
1e:4b:7d:e2:80:e9:ea:28:8d:4e:0a:e3:2d:20:ee:d8:8f:98:
6d:b3:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:17:51 2025 by rpki-client