Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: 6/1+9SAi3Qtjsv4bdZYpGNxYhynZBC+y//OrpVnP8iA=
Subject key identifier: 64:72:18:1F:DA:8E:0F:47:CF:43:52:88:52:D7:45:66:CD:AE:9B:81
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 0196C013E8CA11261FBD7A4AB768032D2205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 11CA
Signing time: Sun 11 May 2025 16:00:52 +0000
Manifest this update: Sun 11 May 2025 16:00:52 +0000
Manifest next update: Mon 12 May 2025 16:00:52 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: lvzOiRk176ZLZp+WprVesialPWYsftPE20vouyUQXRM=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:e8:ca:11:26:1f:bd:7a:4a:b7:68:03:2d:22:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: May 11 16:00:52 2025 GMT
Not After : May 12 16:00:52 2025 GMT
Subject: CN=6472181fda8e0f47cf43528852d74566cdae9b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:4b:05:65:2b:9a:73:01:d7:d0:3b:78:e8:
0d:7d:dd:48:65:66:b9:56:11:c7:dc:00:0a:29:18:
61:38:bb:c2:e0:b3:be:57:af:cd:f7:60:d8:d5:06:
35:df:23:46:ed:e1:d8:36:32:ed:c2:a2:55:ac:6c:
3b:da:7c:77:dd:04:f2:72:f9:09:03:ad:12:57:9a:
a1:cf:0e:c3:2e:c7:f7:0a:9a:d2:96:18:40:f1:9d:
b9:e9:08:7d:a0:df:77:ce:43:94:82:87:f5:46:b4:
eb:5e:3f:3d:c3:6b:1c:ee:6f:60:11:24:9d:4d:06:
39:8e:59:df:08:b9:c7:50:d7:2c:0f:af:61:fa:04:
ed:06:f6:5a:04:45:e4:34:11:06:27:49:c2:e9:f0:
e8:b2:da:74:bf:ea:ff:5a:53:b7:f6:55:79:91:78:
47:a8:79:e4:41:0f:2b:bb:ab:cd:92:9c:03:a2:25:
75:85:56:21:48:f4:b1:88:e1:bb:2d:5e:86:5c:72:
c4:bb:b5:f4:b1:d6:3d:57:7f:95:92:c9:db:06:f7:
78:c5:61:70:de:c5:d7:60:68:20:b8:d4:3e:d3:36:
0d:8c:5f:74:76:d0:36:dc:58:48:01:bf:dd:bf:9c:
15:30:96:67:b3:48:6a:ca:c1:59:82:94:b5:8c:c3:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:18:1F:DA:8E:0F:47:CF:43:52:88:52:D7:45:66:CD:AE:9B:81
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:79:1e:e7:24:11:78:ac:2c:51:0b:35:a5:cb:b6:fd:4f:
ef:9e:3d:d9:1f:79:49:3b:7e:fc:81:38:e6:6b:79:75:d9:20:
00:3b:32:16:78:fe:1c:72:24:8b:06:49:d1:56:8b:fe:af:72:
e2:32:56:33:ff:1b:77:6b:f2:bc:33:aa:78:48:86:a3:5e:58:
47:dd:c2:5b:d4:f9:ba:cc:a2:1d:66:36:5e:f9:ae:a5:d9:41:
ed:ed:ad:34:0c:85:87:21:0c:30:d3:21:d8:14:13:ee:f9:a2:
fa:5e:5e:0a:9f:eb:4f:18:52:b9:73:52:4b:a0:6b:6f:78:25:
5f:39:27:1c:25:8f:42:18:89:20:e0:48:d3:8b:85:79:9e:27:
1d:89:0c:5c:cf:6c:fa:e4:d9:6b:36:19:23:66:7f:d6:b8:4f:
a4:2f:62:2e:42:b1:84:0c:41:94:2c:37:27:08:c2:b0:0c:e6:
bc:19:5a:da:87:8d:18:bd:ee:68:96:fc:92:1f:91:e6:b0:79:
fb:6f:48:5e:1d:55:2b:82:24:02:c5:cf:b5:d5:e8:98:9e:f6:
e4:45:75:6e:da:48:11:a2:ba:65:c8:3e:12:7c:1b:fb:f0:c8:
f0:f3:05:89:8c:8f:75:da:24:ce:73:c7:39:33:25:83:71:70:
93:26:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:20:19 2025 by rpki-client