Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: 4ndG8cpZNALuR9NH35iwZN7EunRGcSksBI4VBV3+b8c=
Subject key identifier: EC:2E:81:90:C2:67:1D:5F:6B:8E:52:44:10:BE:ED:72:03:59:29:B9
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 01969F3F2F65B4265A4B78C6A688715CE8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 07:00:40 +0000
Manifest this update: Mon 05 May 2025 07:00:40 +0000
Manifest next update: Tue 06 May 2025 07:00:40 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: VwiMU3a5o4MfaqDfZOBInpekfPTwGQ5KKAHxlL6bmoI=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:2f:65:b4:26:5a:4b:78:c6:a6:88:71:5c:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: May 5 07:00:40 2025 GMT
Not After : May 6 07:00:40 2025 GMT
Subject: CN=ec2e8190c2671d5f6b8e524410beed72035929b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:79:56:4c:33:72:60:f7:a4:cb:e0:ac:2c:
ac:93:1a:39:6a:9a:53:c9:f5:9a:b9:7a:04:2e:76:
2a:78:b0:b9:52:84:d9:56:ba:f2:43:9e:63:68:f0:
67:76:14:02:5f:05:70:5d:e2:cd:4f:10:ee:19:81:
89:a9:48:ed:8f:5c:ca:17:32:64:b9:5c:e4:fb:99:
65:37:78:6c:d8:9a:3d:af:e0:e6:bd:ad:36:8b:78:
b0:6d:71:70:ff:ac:d7:ae:f4:95:a8:0e:be:ec:b2:
30:59:da:57:88:66:56:83:d6:ce:8e:e5:8a:e5:0e:
10:6c:09:fd:73:d7:0e:0a:d0:33:ff:f2:ab:df:c4:
94:c2:2d:bf:9a:d1:e5:fe:9b:ce:d7:1f:1c:0e:c1:
59:1d:e0:fd:23:0e:1a:2e:bc:f4:91:61:09:86:e8:
09:7d:69:5c:66:b0:99:30:e4:a5:f8:c6:38:84:11:
5f:5b:39:03:2f:08:d8:1f:67:fb:2a:69:b7:c7:6a:
5a:a7:c4:7f:db:15:3d:e6:19:33:7a:9a:0b:b1:9c:
39:08:a4:59:37:4a:8c:de:d2:09:8d:33:97:72:af:
9b:9c:26:a1:ac:df:02:8a:a9:df:f1:6d:6d:9a:9b:
61:f9:51:e0:9b:96:97:d9:b8:bb:32:38:bc:84:84:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:81:90:C2:67:1D:5F:6B:8E:52:44:10:BE:ED:72:03:59:29:B9
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:27:10:4b:fe:b1:1e:c3:65:b2:83:30:b4:1b:1e:a0:16:
ae:8b:57:49:38:31:32:2f:45:76:99:30:0a:a5:64:87:ce:bd:
96:be:3e:8f:c8:a1:d7:8e:01:52:df:0d:04:e4:06:b8:67:5c:
f7:30:ee:05:f7:a4:e1:1b:58:db:c8:f8:3a:4a:25:98:10:af:
03:34:23:30:86:c7:95:7c:a7:b8:58:fd:0d:69:ce:91:c3:a0:
ee:45:be:41:4e:0b:03:36:2c:28:92:60:94:38:d9:e1:75:28:
15:93:e0:8f:05:30:b0:cf:e7:21:c4:85:a1:5d:e3:92:50:0a:
24:b1:f2:98:ac:d0:a6:41:55:1a:01:65:f1:09:ab:32:70:bd:
2d:7d:67:2f:c6:54:53:e4:2e:9a:83:4f:d0:d1:17:1a:7a:47:
93:7d:73:5b:58:52:ff:28:dc:5a:0f:81:ce:bb:35:6b:79:de:
0b:23:1a:f9:41:ec:2c:e0:40:5e:73:51:19:f7:c6:8c:fe:9a:
e8:75:2b:3b:37:7d:ee:6f:fe:13:ed:07:b4:60:7a:85:74:54:
77:bb:91:37:77:61:62:ba:2b:09:95:4f:08:28:17:b5:5a:6d:
ca:b4:1b:85:54:22:f3:84:9e:a5:78:b2:11:95:1b:2d:97:af:
da:45:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:18 2025 by rpki-client