Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: YqhcpGJye7K19Ik/NtwI7jNjtX9z4NyNX/zrfRGv9gk=
Subject key identifier: FD:EB:80:15:23:E4:A7:96:99:83:14:6F:D0:4A:D1:0D:C5:55:15:74
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 0196C2DDEA21FD65E52803E824CEDD943414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 023B
Signing time: Mon 12 May 2025 05:00:45 +0000
Manifest this update: Mon 12 May 2025 05:00:45 +0000
Manifest next update: Tue 13 May 2025 05:00:45 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: 5bSsoR7VxaNiIermALNMvMahJwLvQW0qGRw2K6gYJ8I=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:ea:21:fd:65:e5:28:03:e8:24:ce:dd:94:34:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: May 12 05:00:45 2025 GMT
Not After : May 13 05:00:45 2025 GMT
Subject: CN=fdeb801523e4a7969983146fd04ad10dc5551574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:3f:5e:b9:d1:4a:43:03:53:21:ec:b5:3b:
63:b9:b1:f7:35:d3:e0:13:0e:9c:69:4e:3c:39:be:
9e:9b:af:17:cb:ce:6c:09:0c:23:b6:26:7a:1e:20:
b5:44:26:9c:39:b2:8d:32:86:33:84:90:5c:e4:95:
87:0a:57:dd:92:db:a5:f5:b0:41:ce:d6:96:c5:4e:
d1:c8:ec:8d:54:61:1a:86:15:42:9a:4b:48:d9:33:
43:0a:19:d3:6a:e6:77:1c:61:b9:f0:41:af:06:69:
04:97:1c:77:d6:80:0a:84:24:b7:f5:73:87:b3:ea:
f7:f6:11:5c:34:2f:23:70:bc:62:c4:d0:db:a0:84:
cc:3d:8a:80:71:09:b5:47:a1:53:63:6e:02:71:f8:
af:61:49:b2:93:14:e5:7e:d5:f0:3b:97:3c:b0:01:
d5:bb:71:3c:2a:12:8f:31:f2:7f:2f:cb:ae:80:69:
1f:ab:9a:70:d5:f6:83:95:35:21:70:54:d7:9d:f2:
71:ec:53:18:da:40:b2:fd:b8:2d:c9:cc:09:34:6c:
d4:9d:c6:74:8d:9f:28:2d:58:19:a0:fd:84:4c:df:
90:96:48:32:c1:78:99:07:68:dc:0f:48:88:da:ba:
f0:2a:1e:ae:90:74:48:01:08:a2:22:69:a3:9e:43:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:80:15:23:E4:A7:96:99:83:14:6F:D0:4A:D1:0D:C5:55:15:74
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:dc:41:66:0a:10:a9:34:dc:cf:71:4f:20:93:c3:98:60:
97:d4:f8:fa:bc:8f:d2:18:90:a7:11:b8:15:a6:c1:47:2f:c4:
bf:4f:65:33:83:e5:da:29:e7:d3:94:8c:ce:11:91:ba:95:ba:
4b:37:a6:d0:0a:61:b8:0e:11:e0:4a:5b:20:51:ef:57:0a:dc:
4a:2e:ee:a0:dd:49:fb:5e:15:32:7b:a8:79:48:39:4e:bd:fa:
7e:83:d5:a1:b3:df:48:1e:83:60:e4:50:43:1b:0e:26:ed:e2:
56:b2:b2:fe:8b:a3:e1:4c:26:60:d6:1b:90:0c:ef:7b:1c:90:
0f:ca:f5:61:ee:e8:a3:a6:de:6d:37:78:94:d1:57:70:99:3a:
33:c0:19:d4:05:bd:82:83:72:69:2d:3c:11:25:69:4a:66:4f:
fb:86:79:d3:70:e5:bd:cd:2c:71:1b:61:ec:7c:24:6e:4e:fc:
32:47:39:96:f6:59:d5:45:78:97:f9:b5:5d:de:b7:80:5c:5d:
c5:68:99:a7:24:54:54:e5:f0:83:06:56:38:21:c4:2c:7b:b9:
43:b5:cf:44:f9:d4:4b:1e:95:19:8f:55:18:49:c7:3e:46:bb:
2e:2e:bc:6b:4c:53:46:30:28:e9:54:63:37:15:66:64:f9:b3:
4c:24:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:23:54 2025 by rpki-client