Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: 0j3npgKCHncG3KGyMjMZwNB4ISRfKyzy/5zDVyqexUg=
Subject key identifier: 13:91:D9:2F:6B:F4:05:C3:5D:04:33:77:F6:18:44:15:30:8B:D9:52
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 0196BD124C0EAD3E1043EEE35AD38F64530C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 02:00:15 +0000
Manifest this update: Sun 11 May 2025 02:00:15 +0000
Manifest next update: Mon 12 May 2025 02:00:15 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: sXAUosCjRD/llVsYTkpKCWKmDw20Q2TcSK5IpOGsfxI=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
6: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
7: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
8: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:4c:0e:ad:3e:10:43:ee:e3:5a:d3:8f:64:53:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: May 11 02:00:15 2025 GMT
Not After : May 12 02:00:15 2025 GMT
Subject: CN=1391d92f6bf405c35d043377f6184415308bd952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:a9:38:69:dc:e2:49:24:9c:f5:fd:bd:44:
56:d4:7b:57:56:60:bd:80:48:a2:49:4e:6f:18:ea:
fb:f3:0f:60:57:06:b4:aa:21:fd:0e:f0:42:93:3c:
81:cd:e5:3c:a3:6e:19:d6:74:5e:98:be:2e:79:b3:
3e:3d:53:30:63:29:45:6b:4d:27:34:f8:a1:e6:64:
a0:ba:66:7c:4a:10:4e:4e:e3:ff:e4:ca:7c:d6:d3:
25:38:7f:4f:a4:ca:a7:c2:12:54:95:67:66:40:a5:
8f:cc:a5:de:48:84:05:44:72:b6:34:9d:04:33:cd:
65:ce:91:90:7a:01:be:79:04:41:f3:f6:81:49:b7:
9e:7d:c4:fe:6b:3e:66:a0:fe:59:fe:ae:33:09:45:
86:ab:54:13:7a:df:45:48:94:ac:32:5f:0d:74:26:
55:f5:c3:8c:9b:e9:58:c1:9b:11:9a:42:e5:b5:8c:
3c:85:8c:fd:5a:4e:9e:99:31:5f:d1:83:30:31:39:
f8:ef:74:bb:9f:8c:56:81:3e:aa:cf:27:3d:0c:e4:
ea:bc:8d:b1:60:46:88:00:a2:45:e9:91:c6:42:73:
5f:5e:e0:15:ee:b0:43:28:3e:34:8c:b9:5a:c3:7d:
5f:f6:6a:d2:c8:0a:dc:9e:30:94:fa:a8:b8:77:8b:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:D9:2F:6B:F4:05:C3:5D:04:33:77:F6:18:44:15:30:8B:D9:52
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:92:50:cd:a8:86:1c:32:35:0b:d3:a3:27:70:a1:41:3a:
13:5b:e2:61:44:b5:80:d3:42:a4:0b:0c:3c:f2:2c:a8:14:82:
14:45:d6:24:bf:6e:58:2d:59:1f:ed:b6:f4:94:0a:8e:9f:97:
e4:5c:7d:ce:a9:4d:53:5f:5f:39:bc:3c:20:94:05:54:64:69:
53:58:31:81:0f:12:a7:28:b7:61:35:00:a2:2a:c8:9d:1c:e0:
ed:a2:19:5a:81:5c:29:8b:cf:c1:f2:be:e9:df:cb:71:f7:9d:
e8:91:4f:d1:db:b8:e0:84:17:80:19:f3:d0:e2:a9:a6:3d:6c:
88:90:f7:33:d1:ca:2a:e9:7a:7a:32:fe:90:26:5f:6b:df:a6:
c8:e8:d8:f5:0b:1f:42:b6:04:16:9d:ed:7f:83:04:65:2c:e4:
d5:13:b6:9f:68:91:db:1a:1a:87:b7:06:2e:b9:ed:b1:02:83:
95:5d:61:5c:f9:0d:bf:09:29:1d:b9:05:ab:6f:ab:f7:e2:c5:
cc:28:88:f1:be:13:d9:a8:bc:b5:ff:24:ca:80:e4:78:5e:27:
1f:42:06:ea:dd:95:e2:9f:18:c4:1d:4e:df:ec:76:ef:f7:34:
3d:33:e7:81:18:9d:f2:00:77:3c:5e:1b:cf:50:35:f9:04:95:
b9:d9:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:36:10 2025 by rpki-client