Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: YjUXClsrp5QV1bgSTiLHqgYsDHwrWNaQerH9rkfNI9w=
Subject key identifier: 09:95:1D:D1:DD:40:5D:B7:3C:92:7B:8D:27:32:F6:C3:4F:7F:0B:6C
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 01969D19ABF0E24F562050247D40D1329153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 132E
Signing time: Sun 04 May 2025 21:00:27 +0000
Manifest this update: Sun 04 May 2025 21:00:27 +0000
Manifest next update: Mon 05 May 2025 21:00:27 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: 5Uq2t6//RGRHWgSIRVayHctigYscuCWuQGlVnUiMDN0=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:ab:f0:e2:4f:56:20:50:24:7d:40:d1:32:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: May 4 21:00:27 2025 GMT
Not After : May 5 21:00:27 2025 GMT
Subject: CN=09951dd1dd405db73c927b8d2732f6c34f7f0b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:fa:21:83:4d:cd:e7:44:cd:d5:6a:cd:d1:
02:c8:e9:85:41:ae:3f:8e:6d:03:7f:29:bd:2c:4e:
76:b2:17:ea:9b:26:0f:21:a7:95:40:51:2e:04:8e:
d5:1e:e1:91:a5:4a:5a:95:dd:0b:64:de:9f:35:b8:
47:7b:e1:f2:90:c2:d3:12:dd:89:c3:45:07:3b:17:
59:32:1a:4b:0e:73:fa:9d:33:07:da:95:34:db:68:
60:fa:b2:2e:dd:78:ed:e3:79:ba:24:78:e1:fc:fa:
ea:c0:ef:6d:be:c2:f5:b8:ba:90:85:ec:5b:06:61:
6a:e2:2a:1c:e2:9a:10:9b:29:75:2d:d8:2b:b1:35:
0b:f3:b7:b2:0e:3b:c6:66:0e:21:ed:2c:52:7b:47:
1e:26:c2:f0:76:02:32:50:7d:57:d6:1e:3c:ed:cc:
e4:7a:dc:7a:d4:c5:bc:4d:75:45:97:fe:6f:6b:70:
1b:90:d2:3a:89:69:4d:35:18:04:74:45:dd:07:09:
91:d1:8b:e6:7e:cb:43:77:14:9c:57:cd:8e:73:1b:
86:7c:83:35:1b:c0:45:39:16:a4:23:8a:de:e6:a7:
9c:f8:a8:50:d9:00:3a:33:33:6f:26:ec:96:29:59:
38:ee:08:13:96:3c:1f:f8:9f:0e:e9:60:37:66:98:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:1D:D1:DD:40:5D:B7:3C:92:7B:8D:27:32:F6:C3:4F:7F:0B:6C
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2d:5c:e0:d4:07:5f:a2:c7:01:85:d7:00:e4:c2:ae:40:69:
e0:c3:6f:6e:c9:40:d9:31:6d:f3:ef:94:f9:65:46:1c:3a:9b:
ee:88:52:13:c1:03:b3:98:f1:3b:41:1f:96:9f:01:0a:a1:9a:
b0:74:50:eb:51:28:c1:6d:48:11:50:cc:49:cf:7d:bb:ea:e1:
a8:84:79:3b:2b:77:96:f9:74:a4:1a:22:dc:19:da:19:f1:ed:
cf:9f:de:0c:d8:91:e3:62:f2:df:7f:e7:47:85:91:4f:9e:b1:
4a:73:0e:80:63:c7:c4:f9:7c:23:ca:e6:8f:8b:a1:fe:30:19:
60:39:2f:1c:44:97:ab:5a:b4:a2:62:5e:89:e7:64:c3:6d:15:
06:1f:14:b1:f3:81:8d:12:ea:6f:a3:26:88:99:fb:9a:21:ce:
f3:ec:b2:77:fa:01:a9:4b:54:df:7d:44:8e:d6:a1:53:35:3b:
76:b7:e0:08:1c:94:10:b8:d9:40:20:83:ee:59:38:dd:38:67:
10:1d:d9:bf:f5:56:40:20:ad:f4:15:c7:67:67:ae:95:f4:33:
53:54:f9:92:db:a7:2d:87:01:9f:4c:2f:5b:9d:70:be:33:e1:
97:95:80:43:9d:3e:69:52:61:2e:33:1d:76:6e:c2:a2:d2:04:
99:73:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:59:49 2025 by rpki-client