Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: Bt9pJut2z2eym2eO3xqPkmxD+Zzg0uVFpcJJ5yAtK4A=
Subject key identifier: E1:B1:57:4E:7E:E1:29:CD:0B:62:E9:E3:52:B8:51:F5:41:87:A4:02
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01969F07DC9FE3300084890B96F71F25D99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 06:00:14 +0000
Manifest this update: Mon 05 May 2025 06:00:14 +0000
Manifest next update: Tue 06 May 2025 06:00:14 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: y0HtAEBk/U39Z0QWnnZatGv2/zdOxZoU0zK7QL+AO0Q=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:dc:9f:e3:30:00:84:89:0b:96:f7:1f:25:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: May 5 06:00:14 2025 GMT
Not After : May 6 06:00:14 2025 GMT
Subject: CN=e1b1574e7ee129cd0b62e9e352b851f54187a402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:6c:d8:b4:fd:4b:cb:9e:d7:30:57:c6:20:
f3:9a:62:f6:6a:a0:d8:b2:12:71:0a:07:98:5e:11:
37:b9:03:bd:b4:45:de:8f:32:e5:a6:5c:8f:bc:5e:
fd:e5:8b:60:31:ef:aa:00:2d:0b:39:6a:16:9c:c5:
1f:e2:00:44:c6:c9:bc:7b:87:6f:83:02:19:b8:16:
2b:9a:cd:17:cd:1c:d0:0c:db:93:16:ea:ca:f3:f5:
97:a5:15:0a:b7:5f:ab:f6:21:2e:f4:d3:d5:36:e0:
c4:f3:63:b0:1e:10:48:17:46:48:6c:a0:5d:3e:19:
f9:02:31:eb:e1:12:76:13:2a:f3:fb:62:08:4f:1a:
53:eb:05:12:6b:1a:4d:00:7f:f5:c6:a2:cb:9b:c4:
ef:47:38:28:76:38:1c:a3:69:4d:40:fb:f3:26:3b:
17:b4:b2:fb:7d:58:a8:d4:c2:ed:9f:07:6a:de:3c:
60:0d:b3:e8:91:d1:01:d7:60:e0:4e:b5:2f:f1:2d:
a4:6a:0a:9f:1d:65:5b:1e:a3:89:c7:1e:68:5a:a1:
cf:fd:ed:9d:40:0f:0f:34:18:2a:6b:6e:3d:83:3d:
67:a8:8c:6f:e9:0d:b2:51:bf:c0:d7:8c:7c:c3:ae:
ce:59:a5:42:25:37:1a:fe:e1:64:2e:a2:d1:26:ce:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:57:4E:7E:E1:29:CD:0B:62:E9:E3:52:B8:51:F5:41:87:A4:02
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:46:04:1d:c8:4e:ba:fe:e0:b8:e4:27:ac:bb:b8:28:b8:
89:8e:ae:17:dc:a6:6b:85:7f:e5:7a:b5:88:a6:15:f1:f6:fa:
78:9e:53:3f:d1:a8:74:c4:31:cc:d0:29:25:30:52:10:4b:1f:
a3:1c:d7:51:e9:3f:cd:80:ad:72:59:95:9f:c0:fb:54:4a:04:
3e:1e:86:76:43:57:b9:28:59:26:de:dd:84:b3:3e:4f:6b:6b:
e4:51:19:81:28:c2:c2:38:93:3b:09:78:b3:44:28:91:68:7a:
62:df:64:9c:8e:4e:d8:06:21:25:7a:93:d1:82:9e:a1:ff:8a:
53:80:a5:7b:9e:b9:8c:e1:b7:5b:06:90:27:0c:14:af:19:25:
9f:11:4b:f8:c9:08:68:cb:ae:cd:2a:6a:f4:47:4e:3a:74:04:
c0:0e:9a:fd:79:58:7c:96:0e:87:ea:7c:7e:c3:60:05:08:5d:
c2:c7:5b:fd:20:b7:d2:40:86:99:04:f5:c1:1c:e8:c7:a8:f1:
d2:29:6b:d0:4a:7d:36:02:20:a4:d4:7c:f5:17:2e:09:6c:87:
06:46:30:88:a9:12:19:9b:01:67:d3:b8:c4:81:c6:c2:d6:20:
78:29:2d:46:1e:94:9f:67:44:bf:f1:17:37:7f:e9:13:85:b9:
5a:38:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:47:21 2025 by rpki-client