Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: JV9Z6dcBlxaV9bq2Lf3eX3YT9YQhKlFN6f9lyl8zTIY=
Subject key identifier: FC:21:42:13:0B:0A:0D:BC:85:CF:48:6D:C3:9F:2D:D5:8D:F3:75:D7
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 0196D92F22956F5599B5C07FE8B1B3DA30EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0D5F
Signing time: Fri 16 May 2025 13:01:06 +0000
Manifest this update: Fri 16 May 2025 13:01:06 +0000
Manifest next update: Sat 17 May 2025 13:01:06 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: DMUQY9DvlbM766yMo+k5B9LlwTLNQuG43ya9IGbWIGI=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:2f:22:95:6f:55:99:b5:c0:7f:e8:b1:b3:da:30:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: May 16 13:01:06 2025 GMT
Not After : May 17 13:01:06 2025 GMT
Subject: CN=fc2142130b0a0dbc85cf486dc39f2dd58df375d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:99:32:96:b8:a7:58:c7:49:e8:54:13:ce:
26:f1:5c:eb:73:25:65:8e:5c:9b:e3:0d:67:8f:29:
b8:c8:62:ff:86:25:2d:88:da:70:e5:6e:2d:42:f2:
c2:af:ec:a9:59:cd:eb:34:0c:3d:4c:e9:cb:d9:4a:
af:74:7e:ad:8c:21:47:f8:43:45:66:01:16:50:ba:
bd:17:91:fd:c7:3a:c5:03:4c:23:0f:61:ad:a1:1d:
b4:38:a6:0a:55:8e:61:9f:42:2c:50:79:80:be:e0:
1c:e0:8e:6b:2b:98:61:48:9b:03:55:63:29:f7:2f:
7d:f8:8a:26:a4:f2:b7:11:a0:73:6a:8a:66:d6:ff:
78:04:8f:d9:a7:fb:5a:42:5a:8a:0b:6e:8e:0f:6b:
90:85:90:62:c6:7e:98:4f:a5:78:07:c6:8d:a5:55:
b7:53:43:09:73:e6:84:ed:da:30:9c:8f:8f:72:d5:
12:67:2d:2f:61:c0:c2:0d:50:0a:8d:83:ae:94:9e:
5f:72:d9:f9:14:44:6d:b2:3a:5e:d9:6e:6a:67:07:
31:ea:de:e4:4c:8a:57:11:7e:51:d7:0f:b4:85:7f:
9f:ce:30:a8:db:82:68:3c:58:21:8c:9b:68:be:f8:
c1:47:cb:79:18:87:57:de:e5:35:26:14:69:4b:12:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:42:13:0B:0A:0D:BC:85:CF:48:6D:C3:9F:2D:D5:8D:F3:75:D7
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:37:3b:c3:51:11:5c:65:b7:99:12:b5:39:32:83:41:0e:71:
b7:83:9f:19:9f:33:f9:7e:bc:b6:64:5a:72:8a:29:eb:3b:00:
90:dd:4f:1b:73:fa:93:f6:d9:00:13:3a:21:a6:6d:ee:78:5d:
b4:4c:67:dc:4f:1f:9d:52:6e:fa:d5:86:aa:bd:12:a7:56:7a:
b5:b0:d5:9e:93:ad:83:e9:c2:58:f5:b3:b5:32:e5:fb:32:70:
e9:2f:2c:28:06:5a:09:f3:e5:97:2e:36:24:dc:38:dc:cf:b3:
ee:00:12:8e:06:c4:96:4b:fb:53:0f:6e:e3:99:c7:bf:bf:27:
72:3c:04:ff:c0:a9:1c:3b:55:91:b5:3e:70:6f:77:c8:63:bb:
60:0b:07:4a:bc:24:f7:3e:17:46:c5:92:5c:e1:3c:49:d4:22:
b3:df:e6:91:2b:24:80:f4:93:41:89:ea:5c:00:e8:ec:53:2a:
7e:cc:c5:b2:9c:9e:e4:f6:2e:ac:6b:da:4d:e8:53:f0:9b:57:
9a:48:34:aa:71:80:61:01:71:6c:ce:7e:87:4b:05:fc:40:ef:
f3:5f:7e:5e:b8:15:d7:4d:f2:60:48:48:85:88:55:97:9a:9e:
62:5f:5f:8f:84:d0:78:72:e8:dc:44:87:b7:77:36:a6:9a:8d:
56:31:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:17:27 2025 by rpki-client