Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File: IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier: 7hPIsU09WVsK0WIPCzwTuE3f7pTVNtT9BYSseSx8L84=
Subject key identifier: 93:12:7E:FD:D6:EC:CD:3C:22:DC:97:1C:28:45:F9:91:7B:CD:63:BB
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer: /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial: 0196C3B9D55D1B3249DD5303E02D22C51DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number: 04A3
Signing time: Mon 12 May 2025 09:00:57 +0000
Manifest this update: Mon 12 May 2025 09:00:57 +0000
Manifest next update: Tue 13 May 2025 09:00:57 +0000
Files and hashes: 1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: xwSVcc8tBCFzycr2LZ+FJb+r7ObD7XxgLvbcpCPWhBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:d5:5d:1b:32:49:dd:53:03:e0:2d:22:c5:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Validity
Not Before: May 12 09:00:57 2025 GMT
Not After : May 13 09:00:57 2025 GMT
Subject: CN=93127efdd6eccd3c22dc971c2845f9917bcd63bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:d2:0d:61:56:ca:a8:9f:fa:78:47:f6:9b:
61:70:8a:89:cc:3b:a7:52:cf:39:c6:79:4c:f2:bd:
d1:01:d6:7f:32:c3:b7:e2:99:4a:9e:8f:f0:ce:f0:
ef:3a:c9:7d:8e:8d:8a:74:c5:ae:b6:77:e3:12:bf:
d7:dc:cc:8a:ae:43:d9:16:73:c2:6d:6b:5a:ad:8e:
45:40:88:ec:8f:2c:20:a9:7b:c2:2d:95:4d:27:ff:
5c:f0:fe:5a:5e:de:79:3b:4f:2e:10:f7:4a:fe:6c:
e8:c5:77:bf:98:db:58:ee:ed:7f:fd:bd:1a:29:82:
8b:51:3c:32:77:f3:46:3a:63:94:d5:16:fd:4c:10:
7a:56:6a:5c:ea:e5:4b:e9:62:3e:20:cf:b8:56:f6:
da:fa:76:f0:6f:91:4c:39:07:1e:3b:b1:55:4c:f7:
9a:e6:c9:89:51:87:84:2e:73:d6:d8:0e:43:f9:7d:
c0:0d:a3:86:f0:81:ee:d8:80:6a:b1:ec:13:1c:96:
c4:32:6d:44:35:16:49:8c:f6:ce:57:b6:18:72:06:
a0:27:c2:e8:a4:a4:6f:55:85:1f:1e:71:46:57:fe:
27:78:c4:8b:26:b4:87:68:5f:88:21:47:2e:ff:b1:
2a:66:59:01:ce:4e:52:34:c1:27:e5:bd:dd:90:99:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:12:7E:FD:D6:EC:CD:3C:22:DC:97:1C:28:45:F9:91:7B:CD:63:BB
X509v3 Authority Key Identifier:
keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:01:ef:f5:67:93:66:4b:d8:9d:32:fe:1c:e8:6e:c2:91:
53:e7:f4:e8:4f:3b:7a:89:01:1f:72:07:03:08:ab:ef:a5:5d:
7a:74:fa:42:a2:bf:12:d5:a8:b9:b5:bc:26:77:0a:91:27:5e:
53:a1:70:4e:99:9b:3d:97:ed:4e:a7:83:27:b4:76:ac:bd:36:
67:37:2a:9b:be:83:37:a4:f6:d9:20:52:9a:69:ab:e5:d0:b0:
ec:a4:11:bd:a6:7f:a2:36:95:7e:77:2c:5c:e2:d0:a9:4b:ee:
0b:4e:ac:9d:36:41:6a:47:63:c3:6c:48:10:64:82:21:2f:ac:
6a:30:07:1e:92:23:9c:eb:d9:3b:a2:03:96:e9:47:91:82:94:
0f:d3:0c:b6:b5:c0:e7:87:f4:9b:1f:84:f2:83:2b:3b:34:e6:
6c:89:ce:dd:6d:63:a7:ad:ee:d7:52:f5:26:fd:97:7d:71:8b:
86:0b:ba:ba:10:72:26:3a:72:d6:c0:da:5f:f5:b2:09:7e:eb:
cc:f5:7e:ad:0b:71:66:23:a2:49:7d:84:d5:65:9b:c4:1f:7c:
04:e7:d9:dc:5d:66:19:a6:da:6b:2f:50:f1:01:71:b1:e0:f8:
4b:a0:f8:6c:df:e1:cd:9b:81:55:f9:8b:ea:5d:3e:64:84:d6:
ed:af:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:08:34 2025 by rpki-client