Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: ITt8V0YTq6OG57K9GE82fr6eHT982JjVm6/70P/zVR4=
Subject key identifier: CF:79:0E:A9:88:C5:43:DA:76:C9:B2:D1:02:AC:D7:DC:5D:06:03:A0
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 0196D0D0F95EE5E194FF2426EEFD729D2381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 10BE
Signing time: Wed 14 May 2025 22:01:18 +0000
Manifest this update: Wed 14 May 2025 22:01:18 +0000
Manifest next update: Thu 15 May 2025 22:01:18 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: ocyvQTtGhF4F1xvCcwQWk+nT18mhWmLoXyh9SfSznfM=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:f9:5e:e5:e1:94:ff:24:26:ee:fd:72:9d:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: May 14 22:01:18 2025 GMT
Not After : May 15 22:01:18 2025 GMT
Subject: CN=cf790ea988c543da76c9b2d102acd7dc5d0603a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:12:ba:72:2b:20:b9:51:c4:92:b8:e9:13:
82:d4:d8:f3:c4:01:83:66:09:5a:a8:f9:11:c4:cb:
e9:7a:ec:bf:de:fb:df:6f:83:2c:3f:b1:f3:cb:c2:
74:08:05:8e:61:56:20:87:fb:8b:be:5a:40:cd:4d:
46:ad:d9:e1:aa:e0:26:27:2f:b9:47:b6:71:43:3a:
cc:fb:7f:7e:c9:0e:f4:37:18:5f:83:4c:c4:df:a7:
a7:3a:a6:0c:74:8e:68:f1:1d:f9:d1:a5:68:f4:38:
19:cc:54:a4:fd:5e:8d:54:d5:7e:9d:e7:ba:7a:5a:
e4:3a:b5:01:31:4e:1b:e9:7d:7e:19:b5:fc:82:f4:
fb:92:2f:c5:b4:a2:95:db:e6:75:16:15:79:d5:b3:
2e:a3:9b:8b:36:42:48:94:bd:f6:51:7c:a2:63:72:
1a:f8:bd:a2:b1:30:62:a5:fc:75:e1:a1:94:2b:43:
f2:b6:c7:3a:85:0e:54:e7:32:fa:3c:9b:ec:90:92:
06:36:5a:32:89:3f:64:b6:d6:8a:fc:51:d2:df:0e:
ee:8b:6f:a2:04:3d:86:3a:1d:b6:93:b7:33:f2:8d:
55:57:39:35:82:03:74:e6:7b:8b:fc:ae:67:05:30:
bb:4f:7d:f7:30:04:cb:80:14:9f:99:6b:da:69:62:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:0E:A9:88:C5:43:DA:76:C9:B2:D1:02:AC:D7:DC:5D:06:03:A0
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:64:ae:b3:01:4d:d4:ff:08:60:f7:d9:58:a2:f2:16:d3:7d:
66:35:ac:83:ae:1e:f8:3a:59:1a:fb:04:a9:ce:a4:0a:30:df:
b3:8c:52:8c:a6:9d:eb:ea:84:d7:ee:91:b4:37:06:4c:a5:6a:
2b:35:98:c5:40:08:f7:bf:32:ac:89:d9:00:e7:7f:ee:b6:8c:
4f:aa:8c:6e:a4:c3:96:98:b9:be:9f:92:70:4f:d3:73:c4:61:
b9:71:48:86:53:58:a1:bf:74:28:d3:85:71:db:42:53:f5:f8:
6f:40:f4:68:38:67:29:1c:9e:d3:fd:61:eb:60:4e:08:72:40:
2d:9e:6b:10:81:71:0f:d9:7a:76:39:c5:10:eb:ca:2d:b3:f1:
21:2c:6b:0e:2b:ef:5c:45:10:43:e5:18:ff:dd:fc:90:41:db:
0f:32:91:6f:d7:53:b8:1a:a9:1d:2a:18:a3:89:f5:9e:b4:44:
2d:29:ae:a9:31:ed:76:2c:16:36:e3:b0:a7:28:5e:7b:09:b2:
00:94:d1:9f:26:70:ef:19:95:c8:9e:df:19:fd:97:3a:0e:d4:
aa:44:95:0b:7a:bf:40:cd:b5:f7:09:8f:b1:b1:67:13:55:07:
40:60:13:42:8b:49:be:b9:57:86:2c:4e:17:38:72:0f:2f:c7:
32:45:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:30:37 2025 by rpki-client