Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: hITdZbNhPrHo+XgGPgSesvcYzgim7DNUNjevYnwxsqc=
Subject key identifier: 14:58:AF:B2:F6:84:F5:11:0B:2A:5E:36:61:BF:12:1D:68:F0:C7:B3
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 0196CB72C145425946BB357460A941E673A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 1569
Signing time: Tue 13 May 2025 21:00:17 +0000
Manifest this update: Tue 13 May 2025 21:00:17 +0000
Manifest next update: Wed 14 May 2025 21:00:17 +0000
Files and hashes: 1: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: MryhXwnKRxDMX6ah5BVdNxL5j0VgnyEg1t5tXS44QjM=)
2: N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa (hash: bj11HyE9bQVpgK8+L49310uUI7++HSDAwFbYXm4t87U=)
3: bXnDK3FrjmreLx1RNLHjlK6yokA.roa (hash: 9KnhQYqvA+XwDxuEoTB3PjhKHhHecpLOEmyBwf4FrSA=)
4: jNg6vqzUy1VgyEygCa4DvoqjfIY.roa (hash: npuJNuYtC10xnW9UN6NXfDz60ESb4bhdw7EsN6BY2Z8=)
5: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (hash: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:c1:45:42:59:46:bb:35:74:60:a9:41:e6:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: May 13 21:00:17 2025 GMT
Not After : May 14 21:00:17 2025 GMT
Subject: CN=1458afb2f684f5110b2a5e3661bf121d68f0c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:68:19:dd:f7:95:8e:3b:98:a0:f6:95:51:
14:7b:11:4a:a3:d1:1e:f5:63:c5:31:19:e7:d9:18:
ad:73:63:55:63:38:3c:61:43:52:c8:41:61:95:a0:
f8:40:02:58:30:90:7d:a3:9d:52:cb:6c:55:83:c6:
b0:a4:49:30:a9:03:f4:66:b7:a9:fd:f7:6c:8d:88:
8f:28:90:87:52:1e:a1:a4:08:5f:2c:3f:16:d6:02:
90:79:b9:11:dc:0f:fd:84:8a:8a:8e:1b:2e:64:dd:
8b:95:84:6d:42:fa:ca:d0:c3:88:03:52:61:49:1b:
32:77:29:a9:dd:93:4d:58:39:5e:57:70:e6:6b:ae:
b0:61:5c:fa:a2:89:f9:54:da:a2:d4:c3:92:d9:09:
5b:e4:0b:ee:9e:73:68:90:d9:db:40:88:9b:c6:a4:
b6:c4:de:47:c2:8e:ef:cf:f8:0b:ec:d0:0e:28:82:
d4:9d:44:29:0c:ac:79:b0:55:99:a4:35:b9:a8:75:
f7:ad:9c:aa:a1:48:14:f0:3d:44:ad:68:e6:6e:06:
2c:ac:2e:99:ff:4d:e8:82:ae:d1:80:99:4f:bf:08:
25:99:63:63:58:f7:d0:b1:61:e3:dd:02:3b:a7:c3:
28:00:97:9f:bf:59:0e:37:c3:26:aa:be:df:73:2f:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:AF:B2:F6:84:F5:11:0B:2A:5E:36:61:BF:12:1D:68:F0:C7:B3
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:b6:a5:81:c5:56:60:30:e8:e1:f1:da:ea:1f:46:08:a1:
fa:5e:a5:24:b4:1b:ce:f0:c9:6f:c6:be:55:37:87:fd:bc:a9:
fb:a3:bc:fa:5c:81:8e:01:98:4f:c6:19:98:1a:43:4b:44:a9:
e8:ab:d3:c5:5b:c1:92:0d:1a:a2:b5:73:82:12:be:d5:eb:15:
1c:23:f8:d0:e8:d4:31:46:63:c9:8e:30:2b:93:2b:36:03:24:
ba:09:5a:49:e5:09:c8:32:4d:6c:d6:d1:c8:c6:05:d1:92:c4:
8a:5e:06:51:bd:ea:ed:31:f8:26:fe:76:a9:44:e1:81:72:8b:
cf:df:e1:2f:25:ae:9a:38:48:c8:56:a5:63:10:d5:1b:01:58:
ee:74:44:2c:78:0a:5f:a6:70:ac:11:d5:e4:c7:95:b8:ad:f3:
92:84:46:d1:f7:8d:8e:bd:cd:0c:2e:81:16:64:b6:53:1a:68:
c6:81:50:53:af:7f:e8:d5:7d:0b:d5:43:22:2d:c8:9d:a5:57:
bb:c2:72:81:fa:cd:8e:55:1b:8b:99:0b:68:14:95:90:ed:66:
5f:a1:28:9b:f9:0c:b6:a8:a7:9a:06:6f:80:3c:eb:cd:f2:86:
55:ae:42:62:a9:70:e7:b5:08:97:59:08:c6:e5:0b:df:21:ec:
b2:76:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:21:30 2025 by rpki-client