Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier: HhoAVdO0EJARTYLAw4UPNlaYp3FpWiF+NBx+9X30Yv4=
Subject key identifier: 71:C6:E2:38:21:8F:EE:B6:E6:A6:48:2C:11:6A:E3:B3:BA:E9:25:67
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 0196CE3D33C9EE26291FD78B5818E04C25B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number: 02B8
Signing time: Wed 14 May 2025 10:00:39 +0000
Manifest this update: Wed 14 May 2025 10:00:39 +0000
Manifest next update: Thu 15 May 2025 10:00:39 +0000
Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: ba1Cu/UP5Jb2TW0mMgubibshhyn7XSun61cvt9m2DeE=)
2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:33:c9:ee:26:29:1f:d7:8b:58:18:e0:4c:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: May 14 10:00:39 2025 GMT
Not After : May 15 10:00:39 2025 GMT
Subject: CN=71c6e238218feeb6e6a6482c116ae3b3bae92567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:a4:f1:7f:9e:8c:d4:2f:2a:7c:51:0f:26:
91:1e:40:bb:66:c3:c1:d9:cd:72:fd:e5:55:97:3e:
55:57:1f:bf:9c:06:43:81:f1:4c:0b:6b:a5:0f:78:
ba:b0:58:c7:0b:b9:ef:9b:3e:53:cd:0c:49:f3:fc:
29:63:cb:45:db:9e:72:f6:5b:7a:a6:b5:c1:f5:d3:
2d:d4:fc:3e:2b:d8:ed:24:b3:48:9c:98:79:96:31:
e1:8b:a3:a6:28:f4:47:48:e5:bb:9a:60:16:96:07:
23:e9:56:3c:71:f2:3d:0c:df:26:e9:45:a2:58:b8:
1c:f9:a1:f4:e2:4b:1b:4b:4b:fa:b8:54:b3:ac:ed:
04:f4:e9:49:87:28:c3:43:5d:a0:01:4b:f4:61:e7:
86:32:51:49:f9:e9:06:3e:3e:69:1f:6c:9a:42:66:
9a:7d:27:78:76:e6:d2:8a:9a:71:ea:4a:78:46:ec:
c3:f2:10:c4:57:f7:2a:dc:07:c9:b1:fd:fc:5f:3d:
1d:89:4d:b4:a8:c7:05:c4:92:13:d9:65:8a:9e:58:
6e:54:b2:2c:2a:52:7c:07:0c:fb:f9:7f:9c:c0:05:
d1:23:78:40:b3:d1:58:22:51:e6:cf:1c:7d:14:f5:
bc:ef:e7:97:69:55:c6:9d:8e:80:a2:48:b2:95:ba:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:E2:38:21:8F:EE:B6:E6:A6:48:2C:11:6A:E3:B3:BA:E9:25:67
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:99:53:51:99:e6:62:ea:81:dd:4c:40:72:ab:6e:25:86:
7f:e4:97:a3:1d:2e:f7:2a:0c:1a:ce:66:f8:1e:40:40:28:5f:
4f:42:83:d4:ac:13:1b:5b:8d:3e:4d:eb:8f:26:32:84:29:a3:
a5:fc:57:b6:3e:ab:de:48:85:f4:f4:36:d5:2c:4d:07:39:92:
27:e9:ca:51:a7:11:18:d9:77:65:a7:d1:54:1b:d7:49:e4:4c:
19:ac:60:34:6f:60:7f:71:21:fe:62:77:58:e2:1c:17:51:be:
30:20:cf:9c:9d:30:61:6f:47:d5:a5:2d:e4:cc:9e:a7:f7:49:
1f:a3:31:a9:50:db:d0:85:fd:73:bc:0d:71:c0:bf:71:86:bd:
a5:20:fc:bf:c6:8f:ee:86:ed:0f:cb:37:67:7f:9a:8c:77:60:
eb:aa:7e:87:ca:4b:48:43:e2:66:17:77:7a:4d:7a:2d:fc:8b:
a5:66:cd:04:a8:dd:37:32:f8:fb:89:45:d3:5b:0e:d6:93:11:
20:df:3d:71:66:d9:b7:f8:3c:11:2c:d3:c8:dd:26:7c:c2:10:
f3:3d:db:0b:88:55:7b:8a:2d:1f:ea:19:5d:1f:4b:28:69:5b:
64:ff:d4:5b:f8:5d:40:47:5e:ff:01:f1:0a:fa:cf:f2:84:b6:
6a:5a:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:04:04 2025 by rpki-client