Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier: uHdP4rCahRYMToi53hsEL3CZSQwg8mKCWrf9sTgqCw0=
Subject key identifier: FC:8D:23:BE:DA:AD:54:0E:6F:AD:6B:56:29:CF:2F:27:77:5D:97:0F
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 0196B52216191D62B86295BBC8943C9B700F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number: 1201
Signing time: Fri 09 May 2025 13:00:32 +0000
Manifest this update: Fri 09 May 2025 13:00:32 +0000
Manifest next update: Sat 10 May 2025 13:00:32 +0000
Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: C7tyuoLVPrRZZ2tZT6kzDTX/ZUJcERJTotZsZ2M8Yv4=)
2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:16:19:1d:62:b8:62:95:bb:c8:94:3c:9b:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: May 9 13:00:32 2025 GMT
Not After : May 10 13:00:32 2025 GMT
Subject: CN=fc8d23bedaad540e6fad6b5629cf2f27775d970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:5b:e4:b4:35:4a:46:3b:01:22:30:e6:44:
de:dc:61:74:d4:3c:04:49:76:bc:52:f1:c0:bd:31:
7b:05:08:56:fe:df:8f:84:18:52:26:d6:dc:d4:9e:
59:df:a0:53:4a:f5:b4:53:a4:03:4f:9a:da:c1:d3:
26:07:2e:1c:45:82:dc:9f:a5:c6:78:43:82:a5:89:
64:b4:e1:ad:45:da:99:d4:51:0c:ed:a9:ed:95:f7:
4d:1b:3f:0d:98:8e:b8:c9:5e:ab:61:0a:74:e1:ca:
eb:84:9c:cf:1f:5b:84:78:9f:e6:34:7a:31:a3:61:
a0:4c:08:99:24:e6:95:b3:3b:6b:20:a6:cf:e0:70:
f0:34:55:47:88:c0:d7:d8:2a:24:a3:c3:ef:fc:d4:
2d:38:86:d2:76:56:91:95:80:4d:a2:67:c5:88:db:
51:25:ea:c5:77:51:ac:6f:67:2e:51:4d:47:3e:fb:
19:e2:bd:3f:85:a1:fb:d7:f0:79:a6:bf:6e:7c:29:
55:f1:f2:0f:31:d4:b9:71:a0:1a:ae:09:07:fe:43:
c6:33:3a:c3:28:21:2e:69:bf:bd:11:0d:e0:ec:c5:
1b:cd:f8:f5:d1:5c:21:95:1a:03:88:13:ea:bd:32:
d9:86:7c:3d:bc:49:28:5c:f7:7c:11:43:7d:b6:ec:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:23:BE:DA:AD:54:0E:6F:AD:6B:56:29:CF:2F:27:77:5D:97:0F
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:06:ef:6f:76:b3:00:f2:dd:55:b8:3c:c0:d5:54:5c:3a:eb:
cb:af:2b:b8:43:c5:4c:73:06:f5:f0:9a:12:e1:41:24:22:24:
f0:9b:ee:47:c0:41:e0:5f:92:12:f6:96:54:cf:98:9d:22:2b:
95:ed:4a:18:26:3d:3a:88:5f:e1:fd:e5:da:34:55:38:3d:9d:
50:d6:af:20:4f:87:17:af:19:9a:39:d7:a8:80:59:fe:ab:9b:
72:b8:38:7b:17:e5:6d:24:c6:92:a0:2f:b7:71:a1:b1:28:00:
7b:61:59:c0:07:5e:40:41:d9:ce:c3:ef:8e:bd:e9:87:c6:3c:
6c:66:00:ad:81:f1:e4:db:68:fa:b0:fb:03:41:e7:5e:1f:e2:
d1:48:3b:13:92:a7:88:26:0c:bb:66:30:2e:1a:93:29:17:b4:
12:4c:32:45:f2:5d:f5:80:0d:bd:bd:5d:9d:8d:56:86:cf:eb:
e4:bb:d0:5a:ed:e0:38:c9:70:70:00:f7:4a:06:d6:15:bb:a0:
2e:a5:77:b3:5a:11:eb:10:9b:d5:28:7c:e2:ed:57:f5:cd:f7:
3d:f9:18:3a:11:ea:c2:3d:31:98:86:ad:62:6b:4f:1c:be:b5:
93:88:ef:ec:dc:48:0e:c6:1e:e3:d0:3e:5a:0c:66:50:7a:0e:
4e:6d:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:58:54 2025 by rpki-client