Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File: IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier: WqM0fyaYijziOhoWEpjq81mibp8Y84ZTbFsdwk1F71k=
Subject key identifier: BD:C0:8F:1E:C4:51:D5:AC:2A:16:6A:B6:20:1F:B3:3C:B4:3C:42:12
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 0196BE5C9F93A1307829CCD12C2A32DAF48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number: 127A
Signing time: Sun 11 May 2025 08:01:03 +0000
Manifest this update: Sun 11 May 2025 08:01:03 +0000
Manifest next update: Mon 12 May 2025 08:01:03 +0000
Files and hashes: 1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: 8fEyMlca/z5JW7b+Bc0vD8ixYEcLCXGFp00AZzkLPyg=)
2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:9f:93:a1:30:78:29:cc:d1:2c:2a:32:da:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: May 11 08:01:03 2025 GMT
Not After : May 12 08:01:03 2025 GMT
Subject: CN=bdc08f1ec451d5ac2a166ab6201fb33cb43c4212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:c7:48:0e:70:c2:89:99:a9:17:c9:d7:64:
ac:a7:f6:17:13:f8:98:13:b8:d9:c8:f1:85:f6:49:
96:4b:8b:65:42:8d:a3:6b:27:c3:e3:33:f9:6a:f8:
cb:9c:93:de:30:7a:26:68:05:29:c6:cb:b8:4f:04:
e2:28:03:cb:59:58:59:98:1f:a2:ae:2f:02:eb:43:
d7:fd:44:6c:32:3d:bb:06:4e:03:17:01:c3:f3:0f:
f9:fa:c4:7f:13:52:7b:29:25:5e:b9:56:8a:26:46:
00:01:d4:3c:02:81:da:59:01:48:f2:ef:5c:00:78:
66:3f:a8:33:22:55:f7:8c:bc:df:6d:33:45:48:d9:
ea:d2:a0:5d:17:ca:af:30:ac:fb:80:6b:e5:c4:f1:
94:ea:77:f7:bf:3b:99:fe:12:02:55:bf:91:cd:8c:
3c:29:81:77:fe:9a:64:11:c6:3a:f8:83:fb:12:cb:
9e:10:e1:3a:6a:bf:5c:b2:cb:27:ae:2b:aa:54:70:
9c:69:87:6a:57:1b:7f:ce:13:d8:86:64:9b:b2:60:
27:5f:62:82:ad:13:66:84:7f:b1:ab:af:19:19:6e:
99:d9:93:10:76:1f:3f:0e:96:a7:ea:41:7a:b3:12:
f2:bc:fd:d7:9f:6a:c7:c4:4e:d1:fd:fa:71:cb:9c:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:8F:1E:C4:51:D5:AC:2A:16:6A:B6:20:1F:B3:3C:B4:3C:42:12
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:f5:2f:08:a1:22:1b:83:16:5f:9d:77:d9:b6:0d:1d:ef:
0a:0c:b9:6e:96:29:86:34:dd:2e:a2:2f:8d:24:a8:75:15:58:
e3:6a:97:1a:11:78:e7:2a:3c:bc:c5:c2:c4:db:e6:e6:82:fd:
4e:7b:48:01:cc:9c:e9:be:53:a2:a1:47:dc:a7:a0:99:c3:6b:
24:d7:16:99:53:9a:61:02:bf:97:ec:1e:85:5a:9b:48:d0:96:
11:ff:f9:b4:45:2e:63:06:c0:36:0e:b7:d1:b4:11:db:24:5d:
c3:74:7e:ee:d5:dc:6f:21:3c:2c:9f:00:10:0a:86:9f:6b:a6:
3e:27:aa:32:67:69:52:b5:fd:67:24:07:1f:67:6f:ce:ee:fe:
59:b5:36:77:0c:aa:c1:7b:79:cd:40:e4:82:e6:e6:1d:ec:63:
50:ce:99:41:06:7e:fa:9c:3d:38:f7:16:50:f1:e0:3f:1c:7e:
11:41:80:98:3b:7e:5b:d5:8f:cb:fb:dd:55:a1:20:29:0c:76:
60:f3:aa:65:86:48:f1:9e:72:86:ba:62:2b:12:08:cd:ca:f2:
ca:9b:e7:5c:43:cd:26:75:49:c9:99:5c:8c:34:5c:98:84:b2:
d5:b6:38:c3:0f:39:c4:7f:e5:07:c8:7f:7a:5e:3f:0f:58:94:
2a:58:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:38:42 2025 by rpki-client