Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: MdFfAUKDpiNOKPuZsttfiB6GXFZjRNR8HLJ+iuHi9f4=
Subject key identifier: 0D:41:B1:78:07:9F:16:1F:38:74:8E:16:19:6A:09:88:25:3A:3B:C9
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 0196B82304BA494B5B6E962E2824D419682E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: 048D
Signing time: Sat 10 May 2025 03:00:24 +0000
Manifest this update: Sat 10 May 2025 03:00:24 +0000
Manifest next update: Sun 11 May 2025 03:00:24 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: 6B5ePxAwCapTbDLVnOgKek1dhmPQySsSnd3lbero6h8=)
2: VHq92EwfoMDVXDmr3YDQVJFW754.roa (hash: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:04:ba:49:4b:5b:6e:96:2e:28:24:d4:19:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: May 10 03:00:24 2025 GMT
Not After : May 11 03:00:24 2025 GMT
Subject: CN=0d41b178079f161f38748e16196a0988253a3bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:11:9b:13:5a:cf:a3:79:f7:e5:e7:67:a6:
5b:53:c4:1d:48:24:eb:bb:e4:b4:fd:73:1d:92:3e:
eb:30:3d:91:f8:5a:c8:26:7c:91:3b:5c:a8:b7:0c:
0c:43:f9:22:6a:04:21:89:c3:b3:7c:c5:72:66:99:
12:86:ec:f6:ad:d0:82:69:b9:8b:3b:42:a5:ff:a6:
bb:c5:47:e1:47:46:b3:a2:1c:7d:b8:de:66:cc:80:
4d:59:72:2d:0c:26:da:fb:87:35:df:b4:ce:f0:b2:
e0:33:0e:de:16:66:76:d8:70:5e:fc:07:cf:c8:40:
21:ad:7a:04:94:12:48:52:82:31:55:6f:e4:0f:47:
d8:5f:ba:0d:a3:2a:da:a2:01:26:41:60:53:70:25:
ac:96:1e:51:55:09:8c:c7:b0:28:99:ab:1c:f2:7a:
ee:2e:8c:06:55:72:2a:e0:05:23:a7:8a:f4:b5:67:
4d:c9:e1:d4:72:58:c3:16:63:67:57:f0:da:14:85:
06:64:4f:5d:15:a6:9d:39:41:43:28:e6:23:0a:03:
1e:e5:f7:7b:e3:be:23:fd:a4:91:e6:f9:90:13:28:
e5:96:b9:9e:79:87:3d:80:60:fa:8a:6a:20:d6:f8:
dd:35:12:05:2e:69:fa:97:70:87:85:93:8b:f0:e1:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:B1:78:07:9F:16:1F:38:74:8E:16:19:6A:09:88:25:3A:3B:C9
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c4:5e:a6:30:14:fb:51:11:b0:28:92:64:b2:28:f0:36:a9:
99:85:ed:65:48:25:20:58:c7:a2:77:da:53:fc:fd:7c:f4:03:
a7:71:ba:17:3c:b3:9d:48:30:95:ef:10:1e:97:3e:35:e3:71:
89:d1:2b:9f:e3:61:60:6f:16:95:f3:e6:da:de:ec:0a:d1:54:
62:7f:38:e2:26:bd:93:e9:65:6b:e2:80:22:66:1d:36:f3:39:
a3:3a:c9:64:7c:4d:0e:c9:ac:70:0f:01:18:cc:3c:9f:47:b5:
ec:1b:fa:aa:73:37:ed:e5:af:7c:db:f5:fd:bb:26:66:e9:4f:
46:1d:a5:e7:ea:15:f8:fb:f3:4d:48:6b:0f:40:2f:60:24:f9:
6e:74:2b:2c:ea:7a:ce:e0:c4:88:e5:9e:0f:c9:cc:06:52:e2:
26:f0:d7:8e:49:23:3f:e2:39:56:76:9c:58:d6:e4:05:d6:f7:
05:86:85:c3:b3:65:88:df:50:57:92:7e:1b:49:98:b1:ee:37:
6a:af:ca:1a:27:74:75:74:1e:88:a8:20:54:d4:e2:10:9d:6f:
ab:84:16:48:9c:c7:9e:bd:50:52:45:cd:99:40:bc:42:e2:71:
38:cb:bd:02:a5:b8:36:65:68:20:41:a1:f9:57:d3:df:af:6e:
de:bf:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:38:34 2025 by rpki-client