Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: oM7bRfsvFY+/783thdk9Rc9cd6Xp4S9w+B7QXZAVevA=
Subject key identifier: 96:20:8E:7E:85:A9:0D:93:89:DE:15:04:CA:2E:C5:1C:21:F4:AF:05
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 01969D1A1576958C282378D4EF38F764730D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 14B6
Signing time: Sun 04 May 2025 21:00:54 +0000
Manifest this update: Sun 04 May 2025 21:00:54 +0000
Manifest next update: Mon 05 May 2025 21:00:54 +0000
Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=)
2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: pySpJzpXtf7/ZRrv9oj9Xd+MEhw+mGt298hpaPQvPC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:15:76:95:8c:28:23:78:d4:ef:38:f7:64:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: May 4 21:00:54 2025 GMT
Not After : May 5 21:00:54 2025 GMT
Subject: CN=96208e7e85a90d9389de1504ca2ec51c21f4af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:05:23:21:f2:72:fb:5e:8a:e1:db:7f:33:
1f:61:74:a4:65:af:4f:50:03:e2:8a:87:95:af:ff:
66:3c:2d:29:b3:fb:97:46:2c:bd:de:57:60:f1:e3:
ca:7e:35:73:b6:d4:6b:be:1e:5b:54:30:0a:ae:99:
0b:aa:21:7a:5a:d8:ab:e9:23:d7:66:dd:26:32:0f:
1e:23:63:5a:c6:2e:78:24:83:83:f2:3e:c1:b6:66:
cd:67:60:c0:6c:7c:86:2f:ab:2d:ab:00:3a:13:d1:
45:03:1f:1b:15:41:ee:d6:bc:31:c5:a9:20:ab:cb:
bd:c6:42:d2:79:34:9b:e6:16:c3:52:4c:b2:87:48:
b5:49:d1:d7:d3:5e:9b:dd:c6:ad:e2:a5:94:d5:e7:
6e:4e:46:99:36:d4:e9:a4:0c:63:d8:63:cf:43:cf:
8c:3c:80:f8:f5:6d:73:83:82:88:1b:34:11:67:5d:
e4:b8:b2:e4:d7:49:30:fc:1e:b2:40:86:da:c5:3c:
c6:dc:08:e0:8c:d4:73:b8:6a:f6:cf:4e:33:33:a8:
5c:8f:7e:2a:f0:c3:16:8c:c5:81:04:08:c4:63:90:
80:84:ef:a4:a2:d9:46:ac:95:a0:5f:bc:77:17:98:
22:02:f5:cf:1e:56:4e:43:76:57:04:a1:fb:13:01:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:8E:7E:85:A9:0D:93:89:DE:15:04:CA:2E:C5:1C:21:F4:AF:05
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:a4:4b:7d:de:23:50:18:21:55:65:a8:2c:4d:7d:95:13:
b1:fe:93:78:f7:fc:07:08:29:5d:5a:d9:8d:1c:fd:0d:b0:fc:
a5:87:84:72:e2:fb:c6:6b:53:fc:12:c0:0a:bc:07:3c:9b:3a:
af:d5:ba:81:4c:dd:83:b7:77:2c:90:68:e4:22:f2:15:87:c8:
43:d5:e5:bf:06:5e:da:fc:ed:1f:0c:09:b3:f5:e2:34:1d:32:
99:b1:ef:90:2a:3c:f3:3b:88:90:bf:3e:61:e0:9d:71:d0:73:
cf:66:64:7c:46:d7:c2:9e:df:33:84:0d:1c:b6:39:6c:7f:b7:
17:2a:a7:5a:86:45:de:f5:05:df:da:e6:51:af:00:2f:c5:2e:
5b:4c:38:4e:3f:5c:81:ea:0a:d9:ee:23:8a:4b:5d:37:f0:d8:
e3:04:f0:fe:0e:85:c0:d8:c7:e4:a7:d6:b3:16:b3:62:fe:37:
d7:87:09:d7:75:c8:58:ae:a2:73:b3:f2:52:c0:7c:07:b0:9b:
02:23:cb:a0:1a:a3:90:1e:04:d7:f8:16:b4:16:70:d3:e8:89:
45:06:c2:ae:c1:63:21:2f:cd:72:c1:7c:92:c5:55:0a:3b:92:
4d:c3:c7:4b:18:2a:0b:42:06:ca:24:68:05:80:b8:61:72:be:
2b:44:df:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGhV2lYwoI3jU7zj3ZHMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh
ZTMzZTkwHhcNMjUwNTA0MjEwMDU0WhcNMjUwNTA1MjEwMDU0WjAzMTEwLwYDVQQD
Eyg5NjIwOGU3ZTg1YTkwZDkzODlkZTE1MDRjYTJlYzUxYzIxZjRhZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ0FIyHycvteiuHbfzMfYXSkZa9P
UAPiioeVr/9mPC0ps/uXRiy93ldg8ePKfjVzttRrvh5bVDAKrpkLqiF6Wtir6SPX
Zt0mMg8eI2Naxi54JIOD8j7BtmbNZ2DAbHyGL6stqwA6E9FFAx8bFUHu1rwxxakg
q8u9xkLSeTSb5hbDUkyyh0i1SdHX016b3cat4qWU1eduTkaZNtTppAxj2GPPQ8+M
PID49W1zg4KIGzQRZ13kuLLk10kw/B6yQIbaxTzG3AjgjNRzuGr2z04zM6hcj34q
8MMWjMWBBAjEY5CAhO+kotlGrJWgX7x3F5giAvXPHlZOQ3ZXBKH7EwHG0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYgjn6FqQ2Tid4VBMouxRwh9K8FMB8GA1UdIwQY
MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt
NjU4MTIwYWU2OGUxLzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx
LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriakS33e
I1AYIVVlqCxNfZUTsf6TePf8BwgpXVrZjRz9DbD8pYeEcuL7xmtT/BLACrwHPJs6
r9W6gUzdg7d3LJBo5CLyFYfIQ9XlvwZe2vztHwwJs/XiNB0ymbHvkCo88zuIkL8+
YeCdcdBzz2ZkfEbXwp7fM4QNHLY5bH+3FyqnWoZF3vUF39rmUa8AL8UuW0w4Tj9c
geoK2e4jiktdN/DY4wTw/g6FwNjH5KfWsxazYv4314cJ13XIWK6ic7PyUsB8B7Cb
AiPLoBqjkB4E1/gWtBZw0+iJRQbCrsFjIS/NcsF8ksVVCjuSTcPHSxgqC0IGyiRo
BYC4YXK+K0TfKQ==
-----END CERTIFICATE-----
Generated at Mon May 5 04:57:01 2025 by rpki-client