Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: rgwPNXwk/sOKEsZa+rYAL/BWQ/lbXz1SxPxYQkp8zK4=
Subject key identifier: F0:ED:0A:EF:6E:B4:03:83:9C:03:8A:CE:97:87:A2:95:A9:00:0D:38
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0196C2DD7F5BAF027D2CDA7281737147FCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 05:00:18 +0000
Manifest this update: Mon 12 May 2025 05:00:18 +0000
Manifest next update: Tue 13 May 2025 05:00:18 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: GmGu8NvCpqtQZGBxTFfEm5ZiqtBYtI7OxeIghG9HEvg=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:7f:5b:af:02:7d:2c:da:72:81:73:71:47:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: May 12 05:00:18 2025 GMT
Not After : May 13 05:00:18 2025 GMT
Subject: CN=f0ed0aef6eb403839c038ace9787a295a9000d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:ac:dd:d5:c9:7a:95:e2:de:65:2c:51:52:
ee:94:cb:05:b3:22:1f:8d:29:1e:3e:47:c4:4f:1d:
d7:89:9a:72:71:fa:b1:5b:96:13:bd:a5:83:3a:d8:
4a:71:df:5c:b8:86:e5:8c:d7:79:cb:f9:90:c3:ae:
53:65:00:2f:17:50:6b:3c:c0:b8:fd:11:af:12:9f:
10:5f:87:f1:71:03:8b:67:b9:d6:72:1b:74:3f:6f:
f7:11:2d:75:cd:04:a2:77:0b:45:63:ab:55:86:57:
c5:61:39:67:16:9d:ca:a1:2c:26:46:88:9b:65:42:
41:f1:a1:af:c1:a5:c2:b7:0e:78:3c:4a:4d:b3:2f:
02:e9:ca:bc:fd:65:22:d5:d9:42:bd:2e:12:ec:80:
4e:d6:80:4e:87:63:8a:9d:be:6e:99:3d:82:57:a8:
a3:61:99:d5:73:75:55:3b:ac:f2:d6:57:db:7c:ff:
45:e2:03:ec:71:6b:b8:24:32:3e:73:09:28:25:e9:
73:a0:35:ab:59:88:dc:61:64:91:c4:da:15:2c:3c:
48:2c:1c:e5:c2:6c:1a:3f:0b:d0:37:0e:8e:81:8a:
d7:cb:43:ce:e8:cd:81:b5:e8:32:25:a8:9f:d2:6a:
1a:60:1a:63:a6:a0:f2:00:b5:df:03:8e:9d:c4:6f:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:ED:0A:EF:6E:B4:03:83:9C:03:8A:CE:97:87:A2:95:A9:00:0D:38
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:6e:a0:50:7d:32:93:1a:1d:6e:d7:b0:bd:70:74:99:3f:
d6:7a:f2:5a:fa:ff:6b:75:86:6d:57:84:c5:16:c7:ab:35:b0:
67:78:4b:91:08:34:e9:b9:a8:1a:08:51:08:f2:5e:2c:9d:69:
91:da:6e:7a:75:bc:6d:04:5b:52:24:ca:cb:8a:c6:ce:a7:d0:
76:81:ce:d0:67:ec:77:7d:10:d1:00:62:04:b7:c0:40:bf:9a:
0b:a4:1a:74:18:6d:b6:08:0a:49:97:f8:a7:13:4d:28:57:03:
43:b0:18:45:96:48:72:7f:85:27:15:54:e8:1f:6d:f2:7e:69:
26:0e:90:78:65:80:64:fa:e4:0b:71:73:c2:23:cc:36:24:6f:
46:41:ed:62:57:9a:52:63:e5:c2:46:7a:33:c2:eb:71:d4:f7:
37:58:4f:a4:b0:a5:3d:4e:9d:f1:47:a7:1c:84:e1:4e:26:49:
55:6b:b5:96:d9:bb:90:df:84:48:59:43:c0:dc:62:99:e1:e1:
82:e9:5a:0c:cf:c0:64:08:b5:71:59:02:3a:3f:c3:54:37:cf:
cd:eb:21:04:6a:dc:d1:28:a0:54:18:7a:fb:84:31:97:8f:a6:
ed:11:ea:a8:f3:0d:da:f1:f9:e1:75:63:76:2c:05:41:66:12:
19:05:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:39:37 2025 by rpki-client