Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: H90LS9sG+JR0YZ+gUROzWeI7sCEEKcZ9UZSUs4osanU=
Subject key identifier: 96:6D:33:D6:E1:30:1B:3B:34:50:19:CD:31:FD:D1:4B:81:97:E4:45
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0196B77EA020B5ABD0DD279C90AA935E9FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0172
Signing time: Sat 10 May 2025 00:00:51 +0000
Manifest this update: Sat 10 May 2025 00:00:51 +0000
Manifest next update: Sun 11 May 2025 00:00:51 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: vy8yV/IoOOgLvilGD/O+HeYCUieYDXEzttBht79SVKw=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:a0:20:b5:ab:d0:dd:27:9c:90:aa:93:5e:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: May 10 00:00:51 2025 GMT
Not After : May 11 00:00:51 2025 GMT
Subject: CN=966d33d6e1301b3b345019cd31fdd14b8197e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:2c:e3:66:c5:cd:0f:2a:ce:f6:9c:34:22:
ef:e9:74:3f:20:ae:00:e3:a2:70:33:a4:0a:9e:2d:
0e:14:97:87:f7:96:b2:27:4f:e7:7c:55:78:d9:84:
d7:4c:dd:1f:aa:d2:d4:66:d4:3d:69:52:7c:9b:db:
14:0c:0e:36:e5:4d:24:f8:63:58:45:52:8f:60:05:
86:4b:2d:8e:c0:88:3a:6d:c5:f8:21:db:1f:3d:1a:
7b:63:f5:40:4a:dd:f8:89:c3:fc:c8:12:5e:c6:7c:
f8:9a:33:f8:89:1c:f4:ba:0a:32:03:b9:89:ac:73:
18:83:8d:d0:48:53:7e:76:5c:85:00:99:df:51:96:
77:63:a7:a6:49:8a:4b:b8:06:93:36:0e:85:20:ed:
9d:c8:7c:3b:c8:39:dc:0f:f7:2d:da:00:ae:3c:bd:
db:53:84:5c:cf:3c:66:bc:d9:06:28:6b:66:5d:fa:
b4:6d:cc:cd:42:39:f1:99:4a:81:1e:3d:ef:20:3c:
90:5e:b4:5b:3e:c6:97:60:05:6c:1c:c2:3a:a5:43:
bd:6f:e6:c7:24:b9:9a:0a:4c:2a:6b:8a:30:cd:1b:
cb:ee:fb:e9:6f:87:56:ed:8d:05:ce:dd:11:77:a7:
73:81:9b:9c:2d:58:ef:44:9d:f1:22:3f:85:1d:e0:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:33:D6:E1:30:1B:3B:34:50:19:CD:31:FD:D1:4B:81:97:E4:45
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:45:b9:e0:41:95:7f:72:96:9e:3f:65:71:47:71:56:69:f0:
ed:37:08:fc:6e:ab:14:8f:65:73:03:2a:0c:c8:48:ee:49:23:
8d:4a:12:77:31:81:ea:3c:c9:47:f8:be:e1:a1:ed:df:ea:f2:
12:f0:76:5e:40:8d:87:c3:66:b9:a7:95:f7:fa:01:0b:a0:27:
62:a0:40:37:9b:ce:9d:06:2f:de:dc:81:f4:69:2c:52:f3:c4:
48:24:5f:06:b3:ab:23:96:91:78:fd:49:ae:e8:37:9c:29:4e:
e6:38:26:04:e7:99:4f:9c:85:09:bf:a4:66:3f:80:1d:c3:4a:
44:c3:85:cd:e6:f1:41:61:0b:fe:bd:a5:35:bd:1c:49:6f:92:
31:67:5e:73:2b:57:d2:88:74:bc:fe:2a:93:bb:a2:b6:1e:26:
d3:e8:d8:37:a1:d3:6f:45:06:bd:3d:4c:04:cc:fc:1e:6b:3a:
81:bd:83:87:42:95:d1:66:cb:fc:42:d5:26:e0:f8:02:a4:e5:
a3:ab:bd:c9:b5:d3:6f:16:90:a6:a9:cb:8f:ca:6d:a0:eb:eb:
9e:2f:9f:11:77:db:59:d1:18:62:ce:a5:7f:f3:5f:a6:8f:85:
59:5a:63:05:06:60:af:d9:66:b0:a7:b0:aa:3f:2f:3d:cb:c2:
8d:bf:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:42:27 2025 by rpki-client