Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: Y2V0ui1oAjgCJD4jvbH9jhvaVj9D7MJKx4FTDxVC6AE=
Subject key identifier: 61:5F:78:CD:2A:BF:80:95:E1:AB:32:EA:D9:4F:B2:B6:91:14:39:85
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 0196BB24405D9FDFAC90B39561C739338A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 0F4F
Signing time: Sat 10 May 2025 17:00:37 +0000
Manifest this update: Sat 10 May 2025 17:00:37 +0000
Manifest next update: Sun 11 May 2025 17:00:37 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: 72DHbJ7N98YcwrkcuffGU/OitqXp8mWxMD87kWXEdKw=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:40:5d:9f:df:ac:90:b3:95:61:c7:39:33:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: May 10 17:00:37 2025 GMT
Not After : May 11 17:00:37 2025 GMT
Subject: CN=615f78cd2abf8095e1ab32ead94fb2b691143985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:ab:c3:a1:a4:0f:7d:9b:26:0e:b9:55:cd:
33:e9:53:c2:31:83:40:98:34:46:ae:c2:40:a6:1b:
da:f2:e6:6a:50:b7:fd:62:8b:f8:46:a9:69:0a:d8:
95:8d:52:e9:59:7e:ca:89:9b:93:12:75:9c:5f:3f:
ce:56:00:9a:c4:bc:54:33:82:0e:43:c1:ff:90:ed:
41:d5:30:c0:5b:1b:46:da:6d:41:a3:5f:65:a2:ee:
14:8c:15:c0:14:fe:4c:c6:01:0c:f4:c9:c4:17:76:
f1:67:46:61:e4:47:e2:2f:2f:52:8b:3e:95:35:01:
8b:10:2e:cd:22:c1:4d:d2:cd:c3:33:cd:39:ef:fa:
cb:21:28:c1:3c:a4:f2:67:0c:03:3b:6d:61:2e:02:
89:98:6e:07:5d:3c:02:4f:98:f8:44:9d:4d:55:40:
7c:fd:bc:91:49:70:22:ce:c6:37:3e:9e:50:2c:e5:
83:c1:20:ad:54:01:ee:fe:0c:39:92:63:e0:13:d3:
4d:e1:27:84:de:aa:e6:60:c6:94:8d:08:34:43:6b:
d3:7a:40:ad:dd:ba:24:9f:18:30:74:48:eb:f6:a1:
73:f7:2a:e5:91:bc:0c:59:04:9e:94:21:7d:87:43:
a1:2d:9e:a1:35:22:1c:d1:18:59:06:38:48:f8:64:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:78:CD:2A:BF:80:95:E1:AB:32:EA:D9:4F:B2:B6:91:14:39:85
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d2:53:9f:c7:4f:b2:96:5a:f9:33:5c:c8:06:00:d8:6e:69:
00:6e:60:ee:39:7c:cc:cd:d8:ea:40:ec:e4:15:d0:bd:27:da:
37:70:e8:45:25:35:14:3c:67:c2:6b:66:cd:4c:5d:94:62:08:
3a:d5:bf:47:d5:2c:1d:fe:c1:8b:89:03:82:f7:5f:74:73:d0:
7e:5c:3a:a3:68:51:dc:65:1b:bd:89:ca:35:52:be:76:0c:cf:
a6:b4:fd:36:a8:5e:c1:f7:c4:e5:f7:dd:31:70:29:3e:36:9b:
4a:c0:11:15:1d:34:93:b4:6a:d8:d8:05:5b:ca:84:c6:9f:40:
32:1e:40:52:7d:bc:58:68:38:a0:35:73:6a:22:a0:82:49:c6:
c1:61:18:7a:9c:51:e3:29:0b:c8:95:f6:cd:42:b9:1e:a5:ad:
19:cc:96:a5:9f:54:f5:7e:87:f1:50:f2:68:90:75:0b:ab:85:
18:9f:e4:63:1e:17:8c:79:f0:a1:8d:69:44:12:46:f5:76:4f:
e8:d0:6e:32:fe:91:97:72:66:de:c0:78:68:25:80:c6:a5:8b:
0f:61:dc:21:db:fb:ca:e0:77:76:74:76:3a:74:61:de:fa:b5:
8e:2d:eb:81:71:2b:25:6a:ed:6c:c8:82:27:c6:3b:ac:ab:9d:
6c:37:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:25:13 2025 by rpki-client