Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
File: IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft (raw, json)
Hash identifier: RckE+IdhgkFwRzvsRLUFywXpLyd9Yxx7/D0uOByIXA8=
Subject key identifier: 0C:40:13:58:7F:62:8D:B3:32:93:51:D5:07:8F:19:91:4C:63:DD:F7
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 0196C83AFD3306B44E51D1955F5FBD3D6DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 06:00:30 +0000
Manifest this update: Tue 13 May 2025 06:00:30 +0000
Manifest next update: Wed 14 May 2025 06:00:30 +0000
Files and hashes: 1: IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl (hash: FKZqc9XdTPz1ecJbPOfm35vk0xoRc35sLPHgKy4KGis=)
2: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (hash: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:fd:33:06:b4:4e:51:d1:95:5f:5f:bd:3d:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: May 13 06:00:30 2025 GMT
Not After : May 14 06:00:30 2025 GMT
Subject: CN=0c4013587f628db3329351d5078f19914c63ddf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:18:72:13:a2:6c:6e:47:c6:03:3c:f1:49:
e3:ac:c9:f8:a8:e9:f6:d5:b9:75:0c:d5:7e:35:94:
07:92:64:94:4b:2e:bd:1b:1b:7d:1f:e7:d8:8c:cc:
03:d5:75:6d:eb:65:8b:98:8e:bb:46:f1:31:a6:f3:
5a:11:a4:ca:1d:bb:c8:7e:8b:86:ad:60:58:52:4d:
08:72:a6:bd:87:62:35:9b:40:59:4c:43:4d:8d:24:
c6:08:59:ec:e3:51:a5:87:e6:8d:15:e2:b0:92:29:
fd:cb:a9:02:55:13:68:02:0a:f8:5d:68:8f:88:eb:
02:78:ee:03:45:58:50:08:bf:bb:8b:6e:80:e5:f4:
f0:87:6c:fd:16:50:89:52:46:dd:3d:96:a1:19:6e:
79:6e:81:78:d3:0f:14:49:b0:51:cd:ff:15:06:04:
0f:1c:6a:21:a4:08:b2:34:ef:01:ee:45:eb:c2:75:
2f:42:00:40:79:cc:43:ce:4e:c7:32:87:fa:7f:64:
2a:67:75:79:80:6a:97:53:e9:98:4f:21:11:ea:f0:
41:64:7b:b9:76:81:a8:4c:23:80:47:43:89:1d:ae:
d2:89:c9:0d:d6:ad:cd:37:78:99:13:c2:65:d2:e5:
e3:e4:eb:84:84:20:92:df:4b:d0:87:b7:60:4b:a5:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:40:13:58:7F:62:8D:B3:32:93:51:D5:07:8F:19:91:4C:63:DD:F7
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1c:4f:b4:79:99:3d:dc:a7:33:79:c9:6d:41:c6:38:fb:d2:
4c:46:e9:29:11:69:a3:b6:76:d7:2c:ef:ab:e8:94:9a:a7:1c:
d3:ba:86:d4:2d:1c:07:cb:8b:ac:00:a6:0d:97:8d:a9:15:4b:
ed:17:05:fe:1b:c9:14:55:bd:0f:c1:a4:be:ac:41:84:66:47:
88:07:7c:4b:68:1a:17:5b:cb:76:11:a9:3d:46:02:5a:f9:70:
80:e7:cc:ba:8d:40:5f:bc:71:b1:cd:a2:91:02:21:d4:18:9c:
b9:97:68:a3:35:c5:08:52:e8:6e:c9:2e:8f:27:fd:a0:40:e0:
41:7a:d4:65:6f:94:48:49:d8:1e:be:5d:4e:08:7e:0c:14:2c:
c5:2f:75:dc:b7:4f:ab:d6:4c:55:b8:36:f9:d9:a1:e7:89:dd:
d7:df:0d:8b:0a:b0:1c:16:f6:7b:6c:0b:56:7c:08:29:5f:26:
5f:81:3c:86:6f:2e:4a:04:fe:45:1c:38:58:c7:85:6d:70:03:
c3:04:e3:f9:ce:f2:7b:9c:32:a8:c5:b3:37:74:2b:99:76:3d:
8d:c2:18:93:73:ed:92:68:a9:d2:e3:93:c6:3f:a1:1d:9b:c5:
42:f7:67:0d:f7:f9:c1:63:7a:74:73:5d:94:bd:be:22:68:fc:
b5:b2:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:49:45 2025 by rpki-client