Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: nLE5LL+sgDiJFhYQxosADg37clEAQR/8AR0chSajOjI=
Subject key identifier: 81:27:07:21:AD:69:0B:72:F8:12:72:8E:A2:5C:EF:CA:CF:90:2C:04
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0196BCA4F0D3A75EB84211D4A9E191F89D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0E5A
Signing time: Sun 11 May 2025 00:00:48 +0000
Manifest this update: Sun 11 May 2025 00:00:48 +0000
Manifest next update: Mon 12 May 2025 00:00:48 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: Ji49A+ACx0BwJG5Sc48R+Akh+RHXblI/HXDVbFz8OJ8=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f0:d3:a7:5e:b8:42:11:d4:a9:e1:91:f8:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: May 11 00:00:48 2025 GMT
Not After : May 12 00:00:48 2025 GMT
Subject: CN=81270721ad690b72f812728ea25cefcacf902c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:c1:a6:75:0b:89:94:bf:e1:6b:67:1f:6e:
aa:e3:a4:04:d4:4f:8b:a7:71:06:00:bb:b3:b5:a8:
b1:10:ca:a2:40:05:67:63:ea:84:f9:37:b9:3f:a0:
50:5f:88:21:10:8f:38:82:09:79:50:39:41:f6:14:
2a:fe:1f:a5:9e:91:80:7a:47:49:32:d1:5b:fb:e7:
68:22:b4:21:e0:a5:b9:6c:54:4b:1a:a8:5f:82:96:
4b:d2:62:64:6a:07:3f:de:09:e3:d0:82:7b:70:59:
f3:35:c7:e2:98:4a:50:72:69:40:7b:9b:fe:57:f2:
97:8f:29:f5:a6:39:b6:36:5f:58:02:18:66:27:ed:
13:8e:98:32:f9:4c:47:c6:07:df:77:57:3c:7e:6f:
66:b0:2d:54:c6:b7:eb:33:0d:7d:5a:b4:cd:40:4a:
6a:82:42:40:2a:7d:a6:84:7b:a3:eb:ba:71:3b:1f:
e1:88:79:70:8d:29:66:ae:0a:70:4b:b4:96:90:be:
92:d7:40:5a:60:b1:ed:5f:39:4c:ef:d4:d6:d4:c7:
8d:78:3a:35:a9:26:45:30:96:93:cf:94:12:82:79:
ba:32:36:6b:f9:83:a7:3a:45:8b:1d:02:f9:c0:d4:
83:e8:d6:34:75:79:5f:cb:9f:a7:9d:96:a9:7f:db:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:07:21:AD:69:0B:72:F8:12:72:8E:A2:5C:EF:CA:CF:90:2C:04
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8b:87:c8:4d:e8:8c:80:6e:da:bf:2a:ab:5f:02:db:d2:90:
4f:ac:8c:5f:17:0d:c2:b5:1c:d9:42:3a:17:bb:73:17:79:9c:
af:dc:85:9c:a0:0b:db:29:4d:3d:8f:3b:80:d6:a7:44:b3:68:
c2:98:0a:01:54:98:5d:78:ac:fd:83:0d:37:a2:53:5b:ae:cb:
fb:37:9b:7e:ed:64:62:77:2b:21:b9:4b:3c:6e:cd:b4:d6:82:
6a:4f:4e:cf:62:f4:ff:95:0b:96:1b:d8:fc:58:0e:d4:93:18:
6a:93:30:1e:0c:96:d8:0f:ad:df:d5:2e:a8:52:0a:26:97:eb:
71:b7:75:53:43:8c:5b:cd:06:f5:86:82:0b:c7:5b:8c:39:8c:
01:56:13:2f:aa:7a:ec:27:f2:5f:fa:d3:4e:19:bb:51:40:dd:
5b:9a:a5:5e:93:b0:ac:44:00:b1:3d:ff:1e:dc:59:1a:7f:37:
c6:74:f3:ed:bc:9d:00:4f:12:c6:3c:c7:63:e0:6f:37:e9:1d:
5b:6a:03:a5:c1:ed:69:56:06:0d:48:c8:2d:b9:70:8c:01:03:
4c:11:4f:55:68:86:81:4b:e5:39:01:de:8c:73:89:09:14:2b:
2e:8c:0c:b4:cc:77:85:42:6a:96:db:e1:ed:d3:c0:d9:06:f3:
2b:01:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:10:21 2025 by rpki-client