Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: 3LyJNO0L06FxACAb5Ca977Tv4+v/Zp8C/F/t6GqLVPI=
Subject key identifier: 20:C4:21:12:A8:6C:A6:F4:55:28:26:FC:E7:EE:84:35:7F:25:85:6E
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 0196C53A2F33A1B54247433DABA364E3FF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 044B
Signing time: Mon 12 May 2025 16:00:46 +0000
Manifest this update: Mon 12 May 2025 16:00:46 +0000
Manifest next update: Tue 13 May 2025 16:00:46 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: FcDYENmSpGQlszMc2Y0EEiXGeqxul442nwjh8wfeDUo=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:2f:33:a1:b5:42:47:43:3d:ab:a3:64:e3:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: May 12 16:00:46 2025 GMT
Not After : May 13 16:00:46 2025 GMT
Subject: CN=20c42112a86ca6f4552826fce7ee84357f25856e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:8c:3c:5f:3e:4d:34:40:39:ce:f7:f7:92:
30:8a:93:65:78:8d:ac:ee:54:ba:b5:ac:a9:b6:0a:
2b:75:42:bf:89:18:98:66:dc:17:be:1c:a9:05:51:
5d:49:80:5f:26:62:fb:5a:3a:3b:b1:e1:2d:4a:74:
40:e3:0d:53:75:a7:d8:10:8f:1b:23:8b:ee:28:b5:
a0:51:30:da:89:08:ec:dd:83:b1:f8:5d:72:be:a2:
eb:51:c2:9c:b7:53:42:94:81:1f:b7:a2:d3:89:2f:
e9:d3:84:02:13:4d:95:62:7c:66:0c:da:a7:df:61:
e3:e5:94:75:51:f3:77:24:27:db:7a:66:48:f7:9b:
59:42:d8:02:9e:56:a4:69:d5:45:fc:4b:45:7c:b4:
fe:9c:86:b0:93:6c:e4:48:fc:1d:47:42:52:fe:64:
9b:9d:cf:08:c8:0c:0d:6a:83:32:f1:e9:b5:9b:32:
bd:38:b5:a5:1a:f8:df:42:fb:88:68:85:88:cf:f1:
26:b5:f2:ec:39:19:ed:7d:18:a4:31:ae:14:82:6c:
af:dd:52:06:9d:e9:25:a0:8b:c1:fd:44:c5:f2:51:
40:a0:f9:e8:14:df:74:30:e0:18:30:d0:ca:07:a2:
35:c2:ba:aa:dd:d7:03:51:12:f8:9b:d4:57:14:14:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:21:12:A8:6C:A6:F4:55:28:26:FC:E7:EE:84:35:7F:25:85:6E
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:98:f8:af:17:71:e6:55:d8:16:8b:e0:86:8e:10:ad:cc:
3c:4b:ed:95:77:96:de:00:ac:88:86:f1:bb:0f:87:0c:95:89:
05:f2:f7:31:ec:24:14:40:d0:43:6f:e4:79:19:a7:60:1e:8a:
06:03:47:70:9b:e9:5f:59:0d:05:a8:ae:78:0f:d9:d3:fd:5e:
b6:3c:c0:2f:ca:6a:d7:62:c6:94:09:b5:56:72:49:9e:59:28:
d8:fa:89:f5:f0:7a:ca:d9:c7:a6:6a:27:eb:4d:e4:ca:2b:28:
ed:65:91:8f:c4:ce:39:8b:e4:67:8f:d6:14:95:91:94:90:47:
91:21:c8:b5:ef:b4:ea:28:72:eb:e8:e6:e0:23:3c:4c:ef:7d:
b0:fb:6b:63:0c:eb:ca:9c:8f:73:e1:fa:f6:e1:54:d5:d4:01:
47:a5:26:51:af:af:14:8a:d9:db:fd:23:23:70:57:89:36:77:
ed:86:fb:6b:4e:52:eb:66:1b:d7:03:c5:3d:5b:2f:61:aa:0f:
06:52:0d:19:ab:ed:9f:20:d2:36:b1:2e:f1:95:42:8d:b2:0c:
36:c3:2c:d1:0d:35:09:a3:48:4c:d4:57:c2:ca:24:9f:7c:78:
44:9f:a0:27:f4:04:56:cc:1c:08:0e:47:a7:d6:2e:78:7e:72:
4d:04:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:54:43 2025 by rpki-client