Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: z7CFw6AoQxZaFCIFhN3jsoATjx/GXDe8GZR+6hnCS9o=
Subject key identifier: 00:B2:33:1F:56:91:12:94:B8:C0:A0:FF:F2:48:D4:3B:54:77:EE:D7
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 01969ED0E5B8BD1A03DCBB10BDB46C532EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:12 +0000
Manifest this update: Mon 05 May 2025 05:00:12 +0000
Manifest next update: Tue 06 May 2025 05:00:12 +0000
Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: lk93eAspj81AsQQPJwt2j27k4pvQs6K1m/Fdbc7yNUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:e5:b8:bd:1a:03:dc:bb:10:bd:b4:6c:53:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: May 5 05:00:12 2025 GMT
Not After : May 6 05:00:12 2025 GMT
Subject: CN=00b2331f56911294b8c0a0fff248d43b5477eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:36:fb:59:fd:ea:73:90:aa:63:4d:ad:10:
6e:7d:35:6f:47:5d:6c:fe:d5:17:ec:06:f2:8f:95:
11:4b:41:90:fd:01:76:5d:65:30:31:00:f1:bb:fb:
62:26:8b:fe:5e:c2:84:02:11:91:81:58:7b:24:24:
7f:37:c4:97:e9:8b:70:59:fc:5f:c5:d8:12:70:d0:
ef:ad:a7:f0:e2:3a:51:7e:b8:7b:5f:ca:12:2e:5e:
77:ff:de:d1:67:98:d5:b7:f5:66:c4:3b:82:e7:4b:
44:06:32:64:02:49:9b:23:a5:3d:ac:eb:dd:38:3f:
51:9b:a2:b7:1e:db:28:d6:e8:ec:89:e3:88:78:74:
44:1f:92:11:b7:ca:6b:c3:61:44:ed:6d:7a:a7:7b:
d5:55:8b:ca:5d:8b:d5:8b:0c:78:b2:1c:d7:71:dd:
51:2d:33:0d:a0:eb:72:3e:75:58:21:1c:49:2f:b5:
71:9b:75:e8:de:c3:12:f5:17:5c:f0:3c:a2:7c:a5:
18:20:68:7a:3b:fa:be:65:e6:9b:f5:52:4e:c0:fc:
13:81:04:c6:57:4e:46:53:c7:8d:f3:4c:c6:91:be:
f3:b2:bf:83:af:2d:e7:9d:b8:7c:b1:58:fb:7f:09:
bc:93:e9:c9:10:33:41:d2:9e:6a:44:ae:e3:99:d9:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:33:1F:56:91:12:94:B8:C0:A0:FF:F2:48:D4:3B:54:77:EE:D7
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:15:fe:fb:21:95:5d:46:fa:9c:fc:98:8b:a7:63:11:a2:f7:
96:19:ee:2b:97:f7:82:6e:ef:6c:d8:bb:33:91:27:4e:63:01:
c6:ee:02:e9:bc:f4:bc:ff:6a:af:f5:c3:ae:7b:44:e5:a5:a5:
74:5e:1e:ad:ed:3d:f5:6e:18:03:70:fb:5c:93:12:8a:7e:82:
ee:87:2b:71:60:77:64:ff:e8:4a:d0:79:c0:41:dd:5c:9c:d9:
62:3e:38:6c:8c:3b:89:90:9c:7a:62:98:14:ef:74:02:af:c9:
b2:5b:af:61:a0:53:80:af:eb:63:93:40:78:2a:e5:d8:73:dd:
51:73:b3:8a:d7:cc:6d:12:35:10:67:fd:a4:41:b2:81:27:3a:
e5:d2:13:8a:da:b6:6b:15:c5:3a:8b:b7:f0:1f:8e:ec:6c:4d:
ed:7a:b9:5c:26:9d:32:a9:89:1e:64:27:a7:6c:b9:6b:65:65:
22:77:ea:78:f6:ce:ab:25:89:ca:46:b7:81:20:f1:8b:ba:47:
12:8c:7d:b4:ff:e3:bf:80:c2:0f:f6:75:70:17:e4:03:a5:c7:
16:87:c0:0c:b0:4b:4a:3f:48:8c:4d:23:5c:f5:63:81:ad:5a:
23:9e:9f:32:46:6d:3b:bc:10:27:4e:f0:0b:e7:66:3d:4e:b3:
3a:66:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:24:10 2025 by rpki-client