Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: A6v3+HqRZ1OsQpsYut0ZKRcnU3JlWRVDwyGyMUPbTwc=
Subject key identifier: BE:85:2D:47:FC:5A:ED:7F:9E:BA:61:6D:51:E0:A4:B1:EA:B1:B4:45
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0196BCA49185756FFD49C68F5C2BF66BC61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0AAF
Signing time: Sun 11 May 2025 00:00:23 +0000
Manifest this update: Sun 11 May 2025 00:00:23 +0000
Manifest next update: Mon 12 May 2025 00:00:23 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: hlntwpqWFRvqZNbg2fkm2sqf5qgn8VJ+T8gadEdDUcQ=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:91:85:75:6f:fd:49:c6:8f:5c:2b:f6:6b:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: May 11 00:00:23 2025 GMT
Not After : May 12 00:00:23 2025 GMT
Subject: CN=be852d47fc5aed7f9eba616d51e0a4b1eab1b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:64:08:b2:4b:13:a9:53:90:72:99:8a:6d:
22:d4:1b:af:1b:91:79:0a:bc:53:b1:14:48:40:f0:
9e:ea:ef:e6:e5:25:2f:55:3d:88:d5:63:b4:16:9f:
3b:4e:37:4c:a3:96:6b:10:0e:92:4d:98:f4:f9:e5:
ca:cd:5a:22:fd:0d:28:92:ec:1f:53:ab:73:6d:17:
e3:bd:2e:10:a7:8d:40:98:e6:9a:fb:d1:86:f8:68:
c7:c1:be:cb:69:72:a1:84:03:4a:94:52:38:eb:c2:
ec:3c:07:1e:d1:b4:19:46:91:c1:a8:db:72:60:d3:
24:2b:04:03:1b:e8:c1:92:9c:ee:ca:9f:1e:a9:eb:
8b:e6:9f:4b:77:c1:d7:59:fc:9a:80:26:d9:4f:eb:
75:e4:13:3b:b9:e7:59:b4:eb:04:c9:c0:f3:c4:dd:
37:25:a7:03:4b:b2:e9:09:e9:fc:c7:83:3b:fb:9a:
ec:b3:23:d8:0b:3a:65:1f:46:5d:cc:80:69:48:22:
68:9b:32:79:07:40:8e:05:34:ba:18:d5:c0:6f:0c:
f3:29:32:92:24:99:19:b5:d1:1d:d0:9a:ae:bb:e2:
ec:82:a8:0f:d3:ec:b1:f1:c3:ea:5d:29:91:e7:0c:
db:44:41:59:ba:4f:ac:6e:79:4f:03:48:18:56:08:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:2D:47:FC:5A:ED:7F:9E:BA:61:6D:51:E0:A4:B1:EA:B1:B4:45
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:96:4a:02:40:19:0d:c0:a0:52:de:9f:af:2f:7c:00:f5:
b4:b5:09:74:b6:85:0d:f7:9a:2d:9f:0b:1f:b3:6e:46:fa:b6:
a8:88:cd:fa:e5:8d:5c:f9:2f:75:61:6e:29:59:20:08:3b:f2:
d3:bd:e1:63:49:89:5f:eb:ce:63:be:69:cd:a7:d4:e1:d2:f6:
b8:79:6a:b2:aa:40:28:17:53:21:72:bc:42:e4:fe:4a:c0:fd:
95:9a:0a:c2:8e:16:d2:97:75:a3:c6:2b:f8:90:78:43:86:56:
5d:13:57:12:dd:e8:28:53:12:62:8a:49:f2:9d:06:18:5b:e1:
20:b5:f3:17:7a:22:a6:a9:a1:2f:3c:1f:25:7d:2d:41:d3:a9:
a7:76:f2:37:ee:3f:2e:bb:8c:aa:ef:3a:97:51:a5:f8:3b:9e:
c2:d8:f8:df:72:ec:d4:16:ec:28:e2:81:e3:41:5f:98:cc:3d:
c4:68:2f:35:e2:ee:25:84:4e:ea:e7:f4:d6:95:54:f2:f6:f9:
86:08:15:14:bb:a6:c6:7c:3d:21:41:4a:c6:c7:a2:51:31:a1:
94:c5:16:9a:f0:60:e6:7e:1e:b1:2e:d9:77:3c:3d:fe:0d:12:
be:ed:99:4d:84:4a:0f:d1:28:84:dc:db:48:a0:7e:9c:fc:af:
61:f4:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:27:02 2025 by rpki-client