Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File: IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier: H4FsmVxKu8B5mV7/ttPfxD5HHmeLTn6LIJR4l4TS23c=
Subject key identifier: 31:9A:9F:EF:8B:89:E1:F6:FF:53:73:46:91:63:92:72:05:5D:6C:B7
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 0196A2ADDC11337749BBEE0B4CB63D4E8815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number: 1032
Signing time: Mon 05 May 2025 23:00:25 +0000
Manifest this update: Mon 05 May 2025 23:00:25 +0000
Manifest next update: Tue 06 May 2025 23:00:25 +0000
Files and hashes: 1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: xhEN4kv4FWHGzWBZj+5IIXsJsOw5aT+qAs3PMGF++zo=)
2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:dc:11:33:77:49:bb:ee:0b:4c:b6:3d:4e:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: May 5 23:00:25 2025 GMT
Not After : May 6 23:00:25 2025 GMT
Subject: CN=319a9fef8b89e1f6ff53734691639272055d6cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:d5:4d:3f:60:1d:37:12:71:c8:b5:d8:88:
95:0d:e8:01:9d:52:31:0b:ea:50:d9:00:11:cc:61:
4a:1f:e2:f4:6e:79:98:bc:72:26:e1:23:69:bb:b7:
2d:e1:f2:92:50:d1:20:b3:b7:99:98:4c:69:b4:a6:
67:5f:00:1e:30:c1:1a:cd:d7:47:b9:4d:6f:cb:e1:
bd:95:af:1e:ba:6c:be:9a:10:ee:6f:cf:f4:ac:99:
4d:83:c9:13:f4:36:18:d7:b0:15:c2:8c:26:11:54:
3e:9c:f6:a0:bd:36:86:c1:fb:b8:b2:5b:0e:e0:a5:
3f:73:d7:84:7b:db:82:39:ad:fc:d9:f6:a4:37:5e:
06:bc:84:b8:40:c0:1d:3a:a7:c8:45:cb:a3:66:13:
32:ec:d4:1f:d8:f8:c8:cf:b4:7c:d2:d6:09:57:25:
82:b9:23:3c:d4:9d:ce:54:cc:a6:b6:37:71:63:a7:
3c:75:90:25:66:a5:c1:9a:27:af:8b:c9:ca:71:98:
d6:d0:61:1e:01:15:43:46:42:ed:7f:e4:79:2e:92:
cc:fd:15:d0:ad:5b:09:4b:14:da:07:f4:be:29:38:
51:60:3f:03:2e:bf:5f:84:64:c2:f0:c7:1d:bd:59:
8e:17:2d:21:bd:fe:da:d3:8f:84:d0:1c:df:5e:7e:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:9F:EF:8B:89:E1:F6:FF:53:73:46:91:63:92:72:05:5D:6C:B7
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:13:c5:42:68:02:71:23:b6:02:92:bb:7a:ec:f0:ef:18:02:
1d:18:89:19:b8:ca:b6:b9:bd:be:99:28:d1:f2:88:18:ce:bc:
37:10:86:8f:65:aa:38:85:f0:38:48:05:34:a9:3b:50:50:a5:
b4:4b:6e:b4:d0:4f:12:ee:ed:7a:b7:a7:93:90:ff:cc:9f:bc:
79:02:40:fe:de:8d:0b:2c:5b:18:0b:b3:0a:ec:e6:50:1d:ff:
29:0e:a9:d7:3a:fc:8b:7b:4b:dc:53:83:79:2f:13:3f:fb:6d:
33:6f:74:81:eb:6f:25:14:e9:0d:97:63:ec:dd:8e:47:ae:33:
81:98:a8:8f:03:b9:fc:45:71:3f:cc:d1:90:64:46:c0:9b:06:
9a:f2:e9:05:98:e4:bf:7c:31:ad:e3:3f:ab:4e:c0:db:15:d3:
9a:62:1e:16:dd:3a:1f:38:52:59:64:c6:07:64:1e:5d:6e:ec:
45:72:ad:c9:e4:cc:c8:a9:60:07:5d:35:2c:34:d6:3d:f2:2f:
47:50:58:bd:13:9b:cb:4f:b3:5a:f8:85:49:9e:37:06:ba:54:
04:f3:88:2e:84:a0:79:5f:ac:4a:03:3e:3f:fc:22:11:be:82:
cd:25:a2:9b:a9:53:11:64:2d:08:0a:f1:5c:84:a8:f4:de:51:
e1:ba:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:38:06 2025 by rpki-client