Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: NEbKoHZRiUkgxcet0KMkccO0ZEkb36qArbazIlfJ3HY=
Subject key identifier: ED:DE:1F:14:AC:E7:E6:EA:4A:D1:8A:D2:51:E3:57:92:FE:BB:D7:F6
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 0196BAB69B754F30E7B805D8B322B352DF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 15:00:51 +0000
Manifest this update: Sat 10 May 2025 15:00:51 +0000
Manifest next update: Sun 11 May 2025 15:00:51 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: Ei2wKywpPJZ6q4w5hhRzv13R5lziwLnOTx49T73epdY=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:9b:75:4f:30:e7:b8:05:d8:b3:22:b3:52:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: May 10 15:00:51 2025 GMT
Not After : May 11 15:00:51 2025 GMT
Subject: CN=edde1f14ace7e6ea4ad18ad251e35792febbd7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:78:4c:ce:70:fc:00:a7:55:0b:5a:31:d1:
2d:fc:c8:87:cf:17:e2:a9:e0:53:39:97:39:55:29:
c7:2c:2b:57:3c:65:9b:f7:eb:a1:8e:e7:f5:8e:cd:
e9:48:2d:d5:8b:ae:b1:42:3f:ed:98:45:81:92:c1:
3f:b1:09:51:2a:70:b3:c4:a3:f2:1b:ff:78:5a:f4:
28:1e:f0:4a:68:e7:69:26:bd:9d:9a:2b:f7:5d:da:
71:21:10:47:63:91:4d:52:82:20:2c:69:2f:70:b8:
38:cb:ef:02:95:69:c5:a0:e3:ad:a9:c5:25:67:7e:
12:57:d6:4e:f2:18:01:8d:90:40:25:21:ba:2a:6c:
f2:98:82:29:21:ed:de:fc:3f:a0:b6:d8:c7:e7:be:
71:db:ca:23:70:a0:86:28:c5:fa:36:53:26:79:b3:
b7:7f:1d:c8:4e:1a:60:e6:a6:f3:34:d7:27:5b:4b:
35:8f:98:c7:8d:4d:0c:45:73:bb:40:67:12:a5:2f:
c6:77:d2:9a:c2:0b:72:28:e8:ad:e3:4a:45:92:9e:
a5:6b:d3:df:cd:ec:4a:1e:dc:d9:b8:14:35:bf:ea:
89:64:90:39:eb:c3:38:6b:2c:13:1f:53:09:83:d3:
10:74:71:c9:a8:b4:aa:57:3e:2c:54:af:98:1f:e3:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DE:1F:14:AC:E7:E6:EA:4A:D1:8A:D2:51:E3:57:92:FE:BB:D7:F6
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:1f:cc:da:d1:89:f6:58:86:94:54:ee:7d:53:9c:ce:a0:
af:9a:28:39:e0:b0:48:5c:59:af:fa:8c:f5:c4:9e:eb:ea:3a:
b4:cf:78:ce:a2:aa:81:50:01:40:14:d6:0d:18:ff:87:9a:ec:
ff:1d:df:4e:8c:c3:df:fa:00:f2:60:53:de:bf:a3:05:a0:60:
3a:0b:9e:79:cc:68:aa:11:cc:4e:98:fa:32:e8:17:3b:a0:fd:
d0:5e:0c:ee:cc:72:98:da:51:32:fd:97:e4:88:72:29:19:2f:
b8:05:70:a5:c7:bb:06:ac:36:9f:67:ce:77:5b:aa:43:e2:eb:
1e:b3:f8:1a:44:fb:dc:2a:98:bd:6e:fc:76:b5:8f:07:4a:50:
86:be:b5:ee:2c:ed:38:2f:98:f3:73:c3:7d:53:7c:63:b8:eb:
85:c6:5f:86:90:3d:da:14:c6:0f:d4:d7:a0:7e:7a:81:4c:ba:
e6:7e:35:df:d4:a5:0a:b6:65:d4:0b:cd:49:cb:e1:27:36:75:
d7:31:f4:51:49:b2:5a:f3:79:4b:90:21:02:7a:a6:0a:6d:3b:
c8:29:f5:b0:6c:2f:dd:62:07:2c:5b:2e:14:16:57:53:8f:ae:
44:0f:28:3b:d5:9d:9d:26:c0:8e:aa:2e:2d:2a:d1:13:5a:5c:
a5:11:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:05:11 2025 by rpki-client