Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File: Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier: fGE4uxYCuAGPvDEd8NP1cvD/GcSYfgN7en5H4Wr9y5A=
Subject key identifier: 2F:BA:47:A6:39:D6:29:D2:46:C2:EA:ED:9D:C6:D9:EE:79:5A:B0:FF
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial: 0196C20255605B348DB15AB36DC83AA87164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number: 020B
Signing time: Mon 12 May 2025 01:00:54 +0000
Manifest this update: Mon 12 May 2025 01:00:54 +0000
Manifest next update: Tue 13 May 2025 01:00:54 +0000
Files and hashes: 1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: L8TR9/WNMLYHxnkHWWaHRdZQX5r1e6N2SARa7EklXJI=)
2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:55:60:5b:34:8d:b1:5a:b3:6d:c8:3a:a8:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Validity
Not Before: May 12 01:00:54 2025 GMT
Not After : May 13 01:00:54 2025 GMT
Subject: CN=2fba47a639d629d246c2eaed9dc6d9ee795ab0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:ee:83:ed:49:cd:cb:60:f2:28:83:f4:d5:
ca:56:df:bc:f9:df:f7:1c:a0:2c:80:60:4f:4a:8d:
29:9b:61:34:c8:e1:64:07:79:6c:6b:59:3a:ab:50:
20:c3:6a:52:76:b5:bf:4f:bc:81:b2:24:1b:35:0a:
60:22:1d:7e:6e:48:5e:90:85:a5:72:90:d9:e6:76:
50:4e:3a:b8:29:1a:b6:8c:2a:d6:d8:e8:46:eb:97:
2b:48:43:86:15:17:de:04:e5:32:d5:1c:5b:b3:94:
56:42:4b:5c:a5:74:64:cb:c7:52:4c:b5:09:93:98:
69:53:4c:77:66:92:b7:d4:ac:e0:96:d0:0f:48:33:
c8:91:5b:81:12:f2:95:a7:66:b9:46:07:92:52:1f:
88:cd:c6:ab:e5:be:f2:64:d3:de:e8:7b:a6:cb:a4:
b5:dd:66:42:80:62:c5:32:94:2a:ac:b9:e9:01:0a:
cb:d6:21:40:87:ce:a2:7f:cf:35:6d:2c:4e:17:6d:
19:30:e4:42:09:54:c5:19:bf:c2:50:55:f1:5e:27:
0d:c1:53:9a:15:51:34:19:37:48:da:75:5a:36:8b:
08:5b:8c:ca:34:bf:4c:c5:d4:66:20:4e:28:1f:61:
6c:d2:92:bb:7c:d4:04:25:e7:11:a3:2b:e5:84:36:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BA:47:A6:39:D6:29:D2:46:C2:EA:ED:9D:C6:D9:EE:79:5A:B0:FF
X509v3 Authority Key Identifier:
keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:80:6f:d5:1b:6d:6d:cf:5b:93:13:d1:8d:7f:95:28:b5:b5:
f3:57:66:62:aa:f8:c2:d4:84:3f:c3:c7:96:57:44:bd:bb:6c:
0f:8e:a7:67:7f:35:c7:eb:1c:83:40:b8:78:85:7d:47:db:e0:
95:55:1a:7b:f5:6e:f6:88:df:0c:a8:d1:0b:29:22:be:ac:3a:
f8:9e:29:fe:16:db:86:93:75:ab:ad:f5:c0:e6:8e:38:fb:35:
5f:43:76:26:cf:49:14:63:71:21:70:a1:ba:58:6a:8f:95:d6:
3d:86:6b:dd:54:18:4e:73:37:14:fe:52:ba:34:1e:9f:7a:95:
11:91:06:bf:17:d0:4b:89:d9:5a:4f:9a:3f:25:9b:58:30:bf:
90:51:ba:ec:e7:e0:0e:a3:f4:49:6e:cd:6d:4c:46:92:76:b5:
fb:5e:26:41:c4:dd:9d:b1:4b:b1:6a:90:9a:08:b7:fc:d7:ff:
97:8e:63:0c:06:01:e0:7a:b3:bd:c6:9c:0d:da:52:1f:26:cb:
83:59:3d:6e:08:83:f9:01:cd:27:77:78:23:c7:1a:c7:7f:2c:
79:5f:75:d3:c2:ae:f1:9b:0b:57:f6:c2:8f:5f:bf:51:0c:9f:
f6:8d:b2:08:ed:83:17:2d:31:74:b1:55:ed:16:5d:fe:56:bc:
28:e5:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:15:02 2025 by rpki-client