Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: kbjlOHSOP1c6ZLrfJG8Nrj05rhYqSkTFQmO8/FdV4hA=
Subject key identifier: DD:1E:F1:BB:D7:4F:B0:FA:C9:41:74:30:33:D8:D2:06:89:DC:4D:F4
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 0196C2A6B528C8E9DE35945DBADC30C25A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 1245
Signing time: Mon 12 May 2025 04:00:27 +0000
Manifest this update: Mon 12 May 2025 04:00:27 +0000
Manifest next update: Tue 13 May 2025 04:00:27 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: /2roFFoH43LEcEkGJHtR6y+g5Gee5CFl5ff8aT4Iuls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:b5:28:c8:e9:de:35:94:5d:ba:dc:30:c2:5a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: May 12 04:00:27 2025 GMT
Not After : May 13 04:00:27 2025 GMT
Subject: CN=dd1ef1bbd74fb0fac941743033d8d20689dc4df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:da:86:e6:04:f4:5d:0d:8d:04:99:38:0c:
81:8b:55:0a:c7:56:6f:fb:91:05:23:4f:69:98:9f:
16:cd:d8:c8:b0:e6:20:cc:6b:81:d4:ce:49:bc:36:
9e:c2:f5:8d:82:b0:26:84:90:b8:24:bb:77:a8:27:
5e:3a:e4:84:a3:91:2f:72:b2:1b:d0:40:ab:df:50:
c9:7e:8a:3e:9a:0e:64:dc:04:5e:ec:01:94:f0:df:
8b:62:32:42:90:e7:fa:95:9c:22:e6:0a:a9:cc:e6:
50:58:29:4f:d1:d4:75:10:30:83:af:96:9b:e8:93:
9c:57:89:91:6d:2b:13:aa:2d:52:d8:65:59:ed:13:
9a:20:ee:80:34:2e:95:e9:8d:31:4b:e0:e1:a3:02:
2f:63:87:4e:b3:2b:d7:a1:e7:49:fa:bf:0a:d6:7e:
0d:d2:4b:7b:9a:b7:47:a1:b9:3b:10:1d:a1:c0:fb:
82:fd:e8:4d:d4:dc:eb:68:b8:fa:8a:9d:0e:fb:66:
0a:ac:df:72:12:9f:99:c1:87:5b:7c:43:6c:e0:3f:
57:89:d2:63:77:52:05:2b:fb:cf:6f:17:64:a0:ad:
0f:04:ce:ec:5b:97:26:c3:22:2b:3a:2e:b8:00:0a:
7d:cc:77:d8:55:33:e2:30:06:45:ee:01:c6:44:18:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:F1:BB:D7:4F:B0:FA:C9:41:74:30:33:D8:D2:06:89:DC:4D:F4
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ed:08:e8:09:0b:e0:ab:62:12:94:ec:b2:fd:d5:bf:0b:7a:
4e:b5:8b:26:8b:37:34:d7:d5:9f:ca:e3:94:97:55:5d:88:63:
c2:48:e1:2f:a7:f6:df:b3:89:49:f8:63:d3:2c:48:29:4b:48:
1f:d2:56:23:a9:b4:3d:63:47:d0:47:03:29:13:87:4e:a5:54:
5f:56:fe:01:02:e0:f5:ee:c8:9d:3a:ac:c6:28:e2:35:38:6e:
af:81:cc:bb:20:8b:92:80:44:d2:1f:cd:14:26:16:f2:de:9f:
da:86:57:8a:bc:71:95:f9:6e:e3:9d:11:50:fb:d4:1d:49:2d:
79:5d:74:47:f9:d2:ae:96:1e:10:3d:7d:fe:18:42:d1:7e:00:
ac:88:fa:30:80:65:ec:f7:06:26:1a:0c:e7:a6:62:97:bf:a8:
cb:cd:60:8a:f8:32:5f:6d:0a:52:6c:4b:d6:54:22:d7:5a:48:
42:b5:e7:5d:c7:d9:05:4f:a2:77:c2:6e:23:fa:84:e0:2d:9b:
d1:e4:1b:0d:bb:19:8e:39:af:e6:83:9e:a7:51:9f:7f:2a:a9:
da:7f:45:4f:61:3a:15:e6:c5:2b:c8:36:0c:bc:f2:6c:85:92:
08:47:46:df:71:ff:d8:35:bd:f7:10:9b:bd:bd:3c:29:61:ff:
ff:4a:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:44:59 2025 by rpki-client