Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: UwLfL+Vel9eMm6kMfffyAYW/1Cgz77Arks0PLVUCNL4=
Subject key identifier: 2A:3D:96:82:DB:01:17:45:2F:00:42:8A:96:B8:85:ED:34:25:14:B3
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 0196C2A6C3FFF2ABAEE137FE5E171553674E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 0FC1
Signing time: Mon 12 May 2025 04:00:31 +0000
Manifest this update: Mon 12 May 2025 04:00:31 +0000
Manifest next update: Tue 13 May 2025 04:00:31 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: 5RM12U1/o56UjAoDo802tB1EtOBhIFZX04Tovau4LDc=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c3:ff:f2:ab:ae:e1:37:fe:5e:17:15:53:67:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: May 12 04:00:31 2025 GMT
Not After : May 13 04:00:31 2025 GMT
Subject: CN=2a3d9682db0117452f00428a96b885ed342514b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:c1:4e:c4:a2:64:ea:fc:78:77:14:ed:9e:
95:94:5f:c7:f9:65:96:b2:0f:5b:8f:93:ec:b8:28:
c7:89:e5:01:dd:a1:b5:8d:92:89:cb:0c:ce:20:0d:
5e:ae:39:ec:a9:a2:48:46:d3:4f:ae:3b:d9:e6:14:
dd:97:bd:5d:3e:17:88:a0:48:90:e3:4e:6b:92:d1:
59:e5:b5:e6:75:35:72:07:68:dd:d0:63:77:8d:aa:
fb:c8:c7:c9:b4:5e:c8:31:40:0b:36:da:29:d9:c7:
7d:7e:f5:4c:a8:33:6f:2d:7e:c4:c1:06:e3:56:03:
43:6f:3e:ee:3f:f6:7d:c4:9f:d4:7c:64:ec:6b:78:
05:7e:fa:72:a6:72:30:0c:a3:4e:e5:0f:44:6d:dc:
c6:1d:1c:d3:8a:9c:d8:18:38:91:bf:5e:e3:f5:d6:
a8:c8:8d:9b:c7:ec:32:a1:33:c3:50:cb:d4:42:7b:
ac:67:9a:bc:b8:15:c5:9a:be:db:6b:74:7e:26:02:
d4:58:df:3f:39:3f:74:26:17:0e:f2:bc:1a:a8:ff:
03:8f:27:39:8e:7f:8a:0b:1a:77:b2:4b:c1:5e:f0:
bf:a3:a6:0f:32:e5:db:46:46:14:f0:dd:ff:2f:03:
f9:52:0d:e5:fb:a0:b7:d1:56:c5:de:a6:d5:24:84:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:96:82:DB:01:17:45:2F:00:42:8A:96:B8:85:ED:34:25:14:B3
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:bb:6d:bf:e7:04:3c:45:9b:5e:bb:b7:db:84:e9:98:08:
31:9a:ee:ea:13:8d:6c:50:33:e8:f0:b6:aa:7d:3d:ba:ef:81:
52:b7:e2:26:e6:35:98:62:7d:32:54:73:8d:2f:61:b0:d4:cb:
f5:5f:c1:bb:07:ce:84:15:78:1c:e8:60:17:85:22:db:a5:25:
d7:ef:cb:d4:82:c2:70:19:82:47:36:47:65:0e:3e:18:96:a7:
1a:0e:d5:66:a1:ce:52:95:17:c3:7d:42:53:a4:09:b5:c5:28:
59:a6:4d:60:db:4a:0c:3d:1c:8d:66:9a:fc:73:e6:b1:22:d2:
12:64:6c:25:8d:d0:b4:01:84:24:81:ac:b5:e6:18:f4:88:f6:
42:cc:0b:06:5c:9d:f7:ea:cf:a3:de:8b:2b:75:c1:bb:2f:88:
37:19:b5:76:66:8e:32:96:b6:88:75:26:f2:d0:5e:ea:2c:9e:
1a:20:ab:d2:18:4b:3b:d3:cb:26:96:8d:57:fb:84:d0:a1:1f:
05:e4:4a:24:11:a0:3c:f3:60:24:93:55:aa:63:58:22:fa:1c:
ed:d2:ad:a3:5f:81:30:f4:1d:93:8b:b4:ae:52:09:a2:ad:fd:
31:4a:c2:15:e0:ce:6d:78:fb:f7:6c:a3:a0:3e:9a:c1:b2:43:
ac:2c:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:08 2025 by rpki-client