Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: L5E5pO+i1Gw3/zKm51rLllN1us/86wD95j2ELkVw/Zs=
Subject key identifier: 19:96:4A:85:1B:4F:92:8E:1E:50:88:9B:6C:47:B5:4D:2E:5D:73:7B
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 0196A465D2EE393AC7AA44341E49E18574CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 07:00:58 +0000
Manifest this update: Tue 06 May 2025 07:00:58 +0000
Manifest next update: Wed 07 May 2025 07:00:58 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: 6DNA94dia6Gp4JUym1RbH5gZJsfNXGxyYO3sQnAlvOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:d2:ee:39:3a:c7:aa:44:34:1e:49:e1:85:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: May 6 07:00:58 2025 GMT
Not After : May 7 07:00:58 2025 GMT
Subject: CN=19964a851b4f928e1e50889b6c47b54d2e5d737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:f2:55:b7:37:0b:fc:f5:8c:1f:a3:59:c0:
ce:b6:28:17:b2:5a:b6:95:3d:7a:9b:74:45:9d:2b:
ef:f9:a8:87:1e:03:7e:d7:31:0a:3d:cd:ad:4b:9c:
82:2e:07:49:8d:a9:fc:59:f0:b7:2c:6f:29:0f:0f:
d9:18:f5:25:06:2d:19:06:8a:94:e8:a3:b1:ab:35:
bd:7a:a8:3b:57:0b:40:67:bf:a8:a8:43:89:77:d8:
fa:9a:17:60:80:d8:c3:94:46:cb:d6:72:85:e7:4f:
40:6b:d0:11:58:61:0b:65:65:02:6c:ec:7e:54:a4:
a3:90:6a:0f:04:b5:d4:c8:b0:8f:91:de:11:35:fc:
ca:50:f9:bb:0b:3d:ed:40:88:92:c1:c4:62:59:e0:
05:da:f4:09:9c:4c:99:7f:bd:6c:ee:c6:2c:85:05:
11:54:de:1c:48:c3:65:d0:c0:2f:ea:61:50:f2:c8:
f2:8a:60:45:b8:ea:8f:a0:fb:93:4c:61:f0:af:0e:
e1:8d:78:a2:5a:11:69:98:30:cd:bf:7d:6a:9c:9d:
76:1a:ea:11:2a:92:ff:54:da:b3:c4:d9:d1:1a:b4:
e5:44:30:f6:f7:bf:80:7c:c5:17:00:f8:3c:90:5d:
67:8b:c9:c2:d9:d0:2c:9c:37:26:36:8e:c6:8e:b3:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:4A:85:1B:4F:92:8E:1E:50:88:9B:6C:47:B5:4D:2E:5D:73:7B
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:41:b0:26:a6:da:f3:f3:23:30:65:bf:dd:98:fb:aa:15:
77:db:0e:a8:ae:0e:dd:a1:e5:a1:7c:86:6f:31:2e:0b:5f:9b:
94:49:b6:62:4f:81:31:c4:43:ae:22:43:14:9c:6e:49:0d:fb:
73:1c:55:4e:a8:4c:1e:69:18:df:05:8b:5a:ce:2f:4c:af:d9:
e4:69:71:df:34:1f:92:6b:db:d5:ab:74:db:25:5d:70:cd:1b:
b6:35:be:04:53:34:7c:61:7d:42:86:63:bd:bc:bf:08:ac:28:
17:24:cb:9f:2c:73:2e:ce:5a:66:30:49:aa:19:68:6a:ff:85:
98:be:28:bd:ca:a3:65:1a:4a:91:09:fd:2b:31:80:5c:ea:0f:
c2:32:b7:0a:83:f1:90:5c:ba:63:d3:9e:b9:0e:67:1c:f7:98:
72:7f:95:e9:04:22:7d:b6:b1:c9:ef:ec:59:d9:99:09:00:b5:
1e:12:03:70:c8:1c:b6:50:58:74:02:de:c2:8d:d4:b8:63:dd:
30:43:f7:fa:22:ae:1d:49:fd:8e:ff:5f:83:b4:ab:d7:96:bd:
cf:70:2c:16:b4:11:c1:a4:ee:29:82:62:a7:a8:f9:44:ee:28:
a8:e4:5e:6c:94:39:ed:9b:b9:c8:8e:b1:53:6e:79:9c:26:7f:
66:3e:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:11:22 2025 by rpki-client