Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: frhIsEXUThY/uU1Y298uuXVP3GvJcNmSKNgMm83QoBo=
Subject key identifier: EC:E5:3A:DD:D1:00:31:C3:D2:27:2C:8B:FA:AD:83:6E:D8:D7:DE:FE
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 0196C2390866C23937D296D0E161C89E0D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 0F7F
Signing time: Mon 12 May 2025 02:00:39 +0000
Manifest this update: Mon 12 May 2025 02:00:39 +0000
Manifest next update: Tue 13 May 2025 02:00:39 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: KHlBeSNu6MNI6yvV7I4GS42M33kE5A3KoHRyFr6/OK0=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:08:66:c2:39:37:d2:96:d0:e1:61:c8:9e:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: May 12 02:00:39 2025 GMT
Not After : May 13 02:00:39 2025 GMT
Subject: CN=ece53addd10031c3d2272c8bfaad836ed8d7defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:b7:7b:46:14:0b:bb:d5:e1:71:8d:94:d8:
c0:57:1c:8a:31:a8:e3:60:bd:5c:63:16:fc:9c:2d:
e1:80:ca:23:33:f3:74:87:62:bf:1a:c3:be:3f:90:
b1:50:47:da:e5:ae:86:ae:0e:0f:c2:7a:c5:61:31:
77:fc:63:07:ab:d9:eb:11:45:e0:89:50:70:57:95:
83:3a:57:73:74:a5:7e:24:a1:84:44:dd:72:7e:36:
04:fa:e0:06:31:1c:f8:5a:5f:a8:f3:25:3f:89:8f:
da:04:3e:fc:68:b1:a3:63:4f:d5:82:49:dc:a0:4b:
1c:fb:f5:5f:8e:c6:d3:58:9a:a4:e2:5a:d9:53:cc:
ca:48:cf:84:11:b1:fe:b1:5e:82:7e:8b:a7:9a:98:
19:18:e7:cf:2d:87:53:f4:61:e7:3a:93:4a:01:d8:
7a:9f:94:fc:59:aa:4c:14:ab:eb:1e:94:f3:8f:ca:
bf:87:97:f4:82:35:03:9e:c1:e3:9e:e5:f2:3c:f3:
c7:dd:3b:35:12:20:6c:1f:83:cb:3c:11:56:ac:71:
2f:90:c1:c7:95:12:0f:48:fd:b1:eb:7c:e7:a1:3a:
74:20:40:fd:6d:b3:1c:20:98:19:6d:fb:ee:81:40:
21:74:bd:c3:6a:61:80:93:6f:a9:7a:dd:ef:70:cd:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:3A:DD:D1:00:31:C3:D2:27:2C:8B:FA:AD:83:6E:D8:D7:DE:FE
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4c:4d:1a:ee:33:72:bf:b5:cc:f6:97:16:44:6e:64:3a:e0:
f5:75:29:5d:19:89:39:68:da:7b:54:02:98:34:a5:22:13:aa:
b6:93:c5:85:2a:72:c9:d8:72:42:49:73:20:24:3a:b9:70:6e:
46:92:26:37:f1:60:37:31:99:6c:17:73:c7:c3:58:d2:ce:ad:
ad:44:1b:18:c5:3c:b4:79:4a:24:c6:aa:df:61:69:0f:2d:74:
28:d4:03:ca:b5:48:6f:fa:21:a4:c4:77:e6:60:ac:12:97:e5:
a9:24:5a:50:41:dc:c5:b4:d5:a5:c3:a5:c1:9e:cc:8f:e4:53:
1d:be:21:66:bc:47:00:fb:04:1d:e4:f5:f2:c4:88:55:4c:d3:
d8:9d:73:5a:49:07:fb:9a:1d:ab:5f:d9:12:a0:c7:f0:e4:95:
2e:aa:41:86:58:12:31:95:9e:78:d4:00:3a:32:95:df:2d:26:
2c:26:24:8e:63:51:b3:fa:7d:4b:8f:51:88:5b:81:6d:dd:b4:
75:6d:be:fa:46:ee:e3:67:9a:f4:3a:c6:3a:2b:82:38:59:47:
9f:97:fa:d0:2f:78:c6:f1:d4:4a:2f:b4:3c:28:bb:d7:00:97:
0f:a2:7f:51:5d:fa:43:bc:30:68:1a:c9:cf:bd:39:73:07:c0:
5f:67:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:49 2025 by rpki-client