Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: TftKvx6w6tl1F3Nwh9xSTqP5q7b0delA79h3QQYcg7c=
Subject key identifier: D5:52:66:19:C0:63:53:76:02:0E:EF:5D:D7:F8:AB:29:6A:59:14:98
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 01969E6321C174F496742E08F2C814178FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 031A
Signing time: Mon 05 May 2025 03:00:18 +0000
Manifest this update: Mon 05 May 2025 03:00:18 +0000
Manifest next update: Tue 06 May 2025 03:00:18 +0000
Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: MQ7ag69NKpexmj5saPPtJDL6452R3wITkJCW0ga7Bwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:21:c1:74:f4:96:74:2e:08:f2:c8:14:17:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: May 5 03:00:18 2025 GMT
Not After : May 6 03:00:18 2025 GMT
Subject: CN=d5526619c0635376020eef5dd7f8ab296a591498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:13:e8:7f:09:79:88:3f:b2:ad:67:e1:c2:88:
17:62:fc:b3:5d:52:8c:ac:50:a2:26:5f:dd:03:95:
95:81:ae:69:87:01:ad:69:f5:84:3d:e4:56:17:8e:
9d:ed:81:af:96:dd:88:57:64:7e:6c:48:bc:38:e4:
ac:bb:4c:ad:0b:fe:03:da:b5:c7:54:67:dd:94:84:
a4:8f:ba:88:2f:02:22:7a:d8:1d:e2:2c:fa:41:35:
a1:5b:8b:7e:32:60:c1:3a:6c:87:bf:02:dd:d6:e2:
44:9a:75:c8:a2:71:e6:5a:60:03:a4:b2:bf:b6:c1:
d5:38:4e:7e:9d:94:60:14:94:32:9a:0c:9d:ae:1b:
20:d3:01:dc:a4:74:9a:38:94:e0:87:3a:41:71:fb:
aa:16:12:cb:85:f5:0e:6e:46:94:69:37:58:71:47:
ab:0a:94:22:67:e6:93:78:bb:1e:6e:89:fe:8f:b7:
ca:6e:bf:da:b8:37:bd:a9:fb:a6:e9:bd:71:71:5d:
20:d3:2e:ac:0a:6a:08:8c:88:fe:25:46:e2:0d:0e:
11:ce:bf:b3:4b:8e:f1:98:e6:f1:cc:9e:70:75:b7:
39:f8:47:c6:8d:f3:a3:b1:15:21:3b:3b:ef:9a:41:
37:39:10:f7:a1:6f:07:51:a3:65:46:18:fb:be:26:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:66:19:C0:63:53:76:02:0E:EF:5D:D7:F8:AB:29:6A:59:14:98
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:c1:c6:83:d6:33:4a:fe:c2:e6:17:9a:35:09:bb:7b:8f:
99:19:de:c4:a6:b5:b0:d5:93:b8:83:10:3d:00:7e:65:d2:14:
1f:6c:09:4a:ee:3d:c3:c7:4c:8e:b1:b0:b2:93:7c:84:4e:64:
8b:8b:bf:8b:ef:e6:02:fb:b2:98:64:85:90:89:e1:9f:eb:19:
36:6b:cd:b5:30:9a:ae:83:a1:07:e0:98:5b:35:ea:aa:31:75:
61:38:6c:77:c3:e6:12:ab:0c:3c:39:df:63:91:da:d8:54:fa:
88:de:e8:9b:59:c7:f5:3d:50:68:84:40:8b:e0:56:8a:c5:ec:
85:16:1c:19:e6:b2:b2:8e:5c:5f:38:10:f6:5f:1a:73:94:dd:
d3:c7:ef:d7:24:6b:9c:fd:86:97:0b:44:9e:20:23:08:d1:3a:
5a:63:bf:8f:94:70:4a:9a:22:82:c3:90:d0:1a:03:41:f4:80:
c4:fd:ed:60:dd:fa:68:d8:f5:44:c5:a6:50:3f:84:9c:3f:19:
d7:82:65:84:be:3d:98:93:0e:61:c1:b0:13:56:f3:b2:d1:0c:
d5:ff:e0:71:54:4f:03:ea:3e:5f:49:3c:4f:59:71:53:ce:96:
55:b2:33:5a:50:20:92:63:3f:57:51:21:6e:b9:20:11:63:60:
2c:b6:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:21 2025 by rpki-client