Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: DCEGTHgZ5rfvG0wrdVsu+zDniy5zwNCHR1tf8HxEAtU=
Subject key identifier: 93:BE:89:1B:F4:F5:08:20:9F:00:29:0B:99:43:A4:62:AB:E9:6D:4F
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 0196C0B86E91DD63C70DF7453CCAABBEEF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0A0D
Signing time: Sun 11 May 2025 19:00:34 +0000
Manifest this update: Sun 11 May 2025 19:00:34 +0000
Manifest next update: Mon 12 May 2025 19:00:34 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: ETuKbfJFiVpNTojEO/8nGiStIRcJ2Ll1/vIbpeTa4d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:6e:91:dd:63:c7:0d:f7:45:3c:ca:ab:be:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: May 11 19:00:34 2025 GMT
Not After : May 12 19:00:34 2025 GMT
Subject: CN=93be891bf4f508209f00290b9943a462abe96d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:a9:ac:d2:12:4d:6f:dc:6f:e1:75:f6:f9:
f8:2d:19:b7:2f:5b:b5:55:e2:b5:f6:7c:44:48:80:
b2:ba:92:7b:28:9b:de:2e:c3:72:35:e1:4e:60:85:
55:3b:41:03:30:aa:70:4b:fa:66:94:89:de:bd:4f:
ce:8f:db:a3:26:90:ad:3b:76:05:9f:c1:a8:c6:6c:
fc:cf:d1:c8:83:7f:b6:ec:4b:0a:77:61:01:2c:eb:
a9:5f:0f:ab:37:65:2e:8d:13:f5:c3:aa:5c:c1:81:
f8:ea:8d:61:e8:a1:46:87:60:13:cf:41:ca:b1:93:
02:45:fc:d6:c6:be:3c:b6:5f:94:a1:ad:85:72:c1:
3f:02:3e:0e:47:8a:13:fa:85:7c:51:7a:ba:fa:b8:
f8:27:87:f3:f1:df:33:12:9d:ca:9f:10:2e:3d:72:
e0:e0:23:99:8c:8c:6b:51:1c:be:4a:01:1c:12:18:
ec:9f:4b:16:f7:a2:f5:36:70:40:7e:a5:a9:e6:3b:
e8:84:e7:03:74:41:c1:3a:47:47:c6:9e:6c:4f:5c:
25:dd:a9:a3:f8:e2:4f:63:fd:a7:74:08:2d:dc:fe:
0d:a7:b3:48:ce:dc:62:85:20:64:d4:3a:00:7b:8a:
d8:9d:c2:90:2b:bf:80:4a:a0:04:45:ff:11:c5:e6:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:89:1B:F4:F5:08:20:9F:00:29:0B:99:43:A4:62:AB:E9:6D:4F
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:2c:63:21:36:ee:ed:fb:d8:a7:55:0c:8d:9a:ef:53:72:
80:5e:62:df:56:1c:28:35:b9:36:62:a5:16:32:5f:49:27:2e:
12:40:d5:34:3e:a4:3c:cc:9b:ef:15:fb:fc:19:3a:a5:c1:44:
76:a8:80:ae:0d:52:32:2d:e0:fd:6d:5b:11:02:68:3c:21:39:
76:18:17:b4:7e:94:01:d5:fc:ba:95:3b:35:60:ff:5b:aa:a9:
3d:bd:95:8d:1f:02:a5:78:da:3d:eb:79:4d:db:71:9b:b7:da:
6b:67:95:81:09:97:19:63:3a:81:36:9b:68:08:bf:52:89:c7:
5e:29:d6:0f:62:15:5b:a5:37:99:77:ab:00:8a:bf:8b:2d:b6:
cc:db:75:15:d8:e7:10:c1:9e:0b:61:9c:b6:a1:aa:d0:6c:86:
fd:2a:2a:a7:75:10:3d:5f:b7:57:35:cf:c9:83:a1:35:0b:0c:
d2:2f:82:d3:18:1c:46:17:d0:27:95:ab:52:3d:ce:24:b7:b7:
cf:cf:d5:a6:fb:ed:ba:eb:be:c8:c9:4a:b5:f6:81:89:3d:a7:
4f:89:f2:1b:14:57:1e:dc:97:0a:5e:89:01:c3:01:60:19:f8:
01:84:b3:0a:24:d6:b4:e2:0e:23:70:99:a9:6a:e6:f1:7f:02:
4f:59:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:24:04 2025 by rpki-client