Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: 79DUCPsZkh/lu5QNmgcfOrGnqonQPcclI4sJZ/o+gmk=
Subject key identifier: 14:D4:68:7A:44:31:C6:BA:5E:02:93:A7:80:AD:A7:4F:51:1E:15:79
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0196B85A4DE5C680D2CB187DE95D1C4D2A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 1276
Signing time: Sat 10 May 2025 04:00:47 +0000
Manifest this update: Sat 10 May 2025 04:00:47 +0000
Manifest next update: Sun 11 May 2025 04:00:47 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: s0BP9qozhBFqY9b/cDrLPFUIcsUBhP3t3TosiT565eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:4d:e5:c6:80:d2:cb:18:7d:e9:5d:1c:4d:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: May 10 04:00:47 2025 GMT
Not After : May 11 04:00:47 2025 GMT
Subject: CN=14d4687a4431c6ba5e0293a780ada74f511e1579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:31:e4:cc:1f:38:29:a8:58:ab:42:28:28:
5d:74:49:3b:c9:e2:ef:0f:d5:aa:8f:36:ff:fb:aa:
cd:cd:bc:71:50:fb:3a:b6:8d:a7:dd:16:87:19:15:
7e:df:28:22:3e:c2:a1:cf:50:94:60:66:71:80:43:
9b:db:27:dd:08:56:9d:2d:13:dc:61:93:ee:85:fd:
22:71:8f:3b:94:be:95:ec:45:64:b0:b5:18:98:9d:
da:6d:30:19:74:0d:8d:14:f6:b2:0b:10:e1:ae:19:
b4:c6:6c:47:71:b5:f7:37:b7:fb:a2:15:07:ba:f4:
a7:68:ab:0d:e0:a4:7a:5d:7c:b7:8a:24:aa:a8:19:
8b:d5:31:bb:68:7e:74:97:b7:27:79:2c:c3:f5:8c:
e2:15:fa:18:bb:20:50:4a:6c:d6:d6:71:9c:6c:e1:
bc:88:0e:ae:b5:ba:17:79:2a:e7:11:66:e6:3b:52:
6f:03:14:23:b8:3b:b9:6c:34:64:31:e1:c4:b3:cb:
3d:d8:98:70:a2:a5:e0:87:6c:ef:d1:d8:32:ad:83:
63:cc:5b:65:3b:0f:80:2b:03:36:23:29:b3:44:39:
b8:7e:43:07:eb:b5:14:2f:99:08:66:fc:09:5d:81:
57:37:1b:4f:fc:90:ce:ae:97:91:eb:6c:4d:68:ca:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:68:7A:44:31:C6:BA:5E:02:93:A7:80:AD:A7:4F:51:1E:15:79
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a4:5f:f0:19:ff:a2:23:58:bd:4f:fc:b5:f1:84:fe:c4:1a:
1c:7e:f3:e0:14:7f:8a:d6:1b:11:8e:09:1e:58:1b:5b:d1:99:
4d:fa:3f:34:bf:80:3f:72:63:23:ae:4d:9e:97:be:f5:42:f6:
61:d2:d2:bb:6a:e2:98:f3:8e:4b:2f:fc:9c:36:6d:ee:8a:fa:
24:a9:df:78:39:68:92:6f:27:e8:b2:31:87:02:7b:5f:aa:82:
82:e2:5a:ef:b2:cb:b6:18:8a:f2:67:cc:06:15:88:1b:53:07:
76:f7:9d:54:71:8d:05:be:77:20:3b:23:07:ab:5f:e1:ef:d8:
45:ae:b3:e2:51:c7:21:e4:cd:b0:07:f4:bf:cc:76:1c:6d:dc:
78:1a:08:6c:56:ed:38:34:ef:ae:ed:82:3c:75:63:07:ac:fa:
58:b8:b2:9b:8a:c5:b6:c4:4e:ae:68:e8:31:bd:57:f4:95:0d:
8a:e7:c3:ba:dc:d9:2f:33:0b:74:5c:d0:04:f4:0b:75:be:bb:
52:0c:79:04:33:43:66:f0:ed:cb:06:44:29:e5:6a:91:03:a2:
09:d4:ce:1a:8d:4f:1f:c4:d1:6b:78:9e:ad:5f:be:67:02:e7:
e4:76:5c:b3:58:81:04:31:80:b0:4e:f3:0d:21:94:3d:d8:b1:
4f:6f:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:58:27 2025 by rpki-client