Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: P5uXXeK71ylDwkPAm7HPlNFydj/+/DJ0gv0W/xCw8qo=
Subject key identifier: 8C:08:ED:2A:8E:2D:8C:15:9C:68:2A:94:A8:E3:25:8C:A0:8A:86:8B
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0196BAED63DE1CE72C085AB14330BEB710C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 16:00:41 +0000
Manifest this update: Sat 10 May 2025 16:00:41 +0000
Manifest next update: Sun 11 May 2025 16:00:41 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: UntnK2w9El0/2Sv15jRvOKn9r1p8ecaSEJha95XQYXc=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:63:de:1c:e7:2c:08:5a:b1:43:30:be:b7:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: May 10 16:00:41 2025 GMT
Not After : May 11 16:00:41 2025 GMT
Subject: CN=8c08ed2a8e2d8c159c682a94a8e3258ca08a868b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:b7:e0:b7:48:fc:33:07:6a:70:48:23:7c:
62:1d:df:14:b7:20:73:db:5e:ee:29:16:37:f3:d8:
8e:15:c0:d9:49:6a:bb:15:a0:03:26:a3:df:1c:3c:
32:bc:9a:29:11:2f:b7:f6:04:0e:51:43:14:2a:77:
7f:23:b3:d6:b2:0e:03:88:0a:87:ff:63:ae:9e:4a:
c4:d4:81:9d:25:99:20:7b:f3:f6:53:18:80:b7:27:
82:a5:bd:5a:7d:d5:c5:0d:43:28:2d:9e:cd:ea:4d:
f7:8e:d7:67:57:34:96:d2:40:6a:af:fb:ef:87:d7:
38:62:91:fd:0c:1b:b6:c3:82:9e:75:9b:cf:b2:ff:
88:59:85:c4:ee:b1:31:ca:50:68:9e:91:53:82:d1:
21:e0:7c:82:28:cc:3c:ab:fa:33:c7:ef:e1:9a:c7:
68:8b:54:bc:70:38:5d:2f:4d:97:3e:f0:64:99:c5:
25:35:af:7b:df:d7:73:79:7e:1d:16:1d:dd:c3:d2:
48:2a:6f:41:67:2f:c2:be:7b:bb:7f:57:65:79:f9:
98:bd:cf:67:8a:a6:8d:73:00:8d:34:79:45:4b:d0:
3b:5b:97:97:ac:66:d1:66:de:37:7f:51:3a:ef:5a:
55:8d:1d:e8:1d:48:19:ef:bc:ab:d9:7d:fe:0b:a7:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:08:ED:2A:8E:2D:8C:15:9C:68:2A:94:A8:E3:25:8C:A0:8A:86:8B
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:a0:0b:55:55:59:e3:6c:58:52:33:4f:a6:c4:fd:22:10:
10:52:6f:cc:e3:ba:02:b8:c4:55:70:6a:35:16:16:4c:06:5f:
3e:5b:8a:17:32:9b:75:69:4c:d7:94:3b:24:b2:6f:ef:84:c0:
8a:b1:56:ab:35:fb:57:f0:7b:38:f5:07:96:e6:4d:47:7e:f7:
d3:6f:82:b1:6b:c4:fd:3c:e9:b1:fa:26:ab:fe:bd:64:2e:e3:
69:84:9a:b4:d3:c1:62:d0:d2:50:ae:69:5e:02:68:58:d1:7c:
78:fb:d5:92:30:99:e7:6d:30:84:c4:b3:d7:64:7d:b0:85:37:
73:6a:cc:5e:cd:61:ad:06:ca:ce:d8:be:c4:5c:0d:f3:2a:5c:
4e:0b:7e:7b:45:1d:31:87:74:4c:d1:b5:12:a7:eb:3c:b7:88:
55:c3:d7:1c:08:c8:18:19:81:89:c3:e2:20:16:86:f2:ef:f5:
34:a8:58:3e:1e:c6:36:83:65:73:31:8a:06:68:a1:23:ee:a4:
72:b8:dd:f8:9a:46:5e:a5:27:85:21:99:e8:f1:7e:7f:03:6e:
f6:5c:c6:e6:a1:99:31:61:d1:74:08:4d:01:55:83:2f:98:df:
05:94:f2:63:58:fc:ee:c8:18:54:b6:83:c9:ba:c6:33:1f:f0:
55:ec:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:17:17 2025 by rpki-client