Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 5k0hvpQbQ8amC3jyE6XYV8zgZMxtAQD4Tvs27pkO4Q4=
Subject key identifier: E8:5D:7E:D1:C1:0B:DD:61:87:17:E8:31:2C:48:61:8D:58:56:E9:5D
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01969E2C6CC6621F0845219B3A64C43613DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1110
Signing time: Mon 05 May 2025 02:00:33 +0000
Manifest this update: Mon 05 May 2025 02:00:33 +0000
Manifest next update: Tue 06 May 2025 02:00:33 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: mM2mtQuwOSp+ULy/75YryPjWjF0fUCV87GG5lb06dTs=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:6c:c6:62:1f:08:45:21:9b:3a:64:c4:36:13:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: May 5 02:00:33 2025 GMT
Not After : May 6 02:00:33 2025 GMT
Subject: CN=e85d7ed1c10bdd618717e8312c48618d5856e95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:aa:2c:cc:c2:4b:34:17:76:9e:1c:81:69:
2b:af:99:7c:84:7a:c7:05:6d:2a:f1:18:7b:00:8e:
b9:f2:41:3e:12:46:40:0d:4c:ad:a1:8d:c0:e4:95:
f8:d4:8a:44:1c:fa:75:9b:0c:c1:74:b3:44:82:ea:
50:c3:fe:c9:91:15:e2:ed:09:b0:a2:ed:05:82:ea:
74:5b:ed:dc:ce:9a:5d:ee:c7:78:f9:a4:48:ab:a6:
e3:c1:20:11:0c:55:09:00:43:8b:b4:40:32:14:d6:
f9:fd:51:63:fe:9f:06:17:98:95:cf:60:41:85:f9:
d0:07:ab:fb:4c:b2:bf:ed:5a:1a:41:5b:48:c8:c1:
78:a3:38:a4:be:9f:1a:77:bc:2d:52:a5:45:99:8d:
6b:7d:e4:22:52:79:b7:73:da:ab:bd:86:06:ee:c8:
eb:81:d1:c3:d1:55:20:f6:94:b8:f8:0e:f0:7c:85:
a9:ce:62:10:e1:77:e6:42:ae:b5:40:c9:78:63:5d:
4a:4f:43:b7:8a:f0:c8:1c:ce:51:d9:3a:65:a8:97:
74:db:86:77:d7:31:a1:33:bd:a1:36:3b:ad:99:bd:
3d:30:80:ef:c3:bf:a5:e5:85:b3:3d:9d:f4:55:93:
02:c7:b7:02:0c:24:3b:40:e5:49:48:96:aa:40:3b:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:7E:D1:C1:0B:DD:61:87:17:E8:31:2C:48:61:8D:58:56:E9:5D
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d9:8e:10:2f:59:c2:18:69:e3:eb:b1:8e:e2:07:a0:cf:cf:
e8:87:73:7d:31:f3:31:94:8c:90:b5:30:96:a1:1b:96:2d:63:
af:21:e4:72:34:21:b4:f4:e0:40:ce:e1:ad:d3:0c:da:95:9d:
89:6d:38:1e:23:d0:04:a5:ab:9a:23:08:82:ef:d4:21:04:14:
9d:0d:47:91:da:ce:d9:7a:bb:e5:64:83:8c:47:ad:fb:2b:d1:
79:d1:71:be:94:13:5d:5d:d0:52:40:71:a6:a8:0c:42:07:25:
af:17:9e:d7:f8:f1:d7:46:5c:f4:45:45:f9:00:cb:31:1b:d4:
86:6f:4b:53:5b:2f:cd:fa:47:c5:0d:ee:a8:d4:6a:0b:97:62:
6d:60:4c:c6:1a:e8:ab:19:ce:93:2b:25:4e:f4:9f:73:84:27:
b9:2d:86:b8:98:ee:e1:cc:c4:86:3e:a6:74:9a:a1:fc:8c:3b:
fc:2b:bf:d9:f8:87:ee:95:ff:49:d8:7d:14:31:52:5f:2e:bc:
e0:e0:92:e8:a7:02:42:22:dc:bf:21:68:5a:ff:b3:aa:e1:10:
a3:62:28:53:cd:99:75:ee:29:70:ba:ad:32:b4:a0:28:6f:a0:
df:26:d8:69:7a:7e:1b:96:62:b3:8f:61:e0:2b:c1:3f:14:ad:
eb:0c:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:38 2025 by rpki-client