Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: xDGmYl9/tWSo44FhkQycrKOwjGYYD+8x/Na6l3p2Tes=
Subject key identifier: 7D:34:19:C9:B9:ED:16:1B:80:E0:33:25:8B:DB:39:C7:18:B2:8C:E9
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0196CB053357A1FA2AB86CC91B4320483F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 19:00:37 +0000
Manifest this update: Tue 13 May 2025 19:00:37 +0000
Manifest next update: Wed 14 May 2025 19:00:37 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: JlSfcISUhKpAdPTZp3Mw/8u4a8AFDXGrf9FO51VpdfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:33:57:a1:fa:2a:b8:6c:c9:1b:43:20:48:3f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: May 13 19:00:37 2025 GMT
Not After : May 14 19:00:37 2025 GMT
Subject: CN=7d3419c9b9ed161b80e033258bdb39c718b28ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:cc:0a:28:9a:ef:78:27:93:03:a2:01:50:
f6:60:d9:68:5a:f9:df:f1:64:29:6c:6e:4c:0f:11:
c1:02:7f:47:e5:e8:8d:01:b2:40:6b:32:0e:1d:af:
8f:56:27:9a:3b:83:b9:68:32:ed:c2:06:c3:d7:5c:
67:9c:3f:b7:f3:ca:a4:90:e6:43:3c:b5:2f:0b:7e:
4e:ec:a0:b1:d2:4d:54:87:ac:50:ec:b4:af:44:8b:
2e:a9:1c:56:97:a5:8b:3a:79:0d:55:0b:0d:fc:85:
b5:1a:cc:1b:c4:cb:29:0b:90:10:f9:55:37:69:6c:
d6:de:82:47:87:ce:e8:e8:e2:e9:29:80:17:b2:bc:
04:b9:15:4e:6c:41:2b:b7:92:f6:6a:c6:87:7b:e9:
d3:d8:cf:41:f8:77:4a:ed:d5:b3:cc:eb:0c:9c:97:
13:fe:6e:3c:63:89:62:14:bf:c1:b4:08:41:e5:61:
2d:bf:3f:d5:1e:52:63:8f:fb:80:c3:5e:ba:2c:e5:
9a:58:b6:3c:67:10:20:d2:3f:45:b5:9a:57:f8:9d:
87:6d:1b:2c:b4:92:ee:67:d5:e1:03:5a:72:bc:3c:
0b:34:b7:e4:39:64:6b:1c:95:4d:9a:87:ad:f6:52:
56:ce:e0:f9:34:de:75:52:66:80:43:be:7c:b3:56:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:19:C9:B9:ED:16:1B:80:E0:33:25:8B:DB:39:C7:18:B2:8C:E9
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:11:e5:43:bf:67:dd:58:1e:99:72:fc:0c:15:4a:25:11:fa:
c2:8b:98:1c:29:96:d5:26:b1:29:8b:b6:02:4e:17:54:42:0f:
26:d1:93:6e:f9:08:6f:99:aa:da:53:40:86:34:a2:31:e8:3f:
84:7a:95:ca:31:0d:a9:28:4f:3a:bb:04:dc:36:f9:55:4f:47:
8e:93:68:37:b4:5c:65:46:1f:f3:b9:d9:90:2c:e2:1e:32:bb:
8a:3b:15:4a:0b:35:07:f2:87:13:88:c2:b7:40:78:30:68:1b:
d7:a9:bd:72:09:e3:d1:3e:18:6a:23:f6:c0:15:7b:66:57:f0:
f6:24:2a:b3:86:c7:7a:9c:83:ca:47:ef:11:18:6f:bd:fd:c9:
d4:e3:85:8c:5d:14:43:7a:95:81:45:e9:c0:2d:bc:34:17:9c:
99:90:35:ed:79:fd:a9:78:6b:27:fb:a7:c5:19:95:9d:19:2c:
eb:1d:9f:e6:bc:f2:9d:69:bd:25:b9:9c:76:be:f7:70:75:4e:
96:de:b8:46:2f:80:c8:20:21:11:65:ae:57:9b:2f:dd:06:d3:
c7:12:a5:6f:56:5f:d9:cc:2d:c2:70:40:50:2a:3f:8e:00:5f:
83:6a:74:f0:72:03:60:e8:07:65:ae:6a:ba:aa:fc:62:87:cd:
c7:7b:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:43:20 2025 by rpki-client