Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: upkaoFXhvFgMv/UmDQkV/gVz40SWSkWRkZCZ6RMj53g=
Subject key identifier: 19:25:D2:4A:43:1D:D3:20:9E:82:E6:FD:F0:EC:DB:09:61:E1:87:06
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 0196B0A1029A7D25904E0E31958FE446DBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0B31
Signing time: Thu 08 May 2025 16:01:04 +0000
Manifest this update: Thu 08 May 2025 16:01:04 +0000
Manifest next update: Fri 09 May 2025 16:01:04 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: lXjrczmLlly/k72l+ZyIkqf2frwGfSliRo9KKLeshCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a1:02:9a:7d:25:90:4e:0e:31:95:8f:e4:46:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: May 8 16:01:04 2025 GMT
Not After : May 9 16:01:04 2025 GMT
Subject: CN=1925d24a431dd3209e82e6fdf0ecdb0961e18706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:a8:6e:83:7e:c6:78:86:b6:86:48:ee:ae:
ad:1e:f6:5c:73:5f:0b:33:d1:08:2f:37:20:1f:b4:
87:61:f6:65:d3:7e:8c:46:83:25:7d:f5:c7:c1:04:
88:4b:63:d3:d5:30:13:35:53:71:78:34:01:c8:34:
ce:cd:66:19:55:c5:4f:d4:8b:7d:5f:91:cc:f2:af:
fa:2c:51:93:97:1e:b6:de:a1:cc:2d:f6:c3:46:f1:
3e:a4:c9:66:da:b5:ba:ec:35:d9:04:dc:05:79:47:
d5:86:26:d8:c6:6e:44:15:8c:9e:a7:44:ff:dd:00:
4b:02:c9:a2:6a:05:06:a2:ff:7d:a3:6e:87:6a:85:
74:f5:46:e8:10:c5:88:29:b2:45:8d:47:bd:4b:1e:
36:15:4e:fe:39:5d:d9:46:87:1b:ba:4a:83:5a:3c:
c3:5e:cc:ba:cc:69:13:86:f7:6d:de:a1:79:e9:4e:
ac:f2:e9:45:0f:33:0d:d7:ac:1d:55:5b:07:71:df:
7c:de:aa:f9:f3:37:31:b4:fc:c3:4e:85:9f:cf:8e:
71:bd:7b:71:ef:a3:b1:57:d3:4e:fe:e2:e7:b0:bf:
75:3c:82:45:c7:f4:fc:c6:77:12:76:02:1a:e1:ce:
75:c5:24:e9:ed:50:e3:e3:1c:93:7b:2c:bb:69:f2:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:D2:4A:43:1D:D3:20:9E:82:E6:FD:F0:EC:DB:09:61:E1:87:06
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:98:29:77:49:ba:0e:e7:76:49:43:f5:3b:5b:ab:6e:89:d2:
3c:6d:9b:93:69:6c:fc:26:8a:48:e0:99:f4:0f:22:8c:61:69:
56:8d:38:6d:7b:da:82:89:12:ab:80:33:fe:5c:64:6b:95:61:
61:8e:fc:92:0c:1b:e6:ad:c0:9a:0c:cf:83:5f:a5:aa:7b:57:
d5:d6:3b:5e:a8:d7:62:5d:a3:bd:b2:0f:dc:d8:53:8d:10:c3:
51:27:92:9b:00:8b:85:c9:15:11:4b:64:4d:a9:cb:ae:b8:d1:
17:ee:54:5d:8d:0f:8b:d0:13:a1:c8:b4:5f:7f:bf:76:90:35:
50:6a:e2:0f:2e:b5:1f:6b:fa:fc:74:3d:e3:5a:47:ed:96:19:
33:0f:e5:bb:c1:3b:a8:a6:0e:57:4f:da:a2:f1:36:64:07:75:
1a:82:13:27:c9:c9:ea:57:e0:68:74:79:c0:2b:60:dd:06:89:
76:2a:63:25:a0:de:41:d6:39:40:d0:ae:bf:6b:32:32:45:d0:
ac:4a:fa:7c:51:33:af:07:74:d2:86:c4:c7:c3:0a:b7:b7:23:
56:ca:4e:5c:12:0b:e4:07:b8:32:20:9b:b6:14:f9:cc:bb:75:
35:6c:55:1d:93:57:72:18:35:6b:fc:21:15:7a:82:6e:48:33:
ef:13:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:06:35 2025 by rpki-client