Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: dqqvliHN5/VSJUdM31mmDxuIRnauUzlS7j79WtZYHfI=
Subject key identifier: 15:96:3E:11:09:CD:1D:AA:E2:B3:84:A0:1B:87:12:21:21:ED:0F:C7
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 0196B7B5967501AA6297625EB4C396666E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 0601
Signing time: Sat 10 May 2025 01:00:53 +0000
Manifest this update: Sat 10 May 2025 01:00:53 +0000
Manifest next update: Sun 11 May 2025 01:00:53 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: Y+ZZ+hNnwGeW5cDoGX7figghiXqJ5GeudLYWvkWCt+k=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:96:75:01:aa:62:97:62:5e:b4:c3:96:66:6e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: May 10 01:00:53 2025 GMT
Not After : May 11 01:00:53 2025 GMT
Subject: CN=15963e1109cd1daae2b384a01b87122121ed0fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:3e:1e:68:f1:60:31:b4:72:d4:f0:4e:cc:
1d:f1:b7:2b:9d:b3:c4:e1:59:30:fc:17:e1:34:98:
0a:29:1a:26:ce:fc:b4:e1:71:e4:58:3a:3d:51:b4:
6d:d2:2d:1c:7a:86:cf:af:5d:c3:f4:0f:42:c9:12:
34:04:e7:4e:a7:14:96:49:2c:3b:93:41:e0:eb:46:
ce:f0:f4:18:fc:2f:fe:e9:e6:48:f1:52:09:33:b8:
e5:11:46:05:fe:43:67:9e:58:f5:88:15:f3:8a:cd:
25:85:cd:f2:ca:74:1b:ff:53:1a:46:e5:f8:2d:02:
2a:78:eb:1a:0f:76:b8:5e:ab:22:19:27:37:6c:c4:
61:6c:c0:7e:d5:3b:5f:fb:88:a4:2a:58:75:72:fe:
cd:cd:4f:ff:c6:63:51:34:12:d1:eb:bd:fe:76:28:
cf:5f:22:a1:27:17:09:5e:58:9c:a5:f6:4d:c3:bb:
ff:37:c8:91:c8:0f:52:38:6f:2c:19:14:08:bf:15:
1c:6f:e0:9d:7a:83:b5:93:6f:ae:66:f6:6a:dd:94:
ef:9d:72:12:3f:5d:39:2a:d4:5a:39:bb:80:f5:d0:
fe:a6:1a:30:d2:3d:f1:10:4e:78:27:c6:94:d2:52:
55:72:86:47:ab:96:dd:89:b1:3b:99:3c:45:28:6d:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:3E:11:09:CD:1D:AA:E2:B3:84:A0:1B:87:12:21:21:ED:0F:C7
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:61:12:fd:b4:24:5f:e3:97:9c:62:1d:f9:9f:80:5a:a7:cc:
ee:97:a2:44:76:0d:e4:2c:a5:fb:ba:b1:96:28:f0:13:db:50:
7d:b9:e7:6d:df:d1:d4:db:70:91:60:db:5c:1a:43:bf:63:b5:
37:49:7a:a3:33:cf:31:c0:7d:3a:af:98:5f:4f:b6:1c:ef:3b:
61:b7:47:2a:56:09:50:4a:a9:50:ee:17:72:9e:9d:c7:2b:37:
58:bf:c7:3e:99:cc:98:7c:fe:2d:72:04:e7:19:1e:3d:2c:08:
8e:25:40:2b:c2:3d:fd:df:7a:7c:fa:a1:93:e4:2c:b0:6f:9d:
9b:9b:3e:70:9c:bb:50:9b:5a:fc:54:65:30:c1:1e:99:8d:5c:
03:b6:1e:13:09:04:5d:fe:f0:53:89:e5:de:39:f8:67:b3:38:
2f:dd:cb:f3:84:1d:71:42:2f:0e:7b:fa:f9:32:ee:7e:74:d4:
02:fa:47:79:4e:1a:f7:24:10:e0:f2:85:b8:ae:67:02:51:fa:
9e:06:f5:c1:51:1b:01:c1:19:76:0f:33:f1:a2:77:a1:ef:cc:
8a:c2:95:3f:d9:73:ec:cd:64:e3:1b:c8:ed:92:5b:bd:24:a2:
8d:27:d8:3a:43:6a:d4:69:f0:fc:c8:41:55:fa:38:96:21:62:
e4:fd:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:55:41 2025 by rpki-client