Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: rsnFADl8O4d4mWYzm8EQJKM8XV+CFHNZEgdptvxnDs4=
Subject key identifier: AF:F2:90:B0:2B:06:52:9D:3D:F7:C7:C4:FE:8F:57:F6:68:A3:F8:F0
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0196B10EAEAF64CBDEBCCC9A9DA9A88024E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 035C
Signing time: Thu 08 May 2025 18:00:51 +0000
Manifest this update: Thu 08 May 2025 18:00:51 +0000
Manifest next update: Fri 09 May 2025 18:00:51 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: kDntiPv9J2vZNVUirgkaLo/UEiAoEsj41oosRFEbS2w=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:ae:af:64:cb:de:bc:cc:9a:9d:a9:a8:80:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: May 8 18:00:51 2025 GMT
Not After : May 9 18:00:51 2025 GMT
Subject: CN=aff290b02b06529d3df7c7c4fe8f57f668a3f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:e9:dd:76:2c:d1:30:75:11:09:cb:23:ea:
5d:01:5b:f0:5b:b4:3f:b6:f2:fb:21:03:a4:01:73:
ae:da:f2:e6:c9:1a:e1:9c:e5:e0:e8:39:d2:09:2d:
f0:5f:f7:d0:21:99:7d:cc:88:91:1c:a6:26:74:06:
7f:c9:a3:16:96:17:7f:98:09:d6:08:1c:9a:c7:70:
d9:cb:0b:4d:36:2b:71:e8:66:0b:6b:d8:bf:ab:6c:
17:11:2a:7f:a6:51:d9:ef:c8:1d:0e:a2:ab:8c:80:
d7:15:41:f3:69:6b:62:25:4c:ab:63:04:60:4a:93:
63:cc:88:c7:49:09:c1:55:e2:96:a7:30:57:ab:fb:
5d:8a:8c:a9:a3:6e:d5:7f:87:65:03:fe:5f:44:80:
e5:0c:69:64:57:09:f6:68:e9:2b:c8:8c:2e:b5:c7:
3b:49:d1:16:02:22:f1:c1:13:d3:e5:e9:a7:6f:73:
e4:b3:85:9d:28:fd:dd:db:c7:30:89:a9:f4:c8:ae:
99:59:e2:20:42:16:fe:46:ce:72:6e:ab:b5:3d:1a:
43:5a:b6:8e:6e:e7:db:36:f9:c6:4a:0d:d2:e6:ca:
24:98:fd:09:91:58:ae:bc:db:1b:07:ca:ad:8c:74:
c0:9e:4d:a1:45:cf:22:9f:f3:0a:41:e7:99:0e:88:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:90:B0:2B:06:52:9D:3D:F7:C7:C4:FE:8F:57:F6:68:A3:F8:F0
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:cf:70:cd:d9:a4:ea:fd:8d:12:46:5e:b7:80:2e:fa:ad:
77:23:ec:2d:a9:31:bd:51:3a:69:3e:ab:34:7f:d3:ea:84:94:
7e:90:46:2e:b2:dd:fc:12:a4:67:03:28:9a:9b:a4:fe:a8:64:
35:c1:de:7d:cd:69:75:23:6d:08:14:76:76:fe:60:b6:07:51:
1b:48:81:c8:44:1d:74:f4:61:45:79:c1:4a:b8:49:b5:d8:15:
19:36:ad:be:e2:43:1e:1f:45:92:43:6a:ac:ba:62:d5:43:4a:
3c:90:d5:59:a9:c2:6d:68:a3:8b:ce:ad:63:1b:13:a3:90:b6:
3b:d3:27:d3:67:6f:6b:b0:41:f5:d9:0b:63:95:5e:30:27:f9:
c2:01:1c:1c:3c:f8:f2:27:22:06:28:eb:3f:39:33:c4:8d:c6:
c0:7a:02:9b:58:fa:24:9c:40:d6:54:a6:d7:40:a1:6e:c1:20:
72:f0:60:7e:bb:85:bf:18:d3:16:6a:c0:44:73:99:b5:85:69:
33:07:18:0e:8c:3b:20:e0:b6:0a:08:69:62:db:cf:96:c1:6a:
a9:d3:9e:b3:84:fa:11:1d:c0:84:e0:b7:49:ab:5f:eb:42:bd:
7c:1c:c6:73:3f:79:a2:42:5d:1a:5c:67:7c:da:e3:78:c4:20:
8b:7f:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:47 2025 by rpki-client