Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: RRxGYDnwjRnzPCCqxuOIhh12IMWsVWSazMESaS3IEH8=
Subject key identifier: 9A:8B:C0:0E:78:2A:70:5B:05:E3:67:34:63:27:72:85:86:C5:B5:9E
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 0196CDCFB2246DB9717C239168DB4EDAEE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 086F
Signing time: Wed 14 May 2025 08:01:02 +0000
Manifest this update: Wed 14 May 2025 08:01:02 +0000
Manifest next update: Thu 15 May 2025 08:01:02 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: 3eOX2DI7FlQcGD5GjBkviAWbrV4UAwhUP1S13nv2PVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:b2:24:6d:b9:71:7c:23:91:68:db:4e:da:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: May 14 08:01:02 2025 GMT
Not After : May 15 08:01:02 2025 GMT
Subject: CN=9a8bc00e782a705b05e367346327728586c5b59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:ff:25:81:69:f7:24:15:45:1b:ca:f2:6f:
10:2a:55:e3:21:46:14:d3:f2:cd:fd:7c:cd:21:de:
24:d3:2f:c9:79:c0:9a:46:b1:15:5f:7c:e7:fa:18:
64:5b:d7:9d:5d:4b:61:0f:23:61:4b:34:ec:32:ed:
73:71:e2:18:77:f9:f2:51:e7:26:ef:45:61:b2:5a:
50:e7:82:71:b0:0b:ae:df:18:1a:e9:c1:29:e5:2a:
48:59:f1:6a:00:ab:fa:2b:f1:19:6c:8d:10:cd:23:
26:70:43:11:e4:c1:aa:c9:61:67:8b:bd:d5:31:f3:
09:ec:02:76:ec:92:f8:e1:02:3d:b9:fe:3a:34:ff:
52:b5:f0:f7:ab:6a:3d:a5:f8:ae:2d:00:08:c7:54:
04:5c:16:63:fe:19:4d:88:cb:db:2a:db:e1:77:07:
05:a4:8c:fa:ca:e4:8c:0b:66:9f:9d:79:0f:93:86:
c6:bf:54:75:d3:c3:02:72:9c:36:a1:63:b0:ac:38:
e7:06:a4:41:84:2a:9d:34:63:2b:a7:11:ad:0e:92:
11:93:da:15:2b:02:d9:32:56:bb:9a:c4:30:45:10:
6d:d7:bb:dc:52:ad:f1:2d:66:9a:95:5b:89:a7:36:
f3:c2:91:c9:5e:46:18:43:ef:23:3f:89:85:e2:c2:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:C0:0E:78:2A:70:5B:05:E3:67:34:63:27:72:85:86:C5:B5:9E
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:47:93:a9:1e:01:c9:49:ce:68:2a:fa:16:99:9c:76:c6:
c0:a7:2a:51:4d:bc:11:d7:c8:d8:0b:27:02:bc:86:f6:f9:69:
f8:e1:95:43:16:c0:f4:0f:1a:6e:72:6b:53:2a:6d:65:cc:1b:
69:2b:6a:0d:4e:b9:78:96:42:e2:71:88:71:2e:bd:cc:2e:82:
a1:fc:5f:ec:42:1d:eb:26:df:25:e6:c7:4f:bc:36:69:9f:a3:
bc:e2:5b:bc:9a:ce:26:63:d2:0d:c9:bc:99:28:5d:44:d5:5b:
9d:3f:42:f6:4f:82:6f:26:98:d5:02:25:28:53:d2:67:8b:ca:
30:bc:52:71:50:09:06:89:c6:ea:97:93:10:e6:7a:42:5a:51:
75:6b:49:7a:2d:6c:42:79:6e:cd:d1:88:25:8c:1e:fb:11:c0:
f0:06:73:0e:c3:dc:01:73:cf:4e:67:12:f9:d3:f0:4b:f0:6f:
7a:4d:e2:ad:10:0c:4c:b3:9f:ca:36:83:a4:c3:bc:dc:54:86:
97:02:87:c2:6d:75:f1:3a:bf:a7:b4:d0:94:85:ce:bc:48:fa:
31:b3:4e:ed:30:4a:bd:d3:dd:b9:c8:aa:9c:77:c5:c7:07:29:
d9:bf:6f:05:85:e7:ee:59:90:e4:41:d3:75:7c:ad:dc:86:a9:
ae:48:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:19:21 2025 by rpki-client