Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File: itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier: pkvbp2udscuNKHdUZNzXI06Q6UzvmctoIv6j8nI7J4s=
Subject key identifier: F6:4C:F0:DF:92:2B:27:EB:FC:7B:F1:B3:50:5C:7D:E4:8C:A5:89:D8
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 0196BA48C18F1618F13CBD9072B8138508AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number: 1261
Signing time: Sat 10 May 2025 13:00:52 +0000
Manifest this update: Sat 10 May 2025 13:00:52 +0000
Manifest next update: Sun 11 May 2025 13:00:52 +0000
Files and hashes: 1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=)
2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=)
3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: RNpf0Yk8UPEBD5+0dPXPiuFHgfyOZ/pkT650717NS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:c1:8f:16:18:f1:3c:bd:90:72:b8:13:85:08:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: May 10 13:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=f64cf0df922b27ebfc7bf1b3505c7de48ca589d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:ee:7d:cc:1f:69:ca:7e:5b:e9:8a:f3:03:
41:fb:7e:4b:26:ac:77:9f:ec:cb:92:78:d6:e3:6e:
fc:be:a5:0a:60:6e:8a:d4:f2:8d:c0:da:2a:b4:41:
6f:13:87:4a:e3:66:54:6c:03:9c:e3:64:62:72:dd:
90:e1:4e:6a:8c:ac:85:31:0d:8f:f2:ea:45:38:08:
e8:7b:64:a5:30:47:41:ea:1b:c6:30:82:3e:31:c8:
5b:c2:5e:05:98:3f:44:17:7e:62:3f:5a:38:73:ee:
54:88:d8:08:87:f5:b4:96:26:e8:d2:82:66:3b:de:
4e:b0:93:02:32:12:64:70:cd:f6:c5:22:60:8c:24:
8a:18:33:6d:db:12:67:a1:4e:74:28:31:a4:e5:3a:
65:e4:05:7a:2e:03:6a:0d:69:ba:ca:cc:5c:25:1a:
3e:5f:4b:fb:34:3a:6c:0e:ae:da:5e:ae:3d:8b:cb:
1a:97:b9:78:f8:dd:22:75:ed:bf:ac:97:39:69:35:
73:e8:50:83:d7:24:95:83:6a:34:4f:73:84:53:db:
33:c7:41:88:e8:1a:a1:de:7d:71:cd:52:9b:e5:5a:
c5:f1:08:01:f1:cd:39:1b:84:ba:e1:08:03:1e:01:
aa:05:bd:6d:dc:9c:e1:e3:20:72:1f:bb:cb:ee:eb:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:F0:DF:92:2B:27:EB:FC:7B:F1:B3:50:5C:7D:E4:8C:A5:89:D8
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d5:cf:31:b2:a2:eb:83:25:e5:70:fa:4c:af:4b:a6:9f:f4:
08:e7:a5:fc:ba:6f:7b:f8:8b:41:d7:c1:bf:b6:f5:d1:a9:3b:
a5:04:c0:5c:1e:35:5a:2e:79:da:03:b5:94:52:20:d4:14:25:
39:2d:5b:31:4e:e9:70:64:e0:98:ec:b9:82:93:ff:91:cd:0c:
2e:83:e6:47:31:a7:9a:cc:5c:f2:7c:43:a0:0a:0f:d7:dd:47:
34:d4:5e:bc:74:96:2f:97:b8:61:58:da:a5:a2:05:a2:4d:c9:
d3:16:8f:06:69:cf:79:a2:2a:f3:e0:07:6f:f0:00:9a:50:aa:
52:9e:f7:ba:c1:45:7b:29:ce:4e:60:7e:e1:25:89:9b:7f:e3:
39:6a:5e:d7:b8:e6:47:75:0d:a9:90:ea:f1:be:ce:23:44:7c:
88:c6:7b:09:f2:6c:38:d5:84:55:f5:e2:ce:9f:48:ae:60:e1:
a6:2a:e6:40:20:2e:a2:bc:42:96:c7:75:6c:be:12:20:3a:9d:
57:1b:0e:9c:61:e8:10:bd:10:4e:e4:90:04:9e:ff:34:34:8a:
19:bc:f1:5c:87:6a:85:dc:41:0e:55:26:49:f9:4c:41:d3:9c:
4e:f2:59:70:6b:7a:9c:bc:83:3b:2a:77:5d:0c:53:3f:01:44:
98:54:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:03:28 2025 by rpki-client