Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: YcePGNG/A0W3ZkB6beI39T7LkSJ7GpFnzM4VlNXetms=
Subject key identifier: 7B:75:FD:60:E8:5B:12:F7:FF:32:B4:76:D9:0A:4D:29:20:22:0C:B8
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 0196C23939D5E98237CEB5CD81E3183FC15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 0623
Signing time: Mon 12 May 2025 02:00:52 +0000
Manifest this update: Mon 12 May 2025 02:00:52 +0000
Manifest next update: Tue 13 May 2025 02:00:52 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: CEa3cfo2RBvO/EIbBku3UX+9OLGf0xu1KY5t8xzX9pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:39:d5:e9:82:37:ce:b5:cd:81:e3:18:3f:c1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: May 12 02:00:52 2025 GMT
Not After : May 13 02:00:52 2025 GMT
Subject: CN=7b75fd60e85b12f7ff32b476d90a4d2920220cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:81:d8:68:b0:46:a2:d4:2b:a4:f8:06:8b:
44:e6:18:63:cc:b2:a1:9a:72:36:0f:ad:c3:9d:6d:
3a:85:58:a8:ef:d2:87:01:34:03:7c:ed:a0:a4:5b:
d4:6b:b7:4b:b8:4b:50:6a:e6:aa:33:e7:04:26:f6:
d4:f2:ad:78:94:17:62:20:b6:17:e3:4d:e7:d1:72:
29:86:01:44:fe:ae:33:67:3a:42:fa:71:2c:3c:f1:
7d:91:4d:f3:fe:10:bc:57:ab:a0:5f:13:7f:e5:54:
d0:8b:ec:c4:e2:aa:87:a8:87:d3:4d:70:b5:4c:08:
11:ab:65:ac:0c:dd:01:80:96:83:d2:ad:ba:ae:c9:
dd:93:a3:f5:5a:6c:7d:1f:58:3d:a1:c6:1a:38:ec:
30:bb:ab:09:da:30:d3:09:99:54:28:ca:e8:62:5f:
e2:1b:18:b4:1a:65:fc:32:4f:34:28:24:75:38:03:
a8:2b:58:4c:83:a3:2b:d0:22:5e:ab:af:b8:8a:b9:
3e:74:71:86:65:ab:1f:e3:0c:9e:16:95:58:58:0a:
5b:89:87:56:32:0d:7c:9a:2b:f5:31:55:3e:04:f3:
fb:da:b9:63:39:06:e8:89:6a:87:f1:2c:a8:55:4d:
27:b6:48:b8:ee:7c:7b:3c:94:5d:f2:91:c4:17:1a:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:FD:60:E8:5B:12:F7:FF:32:B4:76:D9:0A:4D:29:20:22:0C:B8
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:ae:6a:6b:e7:49:6e:ae:27:03:3b:1b:68:df:78:ec:c7:
6d:48:80:0c:23:db:61:65:b9:a4:b1:2e:b8:ff:e9:00:1a:19:
3b:84:3a:25:92:fc:af:e5:5a:c4:7c:7b:42:55:53:ff:f2:17:
e4:82:55:98:ff:91:76:2d:4f:80:86:2d:c6:0d:99:b5:06:7a:
16:34:49:dd:a1:6e:f9:6f:2f:9e:37:e4:84:44:0f:7f:7c:97:
d8:44:7a:d2:db:d7:fd:24:12:a4:66:de:a5:eb:c2:79:11:34:
7e:08:55:e9:f2:10:35:89:2b:b9:f4:f1:3e:4a:47:43:79:b5:
93:ed:3e:fd:3a:5e:19:05:60:79:55:f0:8c:f7:c8:62:e7:c8:
ff:51:87:5c:31:6d:87:12:4e:b9:18:4e:00:78:4d:ab:19:10:
c0:7a:94:86:80:00:2c:6a:52:43:9e:a7:20:c7:54:d8:8c:8c:
08:70:7d:f3:b5:43:38:c4:83:3e:25:a2:7f:d6:e9:a9:bc:03:
10:56:53:5c:cd:02:ec:35:13:d7:d8:b5:51:bc:a5:a2:1e:31:
fb:71:d2:06:12:2f:ef:39:33:ef:19:af:0b:d0:2f:17:94:2d:
7b:43:22:aa:a3:cc:ca:89:8e:06:68:bb:21:e0:a0:14:e0:e4:
ac:c9:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:54:32 2025 by rpki-client