Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: +YlQ8G2Gj46gyzYb4CEy2O/gQJot2Ugo4VG2vFfnU6Q=
Subject key identifier: 0D:ED:0A:41:32:4B:A0:04:33:D1:A9:91:4A:64:A0:E3:FA:11:5D:66
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 0197B77C1ED164374B4990468277090A01D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1327
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: PIYTrOJnXPPDxIeB6LbH4yOZAVc5BB/nDoh0RGmioRg=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1e:d1:64:37:4b:49:90:46:82:77:09:0a:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=0ded0a41324ba00433d1a9914a64a0e3fa115d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:b9:3e:d8:4d:cf:8c:d4:9c:f8:bb:e1:5a:
15:52:90:fe:84:3e:18:4b:1d:63:75:9e:45:b3:68:
eb:1e:5d:e3:24:bc:d2:6c:ca:fa:be:44:70:a6:3b:
e9:ce:f3:c9:c2:bd:95:8f:9d:5b:f6:0e:94:d1:1c:
77:fc:0c:24:34:b5:12:fb:50:59:ae:50:d7:9d:e5:
6d:fe:28:96:5f:ea:a2:5d:b5:5c:f7:33:40:8a:e6:
6a:63:c3:5f:46:3d:dd:9c:9b:fe:9d:14:c5:05:7e:
19:44:0a:be:27:21:20:1f:2b:75:18:bc:a7:82:72:
00:61:27:51:f3:b8:1b:27:cc:2e:bd:41:6a:0a:d6:
ec:7d:af:a8:cf:26:9b:04:9f:16:84:cf:71:2e:b1:
cb:9b:c0:99:90:27:de:89:9c:60:4a:d8:f7:c3:77:
6c:a1:91:10:8c:a6:df:b5:29:22:4c:a4:e1:f2:6a:
20:7f:cd:df:0a:9a:51:15:bb:90:5e:92:8f:25:27:
de:7c:dd:96:0f:d7:cc:f5:53:66:17:a0:79:a1:4f:
54:26:f4:d7:ad:3f:c4:84:9f:3e:bd:6b:86:2b:d2:
72:a6:05:f6:3d:5c:13:14:7b:63:b3:4d:72:00:fa:
b7:1a:61:ac:a2:bf:dc:8e:b2:c6:0a:92:63:bc:8d:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:0A:41:32:4B:A0:04:33:D1:A9:91:4A:64:A0:E3:FA:11:5D:66
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5a:e4:90:54:91:e7:56:9a:cc:de:74:f3:68:fa:47:14:07:
f6:02:48:ed:fe:3b:46:2e:05:10:d7:f0:57:f0:b5:9c:27:a6:
21:b5:71:3f:48:ab:35:51:46:94:74:f2:13:33:9a:2c:e3:37:
a6:92:b8:bc:87:6a:63:ce:e6:f5:ec:31:83:6b:81:82:7d:74:
a6:00:b9:1a:8d:ab:f6:6d:fc:66:11:96:3c:89:cb:09:46:1b:
06:b5:1f:e6:81:e6:dd:e9:48:59:6b:f0:5a:19:c0:c8:57:47:
d9:8f:36:a5:8c:7f:31:7d:c4:09:4d:ac:16:fa:8e:fc:ab:59:
14:87:c5:76:7c:9e:c2:6e:e7:8c:71:77:35:8f:51:08:2e:c9:
bc:97:13:1e:a1:39:8f:be:81:3a:85:33:79:bb:a6:c9:5e:fd:
b7:96:7d:d6:56:95:d8:15:a9:71:05:f8:a1:0b:24:72:95:6d:
99:75:d6:ba:4b:de:7f:99:6a:63:08:b9:cb:fd:8f:d1:e8:fc:
95:66:dc:1f:b2:60:c4:27:b6:3d:68:fc:77:0d:d5:21:c6:83:
07:c4:5b:da:8e:5f:b9:7a:e5:94:da:3c:52:49:02:bc:62:59:
48:cb:ab:df:ec:8a:59:20:18:7e:cb:0d:bb:21:09:3d:a5:95:
27:f1:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:33 2025 by rpki-client