Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: CkJWaRmMPkX5nPtrM6N0E+2KVS/6tX3fv8x6E8ijS8U=
Subject key identifier: 07:89:E0:27:BF:1C:5F:FA:3B:E9:AF:35:30:66:FC:24:CE:6D:D9:4F
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 0196BCDBDCAB48F7ED1ADFD0C50728D35983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 06FA
Signing time: Sun 11 May 2025 01:00:47 +0000
Manifest this update: Sun 11 May 2025 01:00:47 +0000
Manifest next update: Mon 12 May 2025 01:00:47 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: s3nyC4ePlNdrXvrO5tTW2oJAZAAU49j1OB49HOZSbdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:dc:ab:48:f7:ed:1a:df:d0:c5:07:28:d3:59:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: May 11 01:00:47 2025 GMT
Not After : May 12 01:00:47 2025 GMT
Subject: CN=0789e027bf1c5ffa3be9af353066fc24ce6dd94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:ee:fc:30:d5:a2:ec:3d:b9:cc:70:3a:06:
71:fd:eb:e4:51:4c:1d:c2:1b:c1:95:47:1d:75:13:
ad:90:7b:d2:27:b8:6f:cd:c2:30:b4:bf:bf:e0:c5:
80:51:f2:34:e0:d2:52:de:20:57:6c:e3:53:2a:66:
4d:15:72:ae:91:07:2a:38:b0:f9:86:1f:cd:b6:0e:
27:31:c6:8d:7e:bb:1e:21:ce:8d:14:af:92:32:1e:
b1:39:29:77:b4:b2:cb:78:55:6f:93:03:0c:1e:34:
ef:9c:53:fb:52:2d:b7:0a:a4:77:9a:2f:49:05:aa:
b3:51:88:3b:80:a6:9e:97:ad:bb:8a:17:d8:bf:20:
04:a1:eb:3a:f0:57:8f:cc:a9:2c:57:8b:07:d0:04:
c4:23:dc:44:b3:b1:c0:eb:42:63:7d:c5:fc:ad:ca:
05:33:f5:85:de:4d:84:0b:5c:15:1c:26:f6:0b:98:
4f:d4:aa:81:54:cf:c8:2d:35:a3:9a:0b:45:aa:32:
a5:16:fb:5b:b2:93:05:c4:a3:01:21:b4:f5:0a:f5:
65:ae:52:a4:fa:fd:9e:77:5e:b6:f3:5c:78:2f:a5:
68:a7:98:bf:6b:84:4d:25:c9:01:b6:99:41:c9:4b:
1c:2a:bf:81:6f:c0:08:64:a0:74:74:ac:92:3e:8c:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:E0:27:BF:1C:5F:FA:3B:E9:AF:35:30:66:FC:24:CE:6D:D9:4F
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:d6:b2:24:18:ae:8d:bd:8b:a4:56:66:46:d0:49:81:a3:
4c:da:db:59:3b:e9:0e:b1:28:b9:96:17:31:7b:a5:52:c9:2e:
2a:01:5d:b0:f4:17:73:1a:92:bc:f2:4a:c2:62:f7:d9:15:77:
2c:d2:d6:6f:f9:b6:bd:93:54:b9:43:e5:0f:c3:e5:25:0d:41:
58:92:f5:8c:5c:17:78:8e:03:18:c3:8a:53:db:58:54:cb:c8:
e5:b3:4a:3b:a1:8b:50:5b:4c:54:43:19:69:55:96:42:01:44:
c0:46:a0:52:08:91:e1:5c:e1:5d:3f:a6:04:40:75:52:af:59:
9f:38:52:0e:09:98:ff:fa:9c:f4:95:b0:05:c1:49:9f:ba:51:
f6:2c:9c:2c:1c:97:9e:bc:1f:cc:1d:af:77:92:7a:b4:9d:8d:
3e:75:32:16:a7:ce:b5:57:8b:c1:ed:3c:5d:ee:95:bf:1b:7c:
3c:e0:7c:37:10:73:37:78:a1:cd:59:04:0a:93:09:1e:a6:7b:
b3:b7:af:5f:cf:3d:31:4e:d0:94:60:16:38:85:e2:c6:03:63:
c5:21:fc:00:26:28:17:bf:47:04:62:17:d3:f3:eb:2d:78:2f:
d4:92:0c:d2:27:d8:48:fd:e7:48:87:a6:7f:64:48:6b:47:2b:
6d:6f:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:49:43 2025 by rpki-client