Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: mT2S0OPtT8wcFhc+IJPdEoTCPeQDKHOqRwgnbH8OEco=
Subject key identifier: 24:53:06:80:01:EF:FD:22:91:A5:1A:E2:E0:89:B8:3D:38:50:30:12
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0196C0B8468ABF83FD8BC6CAC8BD105C0654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 19:00:24 +0000
Manifest this update: Sun 11 May 2025 19:00:24 +0000
Manifest next update: Mon 12 May 2025 19:00:24 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: BgpSLRuC3huVRGpvh9goCPn2mGa2v6ZoHfpRuyKnOnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:46:8a:bf:83:fd:8b:c6:ca:c8:bd:10:5c:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: May 11 19:00:24 2025 GMT
Not After : May 12 19:00:24 2025 GMT
Subject: CN=2453068001effd2291a51ae2e089b83d38503012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:85:f4:49:c2:93:cc:0d:ce:95:b5:61:91:
e5:db:19:63:19:6c:e3:18:93:df:18:e8:0b:83:d6:
10:67:1a:6e:de:0e:23:f5:ce:21:2e:2e:c9:c4:93:
d1:9a:9b:b7:60:2d:6b:39:da:6f:0d:cf:38:f2:e9:
2d:5f:4b:b0:a7:46:08:b8:50:c3:41:f4:a5:65:1b:
60:30:19:a5:b8:c1:06:58:10:c7:23:fd:b5:27:3f:
91:3c:30:9c:48:3f:2e:8e:82:04:38:64:72:4c:7f:
84:59:83:48:36:bf:3a:d7:b9:67:ba:46:2f:14:e7:
0d:93:f1:31:96:ba:a1:cb:52:66:50:aa:dd:1b:a1:
7e:d4:be:29:d6:21:95:0d:02:99:ae:51:11:93:1b:
10:18:08:a8:50:d1:e7:49:95:9b:2d:71:ed:e2:e7:
89:15:7f:5f:4c:d9:9b:62:6a:c8:8b:39:03:f4:a1:
3c:e5:f6:37:17:95:03:51:d3:28:95:26:64:40:35:
f6:2b:4b:00:a7:4a:99:c5:2b:2c:d6:75:3d:93:1e:
78:7f:5b:1d:01:c8:8b:26:40:a3:92:45:9e:a1:90:
5b:e3:79:aa:4e:b8:e4:a4:f3:8b:90:7a:f4:f5:ef:
a8:fc:a9:2b:eb:8e:7d:0f:20:26:14:8d:58:99:68:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:53:06:80:01:EF:FD:22:91:A5:1A:E2:E0:89:B8:3D:38:50:30:12
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:71:d3:b6:ea:f4:87:1b:e3:03:0f:04:e6:7b:bd:ca:aa:08:
6f:81:29:09:61:b2:7a:85:6c:11:33:a0:5d:67:9c:bc:67:cc:
2d:6a:50:55:f2:f4:9b:1c:06:df:cb:06:83:bc:94:04:01:4a:
4a:27:f8:16:9b:c9:9d:db:f9:d3:2c:7a:2a:52:1a:3b:3d:27:
22:39:c3:63:f0:ea:11:64:88:60:83:4a:bb:eb:74:d1:cd:a4:
c9:2e:aa:c5:93:12:df:fe:6e:14:4a:50:3f:16:1d:bb:81:ea:
1a:f9:0f:08:7f:96:a4:d4:9c:63:b1:d4:8f:84:7f:bd:ba:a6:
80:68:aa:3c:b8:8c:d3:6b:1f:f9:82:e6:52:c0:14:1c:a2:59:
e2:4d:ac:ee:5b:db:46:30:5f:d2:50:b0:e7:5f:e3:54:6b:ed:
c7:3c:96:6b:af:e9:a7:02:cf:ee:72:c0:c6:fa:7a:8b:36:3f:
12:41:cb:e8:21:59:59:e8:84:d1:b0:86:78:7c:40:be:51:40:
ef:c4:d2:40:91:11:fd:0e:16:67:f9:30:a1:a2:da:6b:4f:1b:
48:1f:1e:85:89:1e:1e:90:a0:91:c4:26:71:cc:1f:25:88:67:
86:60:77:97:76:87:ed:1b:48:86:9e:78:5f:61:1f:e4:06:d9:
3c:96:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:08:11 2025 by rpki-client