Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: fEwFKqddZ4sYfkVJnVoUdl1L56m1Z4OhwQ2mfckqHBk=
Subject key identifier: E7:55:DD:57:3F:10:65:5D:A3:BE:4C:EB:B6:3F:0C:B4:C9:D4:D1:73
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019656B7DACE48788ACC1D9D047C404F4EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 03C2
Signing time: Mon 21 Apr 2025 05:00:11 +0000
Manifest this update: Mon 21 Apr 2025 05:00:11 +0000
Manifest next update: Tue 22 Apr 2025 05:00:11 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: ebcOG5d+HW1Ninb7wRwtlHCEfklMx06KGuhTAweUUKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:da:ce:48:78:8a:cc:1d:9d:04:7c:40:4f:4e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Apr 21 05:00:11 2025 GMT
Not After : Apr 22 05:00:11 2025 GMT
Subject: CN=e755dd573f10655da3be4cebb63f0cb4c9d4d173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:95:0c:02:32:99:1c:e7:44:2b:bc:13:fb:
78:4f:21:64:68:ea:10:90:3e:cd:d4:ab:7d:e7:29:
2d:1c:11:6e:72:40:ec:21:19:02:0f:e5:27:80:3a:
e1:22:c6:7c:98:a2:a7:cd:8e:74:e4:27:58:b9:49:
66:8d:a4:7b:74:48:be:b4:0d:e8:ba:1a:1e:f8:93:
8f:7f:8e:f1:88:6d:cb:87:29:2a:97:f1:24:da:b3:
0b:4c:f5:ec:78:fd:39:73:ca:07:15:2b:44:68:ea:
00:dc:61:8e:06:c8:bd:1e:27:f8:ad:22:2b:87:d8:
3d:ce:7f:1b:9b:1f:b0:df:b0:4d:fe:56:bd:4f:4d:
e9:64:ea:20:25:8b:7a:68:e8:1a:f0:62:c5:f0:75:
23:a6:71:4a:49:95:01:f4:8c:cc:68:54:e1:7b:2f:
30:2e:41:d7:10:b5:c6:de:ed:42:7a:9f:dd:4b:3f:
d8:c7:49:a9:8c:af:ea:0f:f2:fd:1f:ce:8d:48:6e:
f0:cb:5f:be:35:c5:02:ea:2e:a3:ca:50:36:6c:1c:
ef:de:7d:50:33:55:ac:50:33:4c:67:b5:95:ac:20:
dd:66:48:d3:12:73:9a:c6:16:9d:fa:2c:a2:db:9e:
1c:f3:cf:4b:09:af:42:17:11:ba:af:8c:59:64:23:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:DD:57:3F:10:65:5D:A3:BE:4C:EB:B6:3F:0C:B4:C9:D4:D1:73
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:94:a4:1c:f4:37:aa:40:c6:19:d5:7e:4b:b6:97:d2:18:
ef:8a:99:31:38:90:10:2b:55:f2:25:e5:94:25:ba:b4:03:ec:
71:c9:d4:d8:90:72:1d:66:eb:de:f3:45:bd:98:e4:24:9d:32:
56:bd:54:c4:a7:ec:4d:bc:dd:2f:68:d8:ef:8a:00:e2:d3:a5:
4a:05:0f:a3:89:86:ac:d2:c8:c5:57:c0:72:6c:5b:dd:c2:10:
d4:33:06:5f:74:03:bb:a5:cc:55:ba:b9:5b:ee:73:5d:1d:eb:
55:17:18:c4:2f:eb:5b:17:a0:f0:e7:b7:af:47:a0:a1:2d:43:
5c:42:8b:3b:e9:ad:f2:fe:b7:d8:b4:8c:b7:a1:44:15:a4:6e:
d2:7d:fc:29:61:61:d7:6c:ea:4e:6d:dd:87:de:e5:40:b8:06:
a5:6b:fa:bc:b1:43:15:1d:5b:e4:06:b8:06:79:92:f3:7e:a1:
1f:45:8b:50:e0:6b:61:8e:6f:06:17:a5:fe:54:f2:bf:82:f6:
08:92:79:e6:6a:89:89:47:bc:af:82:51:28:ef:10:13:85:80:
64:f9:ca:2c:00:21:e2:4b:30:2a:3d:1f:54:ee:ff:e1:cc:65:
e2:4c:c4:33:3e:e0:30:eb:ae:77:ae:76:7b:2f:27:7f:16:23:
ba:3b:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:33 2025 by rpki-client