Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: 768ePq/nB4hzINpRp4KlxYUBSIT5SrYCxeoB765lnvE=
Subject key identifier: 4F:6B:00:79:00:C4:D1:E0:24:22:D5:0D:6E:E6:83:25:CA:7C:A0:F8
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 01965500C9AE2E4EE4891DE45B36253FCF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 02F4
Signing time: Sun 20 Apr 2025 21:00:37 +0000
Manifest this update: Sun 20 Apr 2025 21:00:37 +0000
Manifest next update: Mon 21 Apr 2025 21:00:37 +0000
Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: B7VH+J5KP8xPzPYvYFzy9hpEr2cMXLYh76hVeccCx6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c9:ae:2e:4e:e4:89:1d:e4:5b:36:25:3f:cf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Apr 20 21:00:37 2025 GMT
Not After : Apr 21 21:00:37 2025 GMT
Subject: CN=4f6b007900c4d1e02422d50d6ee68325ca7ca0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:cf:5c:30:ea:c5:40:94:06:e2:fa:19:80:
22:10:ef:85:6c:04:e3:78:17:04:87:3b:14:51:4b:
5c:9f:2b:c3:33:ae:98:dd:1a:ed:62:3a:cb:ac:3c:
1d:bb:6c:e6:e8:9d:dc:5a:09:fd:f1:fb:ab:3e:1b:
c9:db:e6:30:c4:66:50:34:34:56:85:09:9e:9c:0c:
a3:e7:7e:35:cf:73:58:e7:c8:bb:3f:b7:28:bc:d5:
51:65:54:3d:2e:da:51:7f:f3:d4:55:0e:72:bc:f3:
c9:31:04:aa:a7:09:42:73:a8:57:9e:4f:c7:c5:1c:
01:9c:4a:74:c8:bc:d7:70:14:91:e0:10:b4:f0:27:
a1:32:71:50:9f:d5:e3:79:9b:19:39:dd:e5:b0:ea:
f4:69:e7:f7:20:8d:7f:a9:06:e1:48:7e:22:92:dd:
8b:44:ef:32:aa:ce:f0:ff:9a:99:8a:f2:d5:e0:a9:
bf:a4:e1:a3:93:5e:ac:a1:da:4f:e5:0f:35:00:14:
c9:14:63:c4:04:78:ea:99:21:43:79:f1:a0:35:0b:
0f:bb:8f:60:77:a5:37:cc:a8:4e:d2:68:42:d3:78:
2e:82:93:a4:9b:d0:79:0b:d5:f0:22:bc:68:f2:84:
e4:85:18:fb:58:db:22:bf:c5:de:a2:6a:29:25:b4:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:00:79:00:C4:D1:E0:24:22:D5:0D:6E:E6:83:25:CA:7C:A0:F8
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:03:29:d3:7d:0f:4d:37:5c:96:8f:d1:7c:11:e2:2b:6f:
7b:1f:c3:d5:4a:26:1d:e8:59:ff:71:c1:36:3b:50:c5:3a:56:
a7:06:fc:da:be:94:b3:56:96:43:f6:82:c9:c0:07:c4:62:1b:
ec:c8:59:f0:db:3c:95:1b:fd:1f:c0:95:d7:ed:a7:3f:70:8e:
7a:77:19:8d:2a:0b:17:77:8f:e1:a9:2d:03:20:ae:88:e2:59:
19:12:f4:b7:f7:d6:94:cd:9d:e0:b4:53:58:cc:4f:5b:a8:ad:
8a:8c:80:13:6b:21:d2:5f:bf:8e:db:59:d8:9d:3f:ee:2b:83:
84:d6:cb:2a:8c:66:ff:1a:12:20:5f:e6:0d:e3:e8:42:dd:94:
f0:e9:71:a7:a1:d0:a6:be:ed:b6:f3:6a:7d:59:b7:3f:a2:7e:
a2:0b:74:cc:8b:86:14:df:16:b4:d4:85:d7:e7:f7:1f:63:33:
74:33:90:12:c5:ec:ed:7e:89:27:5b:f6:7b:ff:f5:f8:38:80:
1d:6f:75:c0:46:2b:f0:95:d2:9b:3e:ff:6d:fa:7f:32:17:00:
6e:01:a7:22:22:31:62:c3:ff:38:12:93:bb:21:24:a9:34:d5:
83:fa:29:2c:d7:1b:31:3c:47:ed:fc:ac:4c:67:3d:4d:30:f0:
b5:16:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:38 2025 by rpki-client