Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: jT9Z9KYP7/G1PWPCiDwiQQYGDyxtRZMdKA66+RTR4qo=
Subject key identifier: 20:64:8B:CA:DC:D6:AF:F6:16:59:62:E9:00:17:8A:8F:D6:23:9F:FA
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0196120E632E86657C1716035A59966268B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 08A1
Signing time: Mon 07 Apr 2025 21:00:54 +0000
Manifest this update: Mon 07 Apr 2025 21:00:54 +0000
Manifest next update: Tue 08 Apr 2025 21:00:54 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: 5LQVzHekAtCiT8pY8x7lAhSkl3MX/7D8qlyZZNdCG4o=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:63:2e:86:65:7c:17:16:03:5a:59:96:62:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Apr 7 21:00:54 2025 GMT
Not After : Apr 8 21:00:54 2025 GMT
Subject: CN=20648bcadcd6aff6165962e900178a8fd6239ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:59:b7:2e:ef:c4:fe:2f:2f:29:13:92:02:
53:6f:12:7c:ff:38:a4:2a:9b:34:6e:55:fe:ff:90:
41:32:15:84:96:b1:ab:87:43:dd:78:56:82:8d:0c:
a7:96:02:97:20:f0:0f:37:65:f0:09:26:a2:85:47:
09:80:34:1a:0d:0e:37:e7:27:dc:c1:66:5e:7d:64:
b7:32:f7:d2:15:90:62:a5:b9:59:cf:f7:75:8d:9c:
c3:8a:f5:9d:5e:38:eb:6c:a4:5d:a2:39:50:3e:8b:
08:f8:d9:04:56:b2:3d:f6:b2:06:e9:d1:a2:98:75:
9e:e8:2d:2f:b1:a9:50:a3:49:72:cf:c9:10:63:e1:
59:e5:96:3b:cb:25:6e:be:23:f4:82:ca:ec:06:d3:
7c:94:a3:13:66:95:d7:b8:3a:bb:3d:74:75:f8:3e:
9e:ff:63:91:35:23:05:71:4f:24:20:c0:a4:84:d4:
0c:16:1e:46:78:e3:a9:1c:f3:59:d2:41:70:4d:73:
30:19:47:6f:cb:28:47:1b:c8:d8:d0:31:a4:14:80:
d9:52:ee:16:77:57:d2:02:7c:74:71:95:53:1a:41:
70:25:2e:88:0b:3d:13:2f:cb:72:8f:00:6e:d8:c5:
ea:30:44:e8:02:fb:38:b8:81:03:a9:d3:28:d5:38:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:64:8B:CA:DC:D6:AF:F6:16:59:62:E9:00:17:8A:8F:D6:23:9F:FA
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c7:10:47:f2:8c:a8:35:08:a1:16:70:e8:52:34:da:f4:18:
99:cf:ef:29:0a:da:a0:83:e8:e4:99:e1:5a:26:85:86:73:48:
32:e6:7f:c5:fd:76:b7:d2:cf:00:e6:aa:66:bb:24:34:e2:8f:
e3:28:fc:14:b5:c8:ba:fb:f3:07:a7:39:e0:94:82:e7:48:48:
40:45:ae:76:fc:df:38:2f:1f:9e:b4:e4:88:b9:f7:b3:48:50:
11:47:25:a2:85:1f:2a:80:84:12:2d:b8:60:b4:14:0d:05:54:
93:ac:23:a0:ce:64:0a:5d:1c:9b:5e:5c:36:c0:de:0a:34:c3:
b3:09:d6:5f:98:16:2d:c1:b6:78:17:a0:c8:44:3f:98:70:84:
2f:28:00:c8:85:5c:c8:28:b9:cd:0a:ef:e9:94:43:6c:41:9c:
e7:75:4e:eb:d8:aa:0b:8d:27:7f:b7:d3:94:52:ca:dd:fe:72:
7d:dd:83:67:34:b4:d1:86:13:e1:19:02:bc:1a:00:50:fa:33:
4b:d8:e0:6f:f7:42:7d:8d:a2:63:7b:a0:90:b4:6b:16:ae:86:
54:b0:80:3e:0c:e2:e3:02:97:db:d5:d6:80:0c:0a:e7:72:18:
43:b7:6a:8d:aa:2e:0e:ae:dd:bd:29:a3:68:60:71:70:d6:d6:
82:3c:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:12 2025 by rpki-client