Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
File: itMkK15lo9DZHGsZ60CRlZskMUg.mft (raw, json)
Hash identifier: WGJKHJ5L12XDVT6Fpf9RR0MGC1df9DoNRTRzQH8vUEE=
Subject key identifier: 93:68:06:DD:47:3D:52:C1:99:31:13:46:C4:0F:82:68:96:CD:27:EA
Authority key identifier: 8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
Certificate issuer: /CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Certificate serial: 01965537DC9B8DF24C32B79732580721044F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
Manifest number: 020A
Signing time: Sun 20 Apr 2025 22:00:46 +0000
Manifest this update: Sun 20 Apr 2025 22:00:46 +0000
Manifest next update: Mon 21 Apr 2025 22:00:46 +0000
Files and hashes: 1: itMkK15lo9DZHGsZ60CRlZskMUg.crl (hash: 6CXhoVyekWPVV9kivZgtpZIsNBFI56SHWrgD8ynEOZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:dc:9b:8d:f2:4c:32:b7:97:32:58:07:21:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad3242b5e65a3d0d91c6b19eb4091959b243148
Validity
Not Before: Apr 20 22:00:46 2025 GMT
Not After : Apr 21 22:00:46 2025 GMT
Subject: CN=936806dd473d52c199311346c40f826896cd27ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:56:4a:91:32:f2:07:15:d4:c1:d4:3f:2f:
7b:b2:db:54:b5:45:b7:03:26:20:ab:ad:eb:a8:dd:
ab:18:29:81:20:d1:46:b9:99:9f:ea:36:ce:59:84:
eb:4c:e7:c5:4c:b3:60:44:df:ae:7d:45:11:9e:3e:
31:de:1f:4b:16:63:6b:19:d1:90:d5:ba:6c:07:2b:
8f:1c:3a:9f:81:5d:b5:f0:21:86:4c:ed:c8:e0:57:
d2:66:d8:60:16:fe:f0:6f:53:54:04:c3:af:af:5a:
ac:fe:cc:ad:db:04:50:92:0d:0f:fb:78:b7:e1:30:
0a:f9:62:69:98:d7:e6:1b:7e:50:cb:b5:71:2f:65:
e9:90:3b:90:ef:3f:48:06:88:22:2c:ad:59:b9:aa:
f4:59:78:65:a1:6a:ad:7b:71:ad:95:e3:39:4c:fa:
19:a2:ef:c6:9a:2f:04:c4:f0:04:be:7b:20:8c:93:
a6:47:11:ca:f1:56:40:e8:8e:bb:e3:0b:29:b0:16:
98:c4:a1:24:d1:d1:1a:d2:78:ae:45:bb:71:c2:82:
9c:c2:f7:9d:44:36:f5:ae:5b:81:7f:cb:58:60:88:
de:b7:da:5c:ff:70:7f:03:79:c4:02:92:8f:77:56:
9c:ce:b7:98:d0:62:05:bf:e7:a4:c8:45:7c:14:97:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:68:06:DD:47:3D:52:C1:99:31:13:46:C4:0F:82:68:96:CD:27:EA
X509v3 Authority Key Identifier:
keyid:8A:D3:24:2B:5E:65:A3:D0:D9:1C:6B:19:EB:40:91:95:9B:24:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itMkK15lo9DZHGsZ60CRlZskMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7de10-5dc0-4d89-9a68-f704b1f53ace/1/itMkK15lo9DZHGsZ60CRlZskMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:de:ab:c4:33:9d:7f:d4:47:92:f7:9e:af:ce:a1:43:66:3d:
b3:90:2b:93:39:0b:28:7f:c1:89:71:7c:70:fb:1e:cf:0b:1a:
d5:70:ef:28:06:43:e9:51:80:77:0a:50:85:45:55:8f:05:7b:
c3:33:c0:d3:82:0d:09:e7:d6:77:ce:54:09:6e:9c:70:38:6c:
60:41:06:c3:e8:b3:52:19:ed:23:de:d2:a8:9a:a0:d3:c4:e0:
16:25:8c:73:87:35:3b:1e:27:eb:d2:d2:55:66:ee:8d:84:e7:
2d:6e:1c:21:cb:45:56:32:44:b3:11:96:76:f0:dd:95:dc:51:
25:92:88:cb:eb:03:35:b5:88:c1:d0:74:71:ec:a0:14:1b:b5:
dc:b2:7b:10:0b:47:08:22:c0:75:4c:d4:13:aa:26:21:b8:4b:
60:c5:8d:8e:f4:36:64:60:46:3c:9e:2f:cc:f4:05:5f:e5:2a:
fe:43:ae:55:22:25:36:20:77:5f:bd:5e:6b:fd:24:e5:b3:c2:
2b:bf:2d:7b:ed:fa:32:c6:e0:77:59:0a:62:16:d8:70:e5:96:
04:74:2b:45:ff:ea:14:84:42:42:f2:78:b9:d2:97:34:fe:a4:
af:62:0e:86:e6:78:2c:7d:0f:7f:bd:a5:f4:2e:ce:39:0f:a6:
05:c3:a4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:03 2025 by rpki-client