Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: lB2II5r5918bXzFpfLmFZQef5CqGczMoUQjSnw3EtYs=
Subject key identifier: D6:C5:04:EA:80:3E:97:F6:92:9B:F8:DD:8D:F2:4D:AD:67:D3:78:3F
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 01964A0F8CD8B550E3F2DD6B7A568380CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0D61
Signing time: Fri 18 Apr 2025 18:00:55 +0000
Manifest this update: Fri 18 Apr 2025 18:00:55 +0000
Manifest next update: Sat 19 Apr 2025 18:00:55 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: MSm2yZAnJ10HUcFfzA8ZDp4JhA8PPGjNBSYyxrodefo=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:8c:d8:b5:50:e3:f2:dd:6b:7a:56:83:80:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Apr 18 18:00:55 2025 GMT
Not After : Apr 19 18:00:55 2025 GMT
Subject: CN=d6c504ea803e97f6929bf8dd8df24dad67d3783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:f0:06:bd:51:8b:e5:24:0d:6a:02:d9:a5:
a8:a0:15:df:6a:50:10:c6:60:6c:29:1b:5c:30:53:
40:01:5a:bb:69:e1:23:ce:52:c3:8f:fc:08:db:01:
f9:86:b0:a7:b7:82:a9:f0:01:62:97:ff:6a:ab:b3:
44:9e:23:54:71:fb:f8:bb:75:20:5f:e8:b6:b9:06:
eb:70:71:d2:10:f9:e3:95:2e:a7:82:93:e7:04:27:
77:ae:a2:67:94:0e:fa:e6:90:83:1d:b1:74:32:5d:
e3:92:01:26:2e:bd:6d:0d:2f:0a:6f:dd:a8:4c:b2:
d8:58:24:aa:1a:c1:6d:a2:4a:fb:61:06:13:db:21:
fa:77:65:e0:7c:fc:9f:75:1e:51:4e:64:64:df:8b:
65:ba:37:bb:24:67:c0:81:3e:91:a8:9b:23:7e:72:
0d:ca:0e:e6:90:0f:7b:bf:b7:47:d5:25:bd:f3:fd:
f1:95:ae:83:14:2d:e9:98:10:49:18:e9:16:34:02:
51:e0:a9:8a:30:1a:a3:a3:a4:70:bf:20:95:b1:3d:
da:2c:ec:51:0c:a5:0a:c0:0e:30:f7:00:09:56:c5:
47:fe:40:93:cc:ed:32:ce:78:34:b0:4d:8a:0e:1d:
fd:8b:56:04:65:ea:c7:8f:43:57:db:6e:ee:9d:79:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:04:EA:80:3E:97:F6:92:9B:F8:DD:8D:F2:4D:AD:67:D3:78:3F
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a7:c8:60:74:12:3e:17:dd:23:54:0b:b4:b1:3e:13:e7:1f:
87:ff:15:55:58:8d:d0:51:c6:89:ef:15:55:1c:29:bd:06:e9:
73:5b:85:43:33:3d:ac:12:f7:80:be:d5:66:09:c2:3e:91:cd:
e3:97:f3:cf:3f:0f:50:cf:c4:56:ee:8f:02:04:4f:22:2a:8e:
bb:cf:77:03:88:e2:44:e2:12:e8:3a:43:7d:96:4c:da:ea:8b:
cd:a7:48:54:63:92:58:46:8b:f3:fb:e3:08:b4:11:a9:ec:b9:
fc:bf:5b:4b:48:93:b5:12:d6:e3:e3:e2:9d:8d:07:61:0c:be:
23:24:6b:6c:77:d1:b6:0b:04:23:33:84:18:64:90:76:72:78:
f0:76:4a:2c:90:c8:3a:fb:f8:bf:12:f9:ec:1d:92:e8:96:c3:
47:68:15:fd:be:e1:bb:74:ab:db:b1:b3:05:b1:24:a7:f8:18:
ec:d1:72:30:40:f0:e3:eb:a8:49:9f:3f:37:d4:00:24:05:55:
33:0c:ae:f9:11:35:44:ad:64:0b:fa:72:98:19:93:12:13:c7:
d4:1c:0a:7c:51:84:94:66:08:59:20:86:7f:5d:5a:85:5d:58:
3e:8c:b9:11:6d:d0:0e:99:f7:2f:c6:20:6e:01:46:6d:5b:57:
23:90:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:00:43 2025 by rpki-client