Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: DRxUpJlZw2DKw7JMX4bx1gnE6ecQj8/iu1B50+RgLs4=
Subject key identifier: 31:A6:30:7B:C2:8D:79:54:E0:C6:94:31:1C:7F:C6:B9:17:BE:55:70
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019654C9E411635740FAFECBE08BF87A3C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1451
Signing time: Sun 20 Apr 2025 20:00:39 +0000
Manifest this update: Sun 20 Apr 2025 20:00:39 +0000
Manifest next update: Mon 21 Apr 2025 20:00:39 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: c78vDhrdl7eum3LlzL4ieUV7rgi3UiMNaOqOSWJ4HlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e4:11:63:57:40:fa:fe:cb:e0:8b:f8:7a:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Apr 20 20:00:39 2025 GMT
Not After : Apr 21 20:00:39 2025 GMT
Subject: CN=31a6307bc28d7954e0c694311c7fc6b917be5570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:fd:d5:92:e7:95:69:e5:62:bc:0b:25:91:
7f:d0:78:b6:64:76:90:a0:70:f6:67:04:7d:9b:72:
5e:d0:84:b6:82:81:9a:02:ca:a2:b1:db:29:6c:23:
ae:d0:a6:8a:e3:2f:9b:b1:0b:a2:02:7f:ca:56:72:
25:1c:49:2d:0d:20:18:ab:d8:08:8a:14:22:64:53:
0e:b8:75:ce:97:04:e4:a5:b3:cb:74:0b:b5:1d:60:
aa:e3:0a:9e:9b:82:b3:c7:0e:27:6f:48:d0:2e:c4:
f1:45:ee:55:43:19:fe:1b:bd:39:e8:da:d6:c7:ba:
09:d0:15:9b:76:6d:57:3b:1d:46:18:d6:d0:5d:9c:
a9:6d:12:f5:22:f5:8c:f1:a2:f0:30:2c:f2:ac:e5:
5f:dc:a5:4a:72:35:1f:c8:3b:87:4b:39:12:cf:b8:
f3:31:99:d7:11:ad:dd:7a:c4:15:eb:9b:77:a3:6f:
cb:72:0c:93:ff:d8:46:f3:15:f4:5a:6d:37:4c:df:
62:99:f8:4b:be:47:68:17:d2:51:60:6f:d8:41:49:
81:61:13:0f:5e:c0:15:31:8b:20:99:05:a6:d4:59:
01:c9:f8:2e:53:de:12:40:c2:91:74:a8:68:9f:3d:
0c:92:d2:36:c6:15:b8:1e:2b:44:6f:b2:9d:03:5b:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:30:7B:C2:8D:79:54:E0:C6:94:31:1C:7F:C6:B9:17:BE:55:70
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6a:f4:4b:0c:ca:3e:0b:3b:35:f4:3d:5d:0e:bd:79:39:67:
70:63:65:44:36:d8:47:34:e1:19:28:17:fd:9a:33:72:ae:23:
b8:8e:88:fd:5a:26:bf:ec:b8:77:94:5b:3a:4d:b3:43:30:e4:
a9:bd:82:b7:fb:35:55:d9:f9:73:b1:1d:47:ee:2a:b9:0f:1d:
3b:3f:78:02:1b:f5:65:ad:f5:7e:a7:ba:b5:b7:2f:02:c5:83:
07:40:31:80:4d:c9:c3:36:dc:7c:a9:8b:ef:d7:79:38:25:40:
a5:07:7f:3d:a5:ba:8f:b7:9d:7b:97:43:8e:46:ee:ac:63:60:
31:6f:f3:0f:f9:ab:3d:77:30:f0:51:fe:4d:ec:5a:cf:cf:12:
8c:5d:62:d7:85:3b:0e:9e:ef:96:62:a8:dd:af:7e:61:fe:db:
66:e1:ce:b9:fb:7a:eb:43:86:84:28:1f:24:76:1d:e6:b6:9e:
ab:2b:4f:a1:05:a5:8d:a1:f4:4c:2a:3f:97:cd:21:1f:bc:fe:
bf:e1:2f:e7:04:54:b1:42:92:67:06:4d:97:79:08:80:f0:8d:
06:a9:1d:16:16:a7:2e:c3:b0:ad:2b:a6:55:40:7a:66:91:fa:
0b:66:5e:17:a6:8c:64:e9:f0:aa:7f:1e:3d:ac:e9:9c:f1:32:
66:5d:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:57 2025 by rpki-client