Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: TUIC5/ZD7SdeBmibATrp8Cpb1/qRz9cw4a4DEoZYhYE=
Subject key identifier: AD:4A:AE:94:18:1E:49:82:D8:F6:94:44:FC:48:3F:8F:33:36:82:AF
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 019578D8ED75C86461C2F70B912A62E4A06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 030E
Signing time: Sun 09 Mar 2025 03:00:37 +0000
Manifest this update: Sun 09 Mar 2025 03:00:37 +0000
Manifest next update: Mon 10 Mar 2025 03:00:37 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: LkaEjnkbGCDrIkAH5mlBWMuXK6EL2xRuMGM2jGqpjj0=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:ed:75:c8:64:61:c2:f7:0b:91:2a:62:e4:a0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Mar 9 03:00:37 2025 GMT
Not After : Mar 10 03:00:37 2025 GMT
Subject: CN=ad4aae94181e4982d8f69444fc483f8f333682af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:e0:2f:e1:5c:37:b8:ff:22:a4:14:e5:94:
aa:da:a9:0b:26:d6:4e:15:d6:5e:0d:ba:94:49:e9:
42:71:f3:0c:dc:96:db:12:d0:5c:37:0d:d1:e5:18:
88:56:7b:8d:e2:dc:00:5b:95:dd:59:f2:12:05:e1:
3f:78:94:8d:0c:92:6d:87:a2:84:6a:d0:5e:c7:34:
d1:77:fd:e1:be:89:4f:1c:15:35:82:7d:05:24:a6:
af:14:67:fb:1a:f3:58:dc:69:bb:a5:00:f5:f4:a9:
77:35:be:50:b9:6c:a6:dc:ef:e5:f0:7e:d1:f7:3d:
87:b4:00:ac:b5:bd:2f:3f:c1:44:63:3d:9f:ea:60:
44:33:6d:e1:35:36:5d:56:1c:b1:17:fc:0d:75:83:
a6:94:51:7f:c5:2e:25:81:9d:0a:ba:39:60:cf:2e:
a7:23:1b:0a:42:6d:7e:76:d6:ba:18:46:8e:8d:2f:
62:8c:63:d7:c2:ef:9c:ab:13:5d:3c:a6:29:3b:39:
23:ad:92:32:54:f8:ac:32:8a:b9:02:aa:77:22:21:
a7:7c:a2:2e:24:27:84:32:47:76:7c:ba:f4:27:34:
f2:11:d5:da:3a:15:a4:97:00:c8:de:de:bd:17:45:
c4:ba:a0:5d:bd:9d:ca:17:6a:ca:71:52:1e:5a:1c:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:AE:94:18:1E:49:82:D8:F6:94:44:FC:48:3F:8F:33:36:82:AF
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0a:7c:62:ca:5c:c0:65:fd:06:3c:12:0b:73:fe:a2:6d:f4:
7f:28:60:6c:42:8c:72:1c:30:1a:db:38:de:fc:2d:ae:75:fe:
ac:21:f3:a2:10:8d:54:08:39:54:e4:7c:f1:c1:31:83:76:ad:
61:b9:f8:1d:f8:0f:8a:e5:cd:33:4b:16:ad:71:85:0c:1e:df:
3d:ac:24:f0:32:6d:63:1b:ac:70:d5:38:00:f6:b2:3f:1b:02:
a4:84:67:e0:bd:0c:1b:8f:83:07:a1:c0:92:60:e9:04:ab:0b:
77:78:6a:2c:45:d7:66:c4:34:c3:69:de:e8:35:dc:d5:78:70:
02:52:57:ab:4a:2f:fd:30:64:72:45:76:7a:3b:ff:17:33:ca:
b0:c5:e9:78:11:75:7f:49:2f:c3:b2:67:56:b0:10:7b:f3:5e:
15:4f:07:09:4c:7b:8a:a0:4d:fe:29:b4:e8:82:9f:62:ee:1e:
41:00:f9:db:01:94:34:46:6a:b2:10:86:ba:fe:2b:ee:79:7c:
1b:0e:96:a0:7b:5b:dc:99:a7:01:94:09:c5:ec:19:4b:d2:f5:
fd:2b:f4:3b:2b:fc:26:4c:6c:1f:fa:11:22:17:eb:3a:38:c4:
d8:32:30:9d:c2:47:1a:f9:49:71:45:d6:a1:1a:3a:d5:77:38:
76:ff:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:02:53 2025 by rpki-client