
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier: WbfzKwLwx/OVlGGJg6tLflvarB/s1hcaCipnjaNpGZU=
Subject key identifier: FA:29:DB:94:41:BB:4B:06:14:CD:DD:74:4A:E9:8B:E9:2E:0A:64:9F
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 019640305616EF0BCB962D19F26CF190DDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number: 112F
Signing time: Wed 16 Apr 2025 20:00:31 +0000
Manifest this update: Wed 16 Apr 2025 20:00:31 +0000
Manifest next update: Thu 17 Apr 2025 20:00:31 +0000
Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: LWjKleXj7u97yNiWeDQhLF7sJokHdRM+Qnycl69r90M=)
2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:56:16:ef:0b:cb:96:2d:19:f2:6c:f1:90:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Apr 16 20:00:31 2025 GMT
Not After : Apr 17 20:00:31 2025 GMT
Subject: CN=fa29db9441bb4b0614cddd744ae98be92e0a649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:3b:85:c3:49:45:38:c6:a2:65:16:a6:ca:
b3:f9:e7:d2:c5:e2:45:a3:6c:0e:d0:8c:33:a5:62:
cf:fe:c4:8e:49:17:0d:b9:79:9c:42:b4:7a:29:4a:
a9:fc:c5:5c:7f:87:97:70:39:c1:3f:54:95:31:1a:
a4:28:cd:7f:88:97:51:74:c1:9b:4b:f6:74:64:a2:
87:2d:f8:45:cf:18:32:41:63:c0:74:97:5d:6b:13:
e1:89:e2:f9:c7:65:59:46:f6:6c:70:cd:b1:73:5a:
d8:54:3d:ca:08:99:97:c2:bb:18:cf:c7:ba:75:fd:
c3:89:9c:87:61:9f:6a:ca:05:1f:f1:d9:48:c3:6c:
df:5e:72:23:4a:72:d6:54:d0:7b:c5:2d:f9:f6:f9:
1a:33:77:1a:52:f5:ec:9e:a8:47:fd:e5:8b:12:80:
11:7a:bc:d9:31:8f:86:2e:a2:2f:4c:ec:fb:44:87:
9e:91:7d:7b:46:4d:4c:ab:9c:4c:51:27:92:22:58:
bb:4f:8f:f7:5f:a7:3e:77:65:7b:93:50:98:f3:ee:
68:1f:f7:48:06:98:b7:d8:bb:23:e0:64:78:02:9a:
ca:62:9c:02:21:f9:75:ce:c1:0d:06:71:77:e7:7e:
49:10:73:d8:42:da:76:9d:8c:83:ae:44:67:8d:04:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:DB:94:41:BB:4B:06:14:CD:DD:74:4A:E9:8B:E9:2E:0A:64:9F
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:f9:0d:8d:57:ee:89:88:be:c5:a3:57:9c:19:a7:8e:f6:
df:b3:8c:30:bc:71:8c:df:42:74:3c:8e:73:96:6d:d3:df:39:
6f:85:76:01:8e:04:be:00:2e:33:16:20:65:44:00:70:fd:a8:
ca:16:4c:c0:0b:89:b1:57:55:d6:01:18:d3:24:77:55:9c:7a:
91:12:08:14:5c:b8:80:9c:65:77:03:15:6a:2f:5c:5a:bc:65:
d6:77:3e:db:39:d6:e7:e3:b3:dd:ce:53:28:3f:a6:81:0a:b5:
bf:35:5c:b4:07:9a:56:5c:7e:24:fb:3e:9d:19:96:43:af:68:
bd:da:56:0f:df:8b:9e:c8:1b:22:8f:cd:96:c3:e9:a5:79:05:
73:ce:bd:1d:69:98:89:35:ae:a9:63:db:43:e6:6b:90:8c:f0:
cd:e2:78:29:bb:6a:31:bb:5d:8e:91:6f:88:b8:7a:b4:37:cf:
73:33:df:28:37:a2:d7:dc:8a:ca:55:a5:4c:43:c0:df:b1:e1:
0b:ab:27:1b:d0:06:2f:fb:16:05:cc:fa:e9:35:09:a1:5b:fa:
33:86:3e:bc:81:f5:5a:d2:a2:b8:0d:4b:08:af:7d:65:42:9f:
49:2d:60:55:a2:d6:5a:48:b4:4c:14:0e:88:67:5b:04:eb:0f:
49:db:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:21 2025 by rpki-client