Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File: itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier: 9sKJq+bB12ysrw5nTt6DccK51FACZvYLWDLWbe7imrw=
Subject key identifier: 2C:1F:E9:FD:6B:B0:F8:1D:66:D5:25:81:1C:FC:A2:B1:CA:33:3E:38
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 01960B9E7AD04C762B35B66ABBD97F9B8ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number: 14D8
Signing time: Sun 06 Apr 2025 15:00:57 +0000
Manifest this update: Sun 06 Apr 2025 15:00:57 +0000
Manifest next update: Mon 07 Apr 2025 15:00:57 +0000
Files and hashes: 1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: m+9dNNuqnGY2G+oLzn0KU+3LwBlFw9xW9nFuOAizfqM=)
5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:9e:7a:d0:4c:76:2b:35:b6:6a:bb:d9:7f:9b:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Apr 6 15:00:57 2025 GMT
Not After : Apr 7 15:00:57 2025 GMT
Subject: CN=2c1fe9fd6bb0f81d66d525811cfca2b1ca333e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:aa:21:8c:49:0f:58:62:5e:b3:1a:b9:ad:
91:dd:86:d7:4e:af:db:55:f7:48:a9:5f:1c:d8:54:
d3:06:ea:ab:71:7d:cf:3a:4e:85:1d:59:19:38:82:
a3:52:e4:e7:c7:6e:18:36:1f:1f:23:67:c5:2d:ba:
b4:49:d0:75:a2:c7:d9:ab:63:2d:4c:fd:79:9c:47:
30:f9:bd:20:72:4e:46:a5:ea:e3:e2:3f:23:b1:b5:
4a:00:58:7d:02:dd:fd:80:bc:08:58:e7:39:b9:64:
f8:be:7d:a2:ed:de:1b:86:8c:ae:4d:e9:e6:a0:08:
4d:fb:16:50:97:b4:12:6b:e4:dd:1b:93:0f:de:9e:
41:57:63:d7:f7:0c:16:49:e4:a3:0c:6c:3d:3d:4c:
0e:8c:13:f1:de:b3:90:78:9d:a8:ed:06:f2:bb:1a:
5c:d3:6c:36:f3:c6:a2:39:2e:6b:c5:ed:b6:94:a3:
07:04:c3:50:25:ab:ec:a2:8e:7d:e3:f3:e5:e8:1e:
f7:3b:92:a1:7c:5a:9a:b9:04:a9:14:e5:eb:d1:c3:
15:6f:3a:fe:42:6e:e3:e2:76:b6:9a:0c:e0:23:12:
26:34:0e:43:9c:af:58:6e:fb:df:de:a5:d4:0b:2e:
21:b4:1f:d9:8a:20:06:98:be:8b:e7:25:b3:66:97:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:E9:FD:6B:B0:F8:1D:66:D5:25:81:1C:FC:A2:B1:CA:33:3E:38
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:60:89:87:ea:6f:15:de:0c:15:23:01:4a:bf:ab:0e:42:
a4:51:3a:ed:71:8c:db:ee:57:a9:56:ca:28:a8:8e:b7:4d:34:
43:0c:d7:8f:e1:87:fd:15:cd:10:44:60:ad:e5:a4:99:c5:58:
51:ba:23:fa:39:40:76:f8:9c:eb:ac:0f:44:9f:b4:5c:4c:45:
21:79:08:be:11:e4:f2:29:0b:91:36:90:21:80:f8:a1:79:f7:
0d:7a:11:74:08:dd:c1:38:40:1c:df:0f:9b:36:d9:30:bc:f6:
9b:6b:16:6d:14:2c:31:cb:0d:f3:a3:97:79:7e:17:3c:f5:f4:
24:86:19:84:2a:a6:24:22:04:88:4b:c8:a5:03:2f:28:60:25:
e0:ba:5d:e3:e0:a5:18:29:de:34:6a:73:01:06:54:53:6e:94:
eb:e2:fd:dd:32:8a:29:55:a7:e0:72:89:f8:a4:16:1b:7a:cb:
2b:8e:41:47:64:d5:23:24:0a:42:8d:2c:b3:e0:99:18:f1:d5:
c7:48:a2:4a:7c:5b:42:a1:1b:10:5a:c9:df:a1:df:58:ee:2c:
a4:8b:55:08:3e:9a:8b:2d:4a:42:72:4a:13:23:0e:28:31:8a:
9a:fd:42:d6:e0:ee:68:b2:dd:31:c5:39:fe:55:ca:34:30:96:
90:7f:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:51 2025 by rpki-client