Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: ZBQV8Tm6s3NoR4CtfjH+5CtCdxnfklPLr7YUNXPFJX4=
Subject key identifier: C9:C7:D7:73:29:CC:C7:3C:C2:50:BB:12:03:9C:2C:88:7F:EF:76:97
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 01958B16B2283A6ED5BFDAAD49379FCF65A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 11DA
Signing time: Wed 12 Mar 2025 16:01:15 +0000
Manifest this update: Wed 12 Mar 2025 16:01:15 +0000
Manifest next update: Thu 13 Mar 2025 16:01:15 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: ziIrzsflA2ae0kLXi6wMBbmH32YnjdBTKP+gsvGVlCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:b2:28:3a:6e:d5:bf:da:ad:49:37:9f:cf:65:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Mar 12 16:01:15 2025 GMT
Not After : Mar 13 16:01:15 2025 GMT
Subject: CN=c9c7d77329ccc73cc250bb12039c2c887fef7697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:d4:be:3d:9e:c0:07:bd:e5:d8:11:74:f3:
5c:6d:61:05:83:3d:eb:9d:c5:ee:74:26:44:1d:de:
23:4b:d6:ad:cf:50:7a:74:1b:45:88:a8:fb:ba:31:
cf:02:15:31:84:e0:ed:4a:af:4a:d5:2f:da:b5:67:
e4:97:e5:1c:6e:49:e7:53:ca:c9:89:93:5e:a8:4f:
a2:2a:7e:b1:df:d7:56:5f:22:12:9f:b8:31:ba:9a:
6c:73:b0:38:ba:96:be:c6:61:05:4f:2c:5f:df:fb:
01:e2:cf:1d:5b:6c:6d:d7:4f:96:19:25:da:93:c7:
00:d7:a1:14:0e:c0:bc:7e:f7:41:0e:fa:8d:49:27:
ce:87:7d:d5:b9:6e:57:0a:4f:04:bb:aa:3f:23:96:
09:4d:da:a0:8e:2e:0e:7b:cb:ce:96:1e:a9:a9:11:
ef:4e:69:ef:98:a3:94:43:06:51:d6:1b:2b:7c:39:
d7:0d:0b:7f:f2:1c:88:f7:25:ca:be:71:a9:4a:35:
b8:4d:04:32:b8:bf:30:8a:75:96:86:42:4e:c9:71:
42:a2:26:3d:cc:4c:28:1a:a6:63:d8:78:1e:89:6d:
bf:34:72:31:60:84:36:91:65:96:4d:38:ad:2b:65:
80:13:98:a5:b5:aa:83:70:63:ba:91:05:d9:80:81:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:D7:73:29:CC:C7:3C:C2:50:BB:12:03:9C:2C:88:7F:EF:76:97
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:9a:9f:71:3b:6d:0e:b5:c0:cd:38:b1:5e:27:9b:93:d2:
5e:cb:28:bd:7a:6e:72:42:7b:9e:b6:56:42:6b:d2:1b:94:c7:
6b:39:38:86:ff:61:90:14:4e:8f:ca:9a:f2:cc:b7:71:98:94:
43:4f:77:1b:e1:60:1a:31:9c:44:f8:f9:db:45:bd:98:bb:e3:
de:84:cd:03:62:e7:0e:bb:09:3d:74:b6:4b:d8:92:c4:39:f2:
73:0a:6e:4f:ff:5a:fe:82:72:34:5d:6a:5b:c7:2b:92:16:38:
6d:d9:b3:0e:9c:bf:dc:73:2c:d0:a9:1d:7d:2b:5d:28:2b:71:
45:be:e1:d6:4f:0a:31:41:b6:07:cf:6d:ee:87:09:18:46:d1:
e3:55:8f:2d:b0:78:28:1a:e9:fb:44:36:c3:d2:f4:35:b6:70:
8d:cc:4c:b3:28:bc:30:f6:c1:f4:d7:fd:c5:9d:c5:87:7d:38:
f9:bb:f8:65:46:b2:37:5e:36:ab:21:5f:b9:54:d6:d0:4d:1a:
19:7f:5f:0b:b1:50:17:00:1a:e8:c1:2a:ee:3d:46:67:f3:2e:
eb:de:35:9f:42:54:46:ba:25:ee:7a:d7:fa:a4:6d:c1:7d:ae:
2e:8b:d4:87:01:3a:e0:ed:48:2b:c7:0e:f9:cc:27:33:7e:ec:
26:1d:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:14 2025 by rpki-client