Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: 9a3h8En9SLJIW8k6/bIFzV2XkvBQaDwpxUIFDJSENTU=
Subject key identifier: 88:CA:E1:5E:1F:F9:AA:88:D2:EB:44:80:77:39:D2:96:92:AA:00:5A
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 01964331ED027B94EA3378D6D1E223E08AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 11F1
Signing time: Thu 17 Apr 2025 10:01:07 +0000
Manifest this update: Thu 17 Apr 2025 10:01:07 +0000
Manifest next update: Fri 18 Apr 2025 10:01:07 +0000
Files and hashes: 1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: kZaKUos2JTHRIBKO9FpJA+zRRo1KKmqCPGufNrThuns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:ed:02:7b:94:ea:33:78:d6:d1:e2:23:e0:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Apr 17 10:01:07 2025 GMT
Not After : Apr 18 10:01:07 2025 GMT
Subject: CN=88cae15e1ff9aa88d2eb44807739d29692aa005a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:6d:1a:e1:82:9a:8b:55:ba:9c:60:fb:89:
d0:7d:bc:ef:d7:b7:67:e5:6b:3e:85:09:21:39:26:
f2:20:4d:79:4a:47:2e:1d:28:82:70:01:b0:25:26:
65:66:0d:64:49:04:8d:c1:9f:b6:11:47:d0:ab:92:
51:b5:06:ab:ef:a3:6a:48:16:58:96:d4:84:d0:d2:
ea:bb:a2:0c:4b:a1:b4:c9:90:ee:d0:f5:a7:9f:5e:
0d:23:93:b9:e5:12:38:ce:4f:77:91:da:43:e7:62:
85:d4:7b:85:49:64:41:41:51:fa:3b:18:83:8b:a9:
ba:db:1d:87:72:60:1f:9b:a7:65:09:87:b6:dd:23:
ed:02:5f:0c:26:49:a0:3a:3c:6c:57:99:86:cc:f6:
de:b0:eb:4e:97:3e:bf:e1:fd:c4:0c:a9:62:12:3f:
19:96:d0:4b:99:dc:11:cc:bb:77:3a:18:77:90:af:
1e:17:3c:48:db:ac:31:3b:e7:ca:66:fe:72:11:9d:
6a:64:62:9d:de:56:a1:d8:fd:e2:f4:ae:4a:51:f4:
52:1a:d1:93:b5:9b:a3:fb:63:d6:2b:d2:86:81:d2:
b2:17:e7:7c:df:05:2b:f2:e1:03:bd:fa:74:0d:7c:
b0:a1:a8:29:65:e6:37:ad:47:a1:8f:c1:88:22:5f:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:E1:5E:1F:F9:AA:88:D2:EB:44:80:77:39:D2:96:92:AA:00:5A
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:59:a5:5c:aa:2e:e8:f5:eb:d3:f3:dd:b6:38:96:c4:98:22:
f2:34:da:d4:ae:e3:15:f3:7e:40:df:3c:24:52:f6:6f:e5:10:
c2:d0:bc:6f:73:0d:e1:0b:e6:5c:c9:df:f0:05:fa:d2:6d:06:
05:ae:42:6c:00:6b:ba:90:ca:59:d5:b5:f4:db:cf:45:2a:df:
03:42:6b:9f:2a:40:aa:98:34:75:d4:df:66:46:06:60:9f:91:
85:f9:9e:18:50:9f:6f:bb:77:02:d2:72:b6:2c:93:9f:24:ee:
f0:27:2b:5a:45:8a:ea:39:83:d8:82:b1:79:e7:c3:97:8a:ac:
3a:01:37:18:9c:e7:47:b8:88:23:d1:87:87:f0:a3:83:18:f1:
b0:c5:cb:29:2b:a9:21:4a:9b:b6:bd:67:47:9c:5a:30:9c:eb:
07:65:97:23:1c:e2:fd:e6:de:b1:2f:44:8e:b6:f5:ba:96:bb:
37:67:7b:0c:51:67:f8:7f:46:60:d8:53:56:b2:45:2e:86:b5:
d0:ed:11:2a:a1:34:af:5a:79:8f:07:55:18:c4:46:80:33:76:
8f:61:e5:5d:6b:b9:46:44:9f:2a:a9:c1:78:a0:25:16:78:78:
63:4c:51:69:3d:3a:59:64:81:77:49:a9:a1:ac:30:53:25:b2:
ad:25:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:07 2025 by rpki-client