Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File: it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier: Bddu5OvkjwZhbH4e2tQHxbMTc/GyqSSGS3Zxsf7jsDQ=
Subject key identifier: 0D:24:22:4E:1B:30:6F:53:2E:FC:6B:DE:DB:5D:BD:84:10:1D:96:AF
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 01974BC4963BADBA83F29BA8C4F02470E3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number: 127A
Signing time: Sat 07 Jun 2025 19:01:03 +0000
Manifest this update: Sat 07 Jun 2025 19:01:03 +0000
Manifest next update: Sun 08 Jun 2025 19:01:03 +0000
Files and hashes: 1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=)
2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: L3jJSdMIYtnB/AK7bjbJ3EQXDGokpqEXwz8GtKTAoxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:96:3b:ad:ba:83:f2:9b:a8:c4:f0:24:70:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Jun 7 19:01:03 2025 GMT
Not After : Jun 8 19:01:03 2025 GMT
Subject: CN=0d24224e1b306f532efc6bdedb5dbd84101d96af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:33:2b:a6:ee:2c:74:f7:ff:69:be:de:a9:
92:c5:35:a8:d8:3c:12:95:29:04:75:06:f3:01:cc:
43:93:93:94:3a:44:ae:d0:89:bc:9e:c5:0e:1f:ac:
ef:71:99:c4:15:fe:b3:ea:f0:22:11:00:ac:4d:77:
fc:fe:03:64:35:80:35:f1:01:ce:c0:42:24:ea:66:
ff:33:70:56:e0:32:79:0b:e5:26:56:77:cc:d4:f7:
87:fe:82:db:04:8d:d1:c0:f2:8f:f0:39:90:77:7b:
37:91:d2:ed:d1:95:6a:ec:71:4b:d0:be:f1:d7:3d:
9e:16:40:c1:99:28:d8:d8:04:12:2b:cd:14:79:a2:
4d:ef:f7:e3:21:7a:31:c8:12:f2:6f:58:9c:08:d6:
63:cd:bf:e1:bc:0c:40:e5:43:c8:af:c3:89:d0:f9:
a3:44:d7:8c:06:13:ec:0e:2e:b2:81:c1:5f:60:69:
87:0f:b3:52:49:2c:e5:65:79:27:8e:c9:c5:8d:88:
4c:b1:1e:39:65:43:5a:44:6a:80:72:4c:74:69:82:
f2:b3:7f:08:1c:92:54:74:06:18:80:f6:13:73:ed:
8c:77:31:20:1a:02:f3:1f:4f:fe:e8:b4:cd:c7:91:
34:b1:9c:57:4f:88:fa:b1:16:fc:4c:e2:c1:7e:5a:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:22:4E:1B:30:6F:53:2E:FC:6B:DE:DB:5D:BD:84:10:1D:96:AF
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:ca:61:87:13:24:1c:a1:a7:cf:12:a5:9f:3e:0c:fe:d1:
55:e8:2b:85:55:9a:df:d5:a6:89:ce:fe:22:f4:6b:f8:70:e0:
7f:87:44:9e:ce:fe:7d:1b:af:cd:b1:46:71:e9:c9:5e:96:2e:
74:cb:75:46:1f:94:f2:51:04:d7:34:b4:5a:ee:4e:f5:5c:21:
8c:59:4c:c4:2a:63:ee:1d:e0:a9:cf:b3:96:8f:11:00:13:e6:
bf:cf:ee:4d:be:5b:7d:7c:ac:05:da:06:cc:96:e0:71:ac:18:
ad:5f:7c:d1:a8:60:01:0e:7e:79:70:f4:11:56:0d:7b:78:fb:
08:8b:e5:26:e5:9e:f1:f5:f3:86:4f:24:00:ca:15:49:88:50:
50:94:f8:b1:15:0c:a5:aa:fc:7b:3e:f3:11:a3:da:a7:0c:d8:
65:11:f8:05:ab:04:94:7f:af:c1:53:8a:16:11:39:e6:dd:83:
bc:7f:5b:33:a2:c8:0f:db:8c:c5:5c:c5:57:a5:86:ad:a1:55:
32:f9:b7:36:ae:2d:c6:2c:ea:07:65:cc:74:5b:0c:99:f7:39:
0e:a9:83:4c:d7:0d:01:2b:5f:bc:ca:0a:07:e2:10:63:65:fd:
29:50:f6:88:1a:d9:37:5c:c2:b5:42:53:eb:a0:a6:79:2e:49:
e5:27:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:36 2025 by rpki-client