Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: KsmUV+imciQcc0NgwglL+mv4Su4dPVOcPdLmA7VYHfY=
Subject key identifier: AC:7A:4F:87:69:6D:1B:6C:67:C8:8E:17:8F:66:AB:E6:2E:E8:7C:7C
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 01965E3A9BE42437C8B16397564EC4BC8A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 07B8
Signing time: Tue 22 Apr 2025 16:00:21 +0000
Manifest this update: Tue 22 Apr 2025 16:00:21 +0000
Manifest next update: Wed 23 Apr 2025 16:00:21 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: Y1jPaXZ0RKulodsIFqaWEFwmugn9qoXUd77h0S2B334=)
2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:9b:e4:24:37:c8:b1:63:97:56:4e:c4:bc:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Apr 22 16:00:21 2025 GMT
Not After : Apr 23 16:00:21 2025 GMT
Subject: CN=ac7a4f87696d1b6c67c88e178f66abe62ee87c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:c2:87:be:0a:b2:26:90:cc:cf:21:be:1c:
8d:c8:32:df:a1:7f:b3:74:9e:74:84:b0:48:45:de:
33:73:2c:10:59:23:98:e0:8a:d8:9d:20:e9:7b:1a:
c0:09:db:d5:b0:24:fc:19:32:6b:98:12:84:b2:06:
a7:0c:aa:02:fc:1f:12:d2:67:57:2d:76:e7:8e:95:
d3:0a:8a:d6:5c:5e:05:be:70:e2:82:83:b1:98:b2:
82:a5:65:90:04:f3:bf:13:c0:bb:ce:a3:26:4e:e7:
94:3e:aa:03:a8:01:ba:ae:30:8e:c3:fe:b9:98:14:
69:36:c0:c5:3b:b6:d2:79:84:ce:31:ea:d9:1d:10:
72:07:41:b5:00:68:ca:6c:c7:7d:f2:c2:4e:84:76:
c4:ea:bc:d4:fe:29:fb:09:8e:4d:db:51:7d:c5:e7:
f3:0f:ee:70:43:c3:6d:e2:2e:c9:35:a5:6d:22:99:
c6:42:43:da:c6:6f:dd:90:b0:6a:a8:26:1e:57:13:
a4:e3:66:b3:fe:dd:b3:67:16:e1:3a:cf:07:aa:3b:
c4:ca:fb:4c:92:d7:4b:7f:3b:3a:84:ef:55:43:c6:
78:d1:b4:96:53:d4:18:73:3c:34:bf:e6:ac:36:a1:
66:e2:4e:8f:11:3f:c1:04:2e:6e:ca:38:72:5e:b8:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:4F:87:69:6D:1B:6C:67:C8:8E:17:8F:66:AB:E6:2E:E8:7C:7C
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:58:5e:48:67:8c:e2:26:c4:57:5e:05:cf:36:a5:1d:6a:
d7:68:fc:d6:a9:82:4c:5a:91:57:59:f7:fa:d2:51:ca:ae:d6:
c9:5c:b5:2c:75:ce:7e:06:50:13:c1:d2:bb:69:27:48:5f:71:
2e:51:39:4d:83:59:44:83:13:72:a0:2d:e4:42:48:d9:40:a1:
d3:92:d0:b9:0d:40:7f:ec:6d:41:90:40:46:ab:2b:f4:c4:f4:
11:74:b1:1d:21:9b:c3:58:50:6d:dc:e6:f6:ef:7d:a5:63:f7:
5c:13:fc:88:ef:0c:6f:80:70:27:05:1d:ae:de:33:78:66:ca:
a0:be:4e:e0:fe:b4:84:98:c7:f7:f3:08:1b:5d:ad:b3:1e:a1:
b0:72:6e:d2:64:e9:ce:f4:86:56:67:eb:69:7d:5b:88:0a:a8:
bd:28:fc:ca:66:af:7b:88:e4:f8:0e:1c:70:45:c2:52:bb:57:
13:54:d4:25:7c:f5:dd:d4:e2:58:2a:a4:58:fd:96:fd:9c:db:
4d:de:a1:54:bd:5c:7f:d4:7e:a0:59:59:c0:c9:4f:ca:3f:b7:
a0:77:70:86:cf:28:d1:0e:aa:c2:44:30:10:d6:28:c2:e4:e8:
93:0e:29:3e:01:95:63:8d:4f:08:d4:cd:ac:c0:52:9b:a7:1a:
e9:9a:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:01 2025 by rpki-client