Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: JY4gWxfHw2VrP3OlaB0kEAes+NbIiSV7fLy8UqzKNKc=
Subject key identifier: 80:2C:DD:E4:0E:9D:68:51:41:21:CA:DF:D8:C9:26:52:DB:EE:C0:0D
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0196440CC91F10FEBB7ACD76926DDF0C6085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0A8C
Signing time: Thu 17 Apr 2025 14:00:10 +0000
Manifest this update: Thu 17 Apr 2025 14:00:10 +0000
Manifest next update: Fri 18 Apr 2025 14:00:10 +0000
Files and hashes: 1: 5iBJUq8VAL04KnbBhQrQd7qQTS0.roa (hash: kbpdNID67b9fdj5cjTLYSKL590X3o44jLTH12Cud5xM=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: r5HYfzJzHe+df8TIEig0jjQ/MwUsethnLlFNh83V0lY=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:c9:1f:10:fe:bb:7a:cd:76:92:6d:df:0c:60:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Apr 17 14:00:10 2025 GMT
Not After : Apr 18 14:00:10 2025 GMT
Subject: CN=802cdde40e9d68514121cadfd8c92652dbeec00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:dd:47:f6:eb:90:a6:d8:95:0f:37:5c:67:
49:a9:39:fa:1b:64:ef:fe:55:e7:25:f1:c2:74:f6:
74:ee:ce:5c:5a:26:60:c7:e8:f3:ee:f9:50:15:19:
6a:ee:83:a7:24:ea:73:97:76:14:cd:ab:85:b5:72:
62:a1:8b:37:b2:f0:95:76:b0:39:60:cf:e1:b3:52:
9a:25:d9:d1:c1:43:71:01:a0:99:bb:60:ab:f0:79:
2b:91:dc:3e:e6:db:e1:82:f5:12:46:ba:c7:5c:ed:
7a:56:29:93:95:c9:0c:35:05:99:95:d4:2b:16:ac:
dc:81:44:16:74:4b:75:03:1d:dd:09:ce:9b:de:fb:
08:ee:0d:65:04:61:6d:40:4c:98:e1:38:65:32:02:
76:25:c0:78:93:bf:c3:a4:18:99:3a:0a:f3:f0:10:
4d:8d:e3:99:79:72:81:0d:42:15:cb:48:6f:ba:50:
e2:22:09:5e:78:a5:b6:ce:33:a9:2d:b1:30:53:cd:
62:d3:ed:52:f5:42:f1:bd:85:6c:53:4f:07:fb:41:
7c:aa:e6:7d:b7:5e:69:18:2c:8a:c2:68:66:f4:ba:
d2:06:c7:da:0b:50:ae:91:d2:48:e0:a0:cd:64:46:
96:bf:52:7e:6b:9a:82:e4:44:b8:17:f9:e5:34:59:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:DD:E4:0E:9D:68:51:41:21:CA:DF:D8:C9:26:52:DB:EE:C0:0D
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:9d:01:b8:43:38:d5:72:92:36:37:86:4f:73:9d:6c:f2:
ec:a6:bf:67:66:f3:4b:f7:91:f2:5a:37:81:cd:24:3d:ed:11:
fa:4e:fe:5a:10:81:10:30:42:e0:f9:8d:ac:dc:fa:35:6e:80:
e6:b8:8c:ca:8e:eb:38:14:da:78:3a:1a:c2:11:f8:36:2c:72:
b3:96:ff:43:b0:a9:10:a6:14:a6:4b:8f:c4:9e:34:19:8f:d5:
f9:4b:85:91:df:ff:22:c0:28:45:f5:71:b6:fa:4e:b7:2c:af:
5e:90:9b:79:ed:f9:20:fc:ed:fc:02:7c:b0:cf:10:e4:f2:62:
f8:d7:7a:3c:12:43:ae:53:44:de:f8:1c:3f:56:39:f6:47:a4:
6b:df:26:8d:03:ae:c0:31:fa:ff:a8:d3:15:b1:f5:f2:80:d8:
40:13:e1:60:37:d9:95:18:65:f1:8d:eb:56:f7:8b:33:d8:54:
b5:bc:42:9f:6e:4a:50:e5:93:e0:cc:3b:4b:da:56:51:27:cb:
77:23:9c:36:23:c8:bb:77:28:09:56:d7:a8:eb:c7:29:28:87:
5c:b7:b2:fd:dd:f0:35:ab:e8:58:28:e0:ee:70:74:db:e7:e0:
5f:65:bc:eb:4f:23:03:b4:b9:45:94:fe:b2:db:02:8b:7b:b2:
8a:03:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:33 2025 by rpki-client