Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: Db7llGCDMX80sjF3Pi4XVBWgd2T7u/KkNry+Qw7vkLo=
Subject key identifier: 38:20:FA:A0:F7:4C:D9:0C:69:AC:46:6E:F8:D9:95:88:05:E4:A7:CC
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 01965801901F75F9ADE31DE94E23C63846E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 11:00:19 +0000
Manifest this update: Mon 21 Apr 2025 11:00:19 +0000
Manifest next update: Tue 22 Apr 2025 11:00:19 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: 4FnwJ6V1nlk8EqwtJp3fIzlIysy7EbWSP53ZFOz3X1w=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:90:1f:75:f9:ad:e3:1d:e9:4e:23:c6:38:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Apr 21 11:00:19 2025 GMT
Not After : Apr 22 11:00:19 2025 GMT
Subject: CN=3820faa0f74cd90c69ac466ef8d9958805e4a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:bc:18:88:fb:ac:29:33:42:f4:5d:b9:57:
6b:4e:ff:58:5d:35:d6:59:e6:61:22:07:6c:aa:b5:
6b:8f:42:0d:46:7f:47:28:a1:1a:3e:6f:0f:c5:d4:
10:1f:53:02:31:e5:76:39:76:2b:63:e7:8d:45:92:
e1:6b:8a:3c:f9:d8:22:e2:99:39:ea:eb:10:ab:f2:
af:4e:35:f9:21:8f:36:b4:f5:fd:c6:9a:de:99:03:
f5:bd:e1:11:ae:17:ba:f4:3d:a2:d8:8a:5d:39:38:
81:bc:c7:fe:48:3b:57:e8:cb:1a:c5:e6:61:d9:89:
06:66:29:54:2b:c6:64:00:16:61:07:c9:a6:70:e3:
15:63:a8:b6:e3:52:49:50:12:ee:3d:96:08:de:8f:
3f:38:ec:d1:75:2f:4e:99:5a:9e:b9:6e:15:4a:fe:
94:7c:57:47:0e:44:03:1a:14:53:e5:bf:f9:a3:af:
99:15:b8:4a:7e:17:fc:c9:5e:27:c8:7a:1e:e4:79:
eb:5b:9b:5d:8d:79:8d:db:a3:0f:88:71:ed:ef:52:
8d:ce:f2:d8:e4:d2:6d:89:b8:2e:fd:e7:1a:0f:f1:
83:67:48:9f:37:df:8e:7d:51:87:16:bb:b1:c4:a1:
36:0d:d2:2e:d2:66:57:f0:b5:ce:a3:ce:54:c3:ad:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:20:FA:A0:F7:4C:D9:0C:69:AC:46:6E:F8:D9:95:88:05:E4:A7:CC
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:11:5a:73:3d:09:3f:57:39:5f:15:c5:33:63:8a:75:07:
eb:25:cc:73:40:59:37:8e:76:55:50:2e:c8:d5:3f:b1:92:e9:
42:7e:ae:e4:82:59:84:02:6b:1b:69:66:27:eb:b0:3c:17:4c:
6a:36:19:44:ec:32:04:06:b4:d4:4e:0e:81:af:43:68:16:cd:
ce:44:dc:60:a6:53:27:ee:ab:87:3f:01:dc:d9:2f:9c:7c:b4:
1e:09:d5:6e:9c:ce:82:21:07:12:61:8c:b2:7d:0c:92:f6:ea:
ae:51:bc:cb:2a:a5:64:ed:68:f4:b7:32:97:35:70:3c:fa:18:
62:dc:fd:48:65:50:3a:e1:19:69:00:7c:66:89:fe:4c:92:16:
12:d2:29:b5:8f:04:5f:f0:68:c9:8d:ff:83:80:5f:c4:01:85:
45:de:ff:3a:99:61:b6:75:6c:fd:9a:c2:cc:71:3e:3d:13:b6:
1b:87:43:d7:30:01:e6:7f:ec:91:1c:9a:3c:a0:f1:9e:7b:c5:
3c:46:1d:db:81:a4:41:14:b7:64:1a:bc:b2:55:e2:53:3f:aa:
28:2d:33:fd:99:d1:bf:32:71:11:f7:d2:1c:65:86:9c:04:45:
0f:85:42:13:cd:6a:87:79:c4:20:9a:21:b0:b9:e2:d8:0b:f6:
a8:42:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:18 2025 by rpki-client