Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: f+Z8pVxXngkT2Bsh3cKQjQjdIwEqEG9ZPleVpv47Q04=
Subject key identifier: 22:5F:7A:5D:D8:A8:31:D3:82:EC:D3:40:7C:00:B9:90:B9:E4:55:89
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 01958F2A6CCF74C4804E29CBC8E3E47D3DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 07CA
Signing time: Thu 13 Mar 2025 11:01:16 +0000
Manifest this update: Thu 13 Mar 2025 11:01:16 +0000
Manifest next update: Fri 14 Mar 2025 11:01:16 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: zUPRPLE9D5huy5Ugq2VYCv3qb/6+g2+YIZQE9Du5Yic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:6c:cf:74:c4:80:4e:29:cb:c8:e3:e4:7d:3d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Mar 13 11:01:16 2025 GMT
Not After : Mar 14 11:01:16 2025 GMT
Subject: CN=225f7a5dd8a831d382ecd3407c00b990b9e45589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:d3:70:5b:35:29:e3:8e:fd:b8:2c:57:a8:
5c:c5:08:5f:25:30:c7:8e:59:8a:94:69:9e:d8:4e:
d7:1a:c0:32:9e:6f:ff:46:9c:cb:44:49:82:1b:25:
78:ae:b9:ce:57:4f:52:e2:e8:33:29:3b:7c:81:75:
3c:d3:93:02:ab:77:19:e6:1c:ae:2a:0d:ee:1d:91:
d7:ce:a9:9d:42:50:59:d2:d4:c4:9e:24:4e:81:c4:
de:aa:24:a1:86:24:df:44:f7:cd:6b:70:f4:97:8c:
ab:df:67:41:fb:74:12:ea:09:f7:28:a3:d6:7b:c7:
74:19:ca:4f:9b:51:5a:3e:90:89:56:62:ec:6e:77:
bd:e7:a9:4c:7a:25:8f:59:48:69:47:f8:38:3c:1d:
e1:0c:60:58:6a:c4:4a:df:b6:a7:d8:42:15:c3:5c:
e9:72:97:60:8a:e0:cb:dd:05:e6:b5:be:dc:91:f6:
60:31:f2:fd:4e:b9:05:c5:16:e4:72:84:b2:8d:71:
2a:b4:9f:dc:66:f1:1d:f0:95:5e:91:8d:10:f6:db:
f4:d7:aa:fc:27:d4:d1:a2:94:fe:c1:4e:e8:6d:37:
1e:dc:7c:4e:7c:fa:0a:06:13:e4:04:63:eb:df:23:
d4:e5:41:9a:6a:65:e7:5a:f5:43:79:c5:e4:70:82:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5F:7A:5D:D8:A8:31:D3:82:EC:D3:40:7C:00:B9:90:B9:E4:55:89
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:54:af:8b:fd:54:03:0e:fb:33:a7:a5:a9:2d:c9:e8:0d:
a5:16:af:a1:60:a4:d3:ca:3a:73:fa:2c:33:2e:aa:1b:5b:9f:
2d:26:1e:d9:87:f2:6e:40:f5:08:bd:74:e2:f7:43:7c:5e:ec:
c0:c1:ea:bc:57:59:b0:11:4b:9b:80:b7:b7:70:e9:6e:a0:88:
a9:c6:34:56:23:9d:e8:50:98:fd:2a:49:70:ab:a5:fa:d6:1d:
9f:1b:d5:41:bf:9b:7a:46:fe:b1:c9:4b:d3:5f:39:9b:0d:e5:
21:59:45:81:af:1c:71:ea:e5:67:46:06:25:c7:71:13:e7:aa:
59:24:0e:e5:7c:a3:0c:f5:42:eb:cf:60:91:eb:da:d9:98:30:
fe:c6:17:12:09:1b:e4:68:b5:d3:2c:91:94:1f:1f:90:4c:be:
8a:47:b2:0a:fa:f4:df:28:a2:48:28:56:0f:e9:57:00:04:72:
1e:5d:ad:5b:7b:47:53:93:10:41:64:7e:4b:ea:f7:52:2e:ca:
aa:49:2e:54:db:23:e9:bb:37:84:ed:d3:64:43:f2:1b:52:44:
c4:e6:8e:4a:77:02:1b:6b:76:c5:53:15:34:47:5c:ea:ab:a6:
2f:60:ad:bc:ba:41:5e:d4:d9:46:5f:f6:fd:12:7c:24:fb:98:
93:7d:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:47 2025 by rpki-client