Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: UG2iAKLWlvhFZrekrtfpSiC36u8svMel+BV0TDxBnhs=
Subject key identifier: 6F:F0:A1:0C:CC:49:B9:90:9E:06:F0:A9:FC:48:15:EF:F2:DB:F8:C4
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 019654251EE82720790B69D349F52018526A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 05EA
Signing time: Sun 20 Apr 2025 17:00:40 +0000
Manifest this update: Sun 20 Apr 2025 17:00:40 +0000
Manifest next update: Mon 21 Apr 2025 17:00:40 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: ikwYd7FbA6WTZGX8CpatgjkgeJT2eb1Waah+BH+KtAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:1e:e8:27:20:79:0b:69:d3:49:f5:20:18:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Apr 20 17:00:40 2025 GMT
Not After : Apr 21 17:00:40 2025 GMT
Subject: CN=6ff0a10ccc49b9909e06f0a9fc4815eff2dbf8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:70:c6:82:0d:a3:65:98:f8:7e:97:0e:83:
26:bd:34:fd:22:eb:8f:3e:88:89:f9:fc:c5:83:c7:
fb:3e:3f:a2:5f:9f:4e:14:44:f0:66:d7:ea:c5:cf:
b3:6b:c4:49:71:c5:61:4a:26:8c:72:10:45:f7:24:
49:4c:67:35:f2:da:52:3c:a5:8f:eb:d5:cb:d9:3c:
de:ba:35:40:f1:fd:87:5f:89:72:cc:d8:33:a9:84:
bf:bf:66:06:3f:10:5a:7a:4c:20:71:8a:83:30:2a:
33:63:37:9c:98:f0:92:3e:2f:35:44:a9:74:30:87:
70:e9:9b:0d:75:3e:ae:2b:c3:4c:39:08:7b:f5:b8:
94:c4:03:9c:6d:2b:b5:b5:50:e6:ab:d5:e1:b0:0d:
1b:63:45:5e:41:11:f1:59:b3:48:c7:04:d1:6f:fd:
9a:c4:d5:1b:ef:4f:41:2c:4d:e1:64:86:ff:3b:50:
60:6a:c8:b0:89:85:97:8a:7c:8f:23:66:7a:cc:a8:
fb:5d:3b:d1:be:76:a1:35:37:a4:1e:2a:5b:c1:dd:
67:ff:92:62:f0:87:ff:bb:f7:30:ca:91:51:6b:ff:
93:b8:5f:f3:7d:55:21:d7:a9:6e:dc:d1:d4:15:ad:
28:69:ea:09:65:c0:54:48:29:90:14:b9:f4:c9:0f:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:A1:0C:CC:49:B9:90:9E:06:F0:A9:FC:48:15:EF:F2:DB:F8:C4
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:a2:e3:08:7e:3a:3b:09:0a:b9:54:dc:bf:37:f8:4e:3d:
e5:2c:d6:da:97:e0:b8:53:04:29:7f:3a:20:38:13:e2:47:df:
b2:b9:87:be:86:3b:ec:45:62:26:0b:02:d4:27:b7:d8:7e:60:
14:90:11:45:55:b0:53:44:ad:95:23:f5:15:04:2f:78:ff:d1:
fe:b9:40:51:c6:04:00:ac:ca:f0:8a:89:f0:f3:04:23:85:1f:
a7:43:1f:32:65:4b:f2:4c:7a:dd:16:c9:91:73:e0:5d:c6:47:
6c:14:10:c8:e3:6f:ff:a1:e2:8c:a2:08:61:d3:ee:2e:39:01:
80:b3:a7:44:e9:c2:2c:eb:4c:5d:7e:50:26:64:33:4e:66:4f:
84:6a:05:50:ba:43:d5:85:3c:57:6a:75:0a:2c:f4:f1:45:f7:
84:63:e1:b7:6e:f4:d2:4e:8e:80:0b:63:3d:d8:c9:20:ee:c3:
49:f6:01:62:2c:5b:0b:74:8c:d9:c0:15:45:27:21:78:45:cf:
2c:e9:37:9e:11:f0:65:fd:77:8d:91:6c:b3:8b:5b:54:eb:e5:
c2:e0:27:2e:fc:1a:31:5d:0a:c9:97:09:52:94:24:38:b0:75:
a5:bb:4b:fc:39:05:4b:d8:21:ca:21:40:4e:8b:44:07:de:f6:
b3:c2:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:04 2025 by rpki-client