Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: TPsX6KJwfWEfhfLuznr0krhEqQpvoCLlyaaAYWjT6Fs=
Subject key identifier: D4:2C:41:94:BB:61:FC:93:A0:FA:5F:4D:9D:28:1B:60:C7:14:9E:0B
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019695601E6190445260A1D1140404891C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0D88
Signing time: Sat 03 May 2025 09:00:26 +0000
Manifest this update: Sat 03 May 2025 09:00:26 +0000
Manifest next update: Sun 04 May 2025 09:00:26 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: MLlBCMK18trU0eZfURRVLba31JMBJUjGdMR5Ek/C0vw=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:1e:61:90:44:52:60:a1:d1:14:04:04:89:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: May 3 09:00:26 2025 GMT
Not After : May 4 09:00:26 2025 GMT
Subject: CN=d42c4194bb61fc93a0fa5f4d9d281b60c7149e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:f4:39:ae:f7:da:55:23:91:7c:3c:54:b2:
7f:f3:f5:4b:7d:27:23:6f:a5:93:93:f0:d0:00:c1:
0a:54:fc:fb:2f:fe:67:34:ed:96:f1:93:bd:df:27:
0c:b5:97:73:e0:d5:9e:b1:83:54:62:bd:16:3f:46:
7d:6c:69:ee:1f:68:19:91:b5:6e:b9:ce:69:c3:71:
57:d1:78:b9:78:48:d1:a5:ae:85:06:bf:4e:82:3a:
cc:2d:78:35:7f:e6:71:da:32:e4:a6:89:32:0a:99:
25:83:a2:3d:2b:47:b1:fd:9b:f0:70:93:53:8b:42:
d8:d4:27:0d:1a:bc:6f:03:43:61:c3:f8:e4:c5:3c:
61:f2:cd:56:0b:51:2d:56:0f:08:9a:32:50:ac:eb:
71:40:4d:36:44:2d:de:ea:3e:f7:f3:34:b1:1d:df:
f1:72:16:39:52:c6:40:4a:63:87:ed:32:4f:c7:8b:
2c:d4:a3:b9:94:28:b4:7f:17:cc:79:84:e7:11:7b:
29:dc:93:75:a1:2d:cf:25:c4:2b:ee:25:a8:ed:65:
b4:61:64:e4:27:e6:5f:c4:9b:b7:f0:b8:07:af:2a:
be:7f:af:13:53:8a:94:66:2a:8d:ea:5a:03:63:84:
08:ee:b2:6e:e0:20:e0:c5:d9:2f:4a:5a:6b:e7:a3:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:41:94:BB:61:FC:93:A0:FA:5F:4D:9D:28:1B:60:C7:14:9E:0B
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:a1:ff:4b:a3:1d:ee:0a:d5:45:0f:5a:b2:d9:ca:7f:fc:
0c:77:ff:02:5a:34:7d:c8:20:da:42:05:2f:9a:40:f6:4f:c3:
0c:7e:46:b1:24:8b:aa:29:22:fd:cf:41:20:76:29:8c:82:94:
82:d5:60:fb:47:cc:88:3f:95:14:b6:ca:33:bc:7d:f8:9b:f2:
cc:5f:0e:01:41:61:cb:83:47:12:c7:8d:50:17:6b:1a:ed:99:
a1:b5:8f:0a:0c:92:c4:4b:da:48:01:29:58:32:1b:78:9b:1a:
36:55:f9:df:0c:f2:5a:33:47:c6:ee:0d:36:d9:49:53:6d:97:
5e:b9:02:78:65:34:75:1b:06:57:aa:8a:3d:01:d3:d1:eb:a4:
ad:0d:98:2a:73:07:98:f6:08:72:d4:db:d1:e4:fa:86:dd:ba:
c5:5f:ba:91:c7:f6:f0:f4:d7:5b:b5:a2:53:f4:2a:1a:7a:e8:
eb:fc:e4:08:85:42:e7:58:b9:1c:5a:52:16:4c:32:1f:e2:fc:
ed:ed:c0:cc:fc:62:0e:41:99:43:35:2d:30:f3:a3:a8:ef:3a:
99:17:de:cb:67:6d:c1:7f:ad:d9:08:67:fe:46:58:66:3d:9f:
e0:bf:f7:f3:14:9e:fe:5f:ef:6c:1b:76:73:f6:80:41:6a:88:
63:24:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:15:50 2025 by rpki-client