Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: k/QSZ/rcskZ9WBdkDZnEVCPIXD8V79hH2pOCszxGmQk=
Subject key identifier: 05:83:99:C8:1F:46:02:0B:42:07:D7:C0:C8:92:AF:B2:48:C3:B4:66
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 019684A3C43DB8052B0D3E20B990E933B31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0924
Signing time: Wed 30 Apr 2025 03:00:47 +0000
Manifest this update: Wed 30 Apr 2025 03:00:47 +0000
Manifest next update: Thu 01 May 2025 03:00:47 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: KS01n9A4cQ+cuRPJkeuM8JCV4dbFIqH63O2ZPszNDe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:c4:3d:b8:05:2b:0d:3e:20:b9:90:e9:33:b3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Apr 30 03:00:47 2025 GMT
Not After : May 1 03:00:47 2025 GMT
Subject: CN=058399c81f46020b4207d7c0c892afb248c3b466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:fb:ce:68:37:e9:56:23:06:2d:90:c0:62:
0a:9d:35:c8:b1:1b:fa:e7:9a:04:0f:43:57:28:d1:
86:82:ba:75:81:be:86:0f:37:76:2b:b7:c4:22:66:
fe:5c:66:c1:92:df:80:ee:6e:8e:ed:e2:07:3c:69:
4a:b4:9d:7c:fb:91:86:fd:17:9c:22:3c:cc:e1:d8:
fb:fb:7b:4b:3f:3c:8e:0e:d4:8d:28:b0:66:bd:d0:
99:67:4b:69:a0:91:2b:82:4f:0a:ee:1e:96:e7:7e:
25:bb:76:d1:91:c2:40:77:32:32:4c:82:31:0b:31:
b4:6a:bd:fe:10:73:e3:dd:c5:96:18:f5:b5:43:28:
3b:a6:2f:82:ef:61:d2:fd:be:8c:e8:77:61:46:2c:
ce:8d:66:96:b7:e9:51:a4:89:8b:cd:b2:c1:36:aa:
cd:41:f1:06:8a:ef:b0:e0:19:b6:73:94:a4:d2:d8:
bf:ce:e7:88:93:5d:f6:4f:3e:bf:b6:ca:e0:13:1e:
6f:88:0f:0b:82:78:c9:1c:11:7a:57:62:f9:63:f1:
21:a8:94:d7:bc:38:25:47:71:75:b2:45:7c:c0:25:
d9:db:2a:00:13:67:8a:d5:75:f2:16:6f:60:0d:6f:
5f:e3:e5:63:82:aa:60:47:be:39:46:4f:5c:12:14:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:99:C8:1F:46:02:0B:42:07:D7:C0:C8:92:AF:B2:48:C3:B4:66
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:95:9b:42:86:f0:97:b1:75:ee:44:7b:c4:50:2b:25:32:c0:
86:ed:28:31:21:83:52:cd:14:03:c0:ab:93:57:8c:f7:7d:3a:
29:ac:25:7d:7a:b2:02:d3:d1:29:03:a4:a7:41:b2:0a:72:3d:
3c:2c:e4:db:a8:4f:e8:98:63:12:4b:ff:eb:ed:92:75:9f:3e:
bb:0d:33:be:81:23:9e:2b:39:25:f6:8e:0d:6e:84:75:05:5b:
96:f3:e1:fd:66:da:10:ba:78:e8:cb:39:ef:b4:71:50:85:f0:
f3:53:6f:fe:4a:68:6a:6e:c1:f2:75:1b:05:59:c9:69:e3:90:
ff:ac:f9:ee:22:01:b3:c6:0d:7b:ca:7b:45:d5:8a:20:1d:d8:
43:4b:5b:6b:14:d3:6e:2a:10:f3:e4:b1:a4:5f:3c:8f:d9:e5:
bd:ee:3c:7b:84:e1:70:57:af:63:c1:bf:e8:ac:27:cf:0e:ca:
35:ac:d6:d7:b1:89:5a:30:f2:81:03:0d:80:1f:6f:1e:f2:96:
4c:96:8b:e9:20:b2:53:e4:dc:ab:5b:2f:73:6e:65:98:6d:42:
74:98:1d:ed:3f:1d:19:89:c5:5a:dc:18:e4:4d:77:67:9d:f9:
0c:9a:d5:4f:e3:72:cb:ab:c6:a2:27:73:13:c0:00:b6:d8:9f:
c1:da:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:50 2025 by rpki-client