Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: IT71v6wUIU4f25/eWmibFcuMejMAN0oP79g8g0ugZLs=
Subject key identifier: 57:4C:39:2C:09:AE:0B:76:98:DE:B3:0E:4F:D5:E3:EC:5E:B0:C1:20
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 01968FCBD72F655DA262DA0FCA1AEA24C8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 1261
Signing time: Fri 02 May 2025 07:00:22 +0000
Manifest this update: Fri 02 May 2025 07:00:22 +0000
Manifest next update: Sat 03 May 2025 07:00:22 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: te7OwybOs6xhN1vDEopk1UUJtYZpcD75qZWYh3tnHVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:d7:2f:65:5d:a2:62:da:0f:ca:1a:ea:24:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: May 2 07:00:22 2025 GMT
Not After : May 3 07:00:22 2025 GMT
Subject: CN=574c392c09ae0b7698deb30e4fd5e3ec5eb0c120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:5d:5b:30:b6:57:c5:36:42:d2:14:84:c2:
af:7d:c9:7b:e0:e5:70:e8:04:e4:85:e3:22:1c:80:
be:04:7f:f1:e9:76:bf:87:ad:03:0b:12:35:d4:80:
25:c0:16:4f:62:59:9c:26:9d:bf:8c:77:77:f9:c3:
a0:5f:4b:4e:5c:89:d3:be:6d:ea:a6:72:fd:cc:24:
c2:17:bd:f7:86:60:29:eb:40:04:bb:7e:19:8c:c2:
6d:61:0a:46:b7:d5:d5:85:9f:82:97:2c:f9:9b:c5:
30:b0:ce:9b:bf:2d:86:26:20:7a:2c:ea:48:77:69:
ee:3d:ff:9e:0d:a8:fe:05:f5:79:9d:71:02:2d:a1:
46:ca:ed:05:0a:66:c6:1d:33:bf:7f:90:f2:76:0d:
3e:26:30:c8:ee:fa:65:68:35:ff:3c:3f:70:28:2b:
e8:13:59:ae:0b:13:36:c4:e1:da:1f:ea:94:d1:fd:
a7:dc:fe:72:a8:45:46:4e:fc:35:82:e3:8b:41:87:
dc:be:e1:e5:a6:d9:a6:0e:1e:0b:c8:e2:bf:70:07:
f2:e4:be:11:fc:a8:15:fa:dc:30:f7:79:73:ae:8d:
09:c1:03:37:33:79:6b:b9:48:34:e9:21:92:44:cd:
64:3f:ca:35:af:c8:11:90:e1:e9:b8:f8:d5:02:6f:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:39:2C:09:AE:0B:76:98:DE:B3:0E:4F:D5:E3:EC:5E:B0:C1:20
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:54:90:9f:ba:e3:1d:7f:3b:66:8f:a3:03:ca:02:a2:0d:c4:
f5:0d:d9:f1:8e:23:e2:32:de:83:c3:9c:b5:89:a7:cd:47:9b:
82:d2:0a:6a:61:53:49:23:da:32:99:5d:88:45:bb:e4:db:c9:
9e:74:9c:19:d7:98:0d:5f:0c:7e:4a:7a:46:d1:13:30:c3:0a:
90:9d:1f:82:b2:30:41:69:10:dc:b8:8d:3b:2e:f2:46:f1:71:
56:76:4e:b9:d2:94:e3:5f:73:6f:3d:72:a0:fe:5c:e5:5d:d2:
82:0b:e4:39:85:1d:be:c4:8e:61:6e:a9:4f:51:d7:02:3b:1a:
94:2e:f0:62:eb:46:ae:35:3c:c2:60:94:2b:41:8e:77:2e:0d:
d6:41:8a:22:da:17:81:cb:a0:95:e1:79:e5:7e:23:c3:46:27:
7e:5e:ea:1a:8f:e4:32:57:ac:46:9e:a4:19:99:3d:c4:0c:41:
11:70:22:fd:b7:b2:2c:2c:09:d2:bd:64:2f:3a:45:dd:3e:40:
57:fb:5e:64:52:91:a2:ab:eb:1a:5f:f2:63:00:01:bd:c7:15:
61:05:5b:ef:dd:0a:25:ed:6b:85:2e:66:84:9f:8f:af:14:65:
83:8a:54:00:82:0b:26:e1:07:23:15:7a:39:ab:76:2a:be:40:
40:66:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:28:55 2025 by rpki-client