Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
File: I7KazNTA1fX4N36n9GNDt2Brq3w.mft (raw, json)
Hash identifier: yBzLW7nu1KfUWiwczfkdlAlo1crYeRj7sUi8rhJ0l2E=
Subject key identifier: 47:AA:7A:D9:FB:CE:C8:AE:3A:0F:CA:4E:05:E6:F3:8B:82:B1:C2:87
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 01968DA6AEBF3261DF06EE9A748F7E93E1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
Manifest number: 0B96
Signing time: Thu 01 May 2025 21:00:33 +0000
Manifest this update: Thu 01 May 2025 21:00:33 +0000
Manifest next update: Fri 02 May 2025 21:00:33 +0000
Files and hashes: 1: BY3gmYE2jAUAzVYgNkSF1kzgx38.roa (hash: o+T/NGOLnxz7Wv8sLagAUwobjqcsqFCif9O5RgNrbi4=)
2: I7KazNTA1fX4N36n9GNDt2Brq3w.crl (hash: peXHnKiv8zrOzvWOUWakKnS7hGjr2S2l96GJMkFjiks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:ae:bf:32:61:df:06:ee:9a:74:8f:7e:93:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: May 1 21:00:33 2025 GMT
Not After : May 2 21:00:33 2025 GMT
Subject: CN=47aa7ad9fbcec8ae3a0fca4e05e6f38b82b1c287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:c9:0a:73:ff:23:83:97:96:8f:98:1d:99:
0a:8b:b5:32:a9:52:30:c8:23:b0:29:4c:d7:1d:54:
a1:1a:39:d9:ef:a2:1b:be:26:93:2b:54:39:6a:97:
09:d8:53:68:ec:0d:4e:96:51:10:ee:bc:4d:d9:66:
d1:98:37:fd:58:52:c4:d9:68:9b:f5:33:f2:82:33:
42:ca:9e:51:75:8c:4e:c2:2e:74:af:d8:a3:98:04:
82:b1:df:30:42:2f:64:71:bb:6b:55:a3:ca:e1:22:
79:1c:8d:20:1f:6a:66:ce:22:2c:cd:99:39:4d:61:
07:59:dd:d6:51:2e:d2:32:1c:8d:3a:69:d6:c3:1c:
64:91:19:90:80:f9:35:67:f8:3f:a5:3e:cf:79:b3:
48:de:6c:05:7a:58:1f:82:10:ce:55:c4:74:77:fa:
9d:ec:73:36:17:bd:54:ac:d8:17:ee:f8:fe:41:33:
2c:32:df:2c:eb:81:cd:7b:06:9f:38:27:02:de:8a:
d0:f8:57:98:d0:77:17:1c:ec:c5:88:9b:90:72:54:
be:5a:fe:4e:84:0f:b4:54:94:58:b6:46:bf:e6:eb:
a6:07:d9:c0:60:39:1c:4f:93:c0:e1:1f:c8:92:66:
3a:43:f1:97:64:85:0d:5b:a2:34:91:50:76:db:31:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:7A:D9:FB:CE:C8:AE:3A:0F:CA:4E:05:E6:F3:8B:82:B1:C2:87
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:7e:9f:e9:08:be:9c:e2:df:5f:43:dd:ac:eb:46:79:b2:
28:91:d2:f3:2d:6b:05:b6:e4:f4:72:72:c5:c1:0c:5d:e4:16:
66:14:58:49:c3:bd:33:9a:36:7d:4c:5d:22:07:ba:eb:ea:a5:
38:f6:86:2f:04:b8:ea:d6:c6:07:c6:58:97:5b:7b:f7:03:be:
0f:00:af:53:4a:9d:02:33:da:4a:3d:91:14:b2:12:ea:7f:ed:
10:35:40:ad:15:2f:fb:c3:60:88:b4:30:b5:79:28:4f:f3:0b:
fa:8c:00:54:0a:1d:13:29:99:31:a0:29:ee:5d:6e:6d:cb:01:
c9:1b:f4:87:23:67:62:d5:2d:ee:72:49:dc:8d:b6:15:19:87:
7b:5d:b0:dd:cc:1a:8e:7b:37:6a:00:fd:90:e9:c5:a5:0c:8b:
ec:01:6d:48:fb:d7:c5:ec:f0:01:15:38:f1:ea:ed:49:96:57:
5a:a8:a9:81:b9:fa:20:81:d9:d3:b5:c4:98:90:a1:8e:83:a0:
a0:df:1c:d4:5b:d9:3d:af:56:f3:51:d0:be:53:62:94:81:a2:
64:e9:61:df:60:36:a6:5d:71:ce:0c:53:ac:43:38:f2:03:31:
1e:a3:62:60:11:4d:ca:eb:44:ed:7f:ca:92:85:d3:d9:81:82:
c0:fc:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:43:28 2025 by rpki-client