Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: +IkX4M/mNhjXupnt5M2j9n5lyPgmUzZhHg9fKqwXEKA=
Subject key identifier: 3D:C0:10:E4:83:35:5B:1F:D5:A2:D3:BC:F1:4B:83:4B:76:D4:0F:A3
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 019680FDF176048D2AF5E11092B1D31D1D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 09BE
Signing time: Tue 29 Apr 2025 10:00:48 +0000
Manifest this update: Tue 29 Apr 2025 10:00:48 +0000
Manifest next update: Wed 30 Apr 2025 10:00:48 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: BCzTa7pTOQHcpYWrJvH5/TlW85oikfNpTeeaZ+z058A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:f1:76:04:8d:2a:f5:e1:10:92:b1:d3:1d:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Apr 29 10:00:48 2025 GMT
Not After : Apr 30 10:00:48 2025 GMT
Subject: CN=3dc010e483355b1fd5a2d3bcf14b834b76d40fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:3d:58:bd:05:af:56:c3:31:a5:3f:96:33:
ae:17:18:9a:de:e4:a9:62:da:b6:fa:77:d9:92:f4:
d2:86:6f:d0:c8:b0:b3:dd:98:67:8b:db:e0:67:72:
20:fb:d7:91:ef:4a:c1:99:21:41:59:ce:e7:d7:58:
23:64:68:a8:b3:cf:ed:8e:a8:ee:ea:e5:e6:9a:92:
31:e8:3a:c5:91:1e:ae:11:10:e6:b8:8c:0a:be:c6:
2e:7d:9f:88:84:33:b7:c4:66:0e:7e:9e:d6:2b:0c:
90:f7:31:a7:03:ac:db:88:22:35:26:24:32:e4:7e:
16:de:fa:56:3c:12:07:fc:eb:74:55:bd:a4:0b:ee:
2f:8f:48:c6:0f:88:b0:43:3d:22:43:2a:7b:2f:d7:
53:f2:76:c7:4b:0c:ce:7f:d6:b0:c2:ee:00:e7:fe:
3a:51:f7:7b:b6:3f:0d:7d:7f:c0:ca:a8:21:31:e3:
72:d9:4a:77:f2:66:9a:2c:bf:d9:b3:57:e7:d3:5b:
a2:76:1c:ba:6c:4c:fe:72:0a:a0:7e:f7:17:29:2a:
5c:31:e5:0e:2f:a2:48:ef:ab:2a:c5:72:d9:d6:7f:
c5:10:4f:92:c5:1d:f3:75:cd:43:3a:f5:de:1b:e7:
b5:ef:e1:be:64:a1:57:e6:30:0d:46:7c:34:ee:95:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:10:E4:83:35:5B:1F:D5:A2:D3:BC:F1:4B:83:4B:76:D4:0F:A3
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:3f:fe:aa:ec:ab:e1:81:8d:97:ce:e9:6e:96:2e:f1:52:
00:6b:48:a8:da:70:a2:a7:e5:9f:64:22:23:92:66:f2:06:5b:
15:1f:51:f5:83:7d:b8:2f:7a:93:ef:12:a9:e2:ed:35:44:bb:
09:62:58:ed:ff:f3:8e:83:e8:7a:4a:8f:30:09:af:ad:32:cd:
7b:7e:21:fa:6a:8b:bb:81:fb:d2:67:f7:0d:6f:5c:d2:d7:fb:
c2:b4:17:57:7f:4c:20:76:0a:85:34:70:8b:1b:57:5b:04:a0:
c4:57:01:db:d3:44:ef:bd:82:e9:d7:f2:84:11:9a:ae:94:96:
f2:16:0a:8c:55:9c:8f:fd:ef:e4:10:ab:f8:2b:35:c2:a7:e8:
39:77:46:c2:91:8d:02:09:c2:eb:0f:21:ec:6d:9a:c6:d8:a1:
45:02:b1:35:61:ee:ec:79:32:7c:f4:fa:e7:dc:d9:b9:e7:3a:
18:f6:56:a4:de:e8:4a:d4:e4:90:cd:8f:fa:27:e2:79:8d:4a:
9b:e9:3d:e2:15:6b:30:15:46:4e:7c:f9:42:fe:8b:63:ce:38:
ca:ba:31:ad:ae:19:c7:c5:d6:e8:ff:e2:5c:e4:6c:b3:57:01:
0b:32:42:58:63:f0:db:6e:cb:47:88:02:1b:88:25:94:9d:1d:
c1:5c:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:15:22 2025 by rpki-client