Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: DdyeDHenPSb3OTQ90GqZkxc4QGHyoXOEEafg5zd4KV4=
Subject key identifier: 78:40:16:62:4D:23:76:BD:5F:3D:2C:16:10:B3:53:BC:F1:49:98:EB
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 01967FEAFEE4C3239A85752BEA0F30FF6A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 05:00:29 +0000
Manifest this update: Tue 29 Apr 2025 05:00:29 +0000
Manifest next update: Wed 30 Apr 2025 05:00:29 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: 1zjhgM7BykR9ayg2rHdauWICPzlL9+czhA3vC14PYGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:fe:e4:c3:23:9a:85:75:2b:ea:0f:30:ff:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Apr 29 05:00:29 2025 GMT
Not After : Apr 30 05:00:29 2025 GMT
Subject: CN=784016624d2376bd5f3d2c1610b353bcf14998eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:bd:a2:d1:c8:e9:2e:5b:9b:45:f1:2c:97:
93:9e:6e:e4:fd:6a:ce:5a:de:25:52:37:39:a5:44:
ab:c0:b3:b4:a8:d5:70:ef:6f:4c:40:0f:fa:88:a4:
6b:7c:37:c3:a5:20:3e:5d:45:51:a0:02:1a:e0:78:
b5:b8:94:fd:d8:ed:e8:1e:7f:c2:fd:52:63:d2:99:
b6:b5:76:45:c1:a4:57:b6:96:45:d4:35:6a:53:30:
d8:3a:e8:71:ac:03:da:bf:f8:95:04:f5:13:bd:25:
b0:32:6e:bd:88:8a:a4:78:ce:e4:1b:3e:15:35:97:
35:e6:9d:d2:bc:16:b1:b6:36:8d:9f:99:09:db:f6:
0c:21:5c:c0:7a:d0:9f:d6:57:d9:18:63:e5:c9:59:
7c:d0:dd:9d:71:6f:0b:6c:81:86:db:40:58:0e:a2:
a2:66:78:6c:f8:bc:40:3f:31:70:41:7c:aa:94:ce:
72:55:01:04:c7:bf:52:e1:11:1b:dc:a8:a7:80:3c:
14:bd:d4:40:35:66:60:1b:29:91:76:1e:30:54:99:
ba:b3:21:72:8b:52:db:07:6d:84:37:48:e7:59:bc:
68:19:f4:6e:3c:f4:3c:3f:33:df:df:ac:03:cb:b4:
20:fb:63:b1:b6:59:34:e7:a8:e9:20:b5:1d:f1:56:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:16:62:4D:23:76:BD:5F:3D:2C:16:10:B3:53:BC:F1:49:98:EB
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f6:1d:b5:bf:a0:7e:0b:a2:ab:6a:e4:d3:fc:05:00:f9:75:
2f:f3:11:ca:95:ad:1a:10:7a:1a:33:de:ad:c8:90:cf:72:4a:
b4:88:43:47:3f:40:a3:f8:ea:de:76:c6:18:d2:8b:68:d3:aa:
c2:1a:60:a2:3d:fe:1c:ac:03:25:ed:89:10:bd:ea:12:1a:43:
17:90:2d:8f:85:61:9e:ad:b9:7d:7b:5b:82:e7:c9:1a:bc:6e:
9a:f6:f2:76:0b:31:e7:ec:8e:b0:a7:f7:cd:80:be:b3:8c:1c:
f0:e1:89:5d:d6:13:ac:82:90:8f:49:2e:8c:3d:59:23:48:b7:
3c:8b:e2:07:00:64:43:54:49:b0:60:71:e9:12:4f:9e:5a:fe:
d7:1d:ca:43:e9:92:8b:57:0f:ee:07:b1:2d:46:d7:43:d1:65:
05:32:46:67:5b:df:85:f1:3d:c5:91:4d:80:b2:66:86:5e:8b:
92:2a:b4:0a:b4:f8:d8:87:c9:cf:c4:6e:f1:6d:da:d9:82:48:
d6:62:dc:db:3e:84:fa:24:f4:b9:8a:11:b4:0c:03:b5:81:73:
7a:82:7d:f5:04:a4:d6:56:fd:9a:e1:20:b2:80:6d:e1:98:e3:
9d:ef:d8:b5:59:9c:11:94:bf:f7:8e:10:d0:fa:aa:cc:4a:fb:
41:10:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:20:17 2025 by rpki-client