Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: YC0AfJDGigE1WdgGDVxH+NbzpjfaCnK2jvBYFXN3In4=
Subject key identifier: A0:93:CB:8C:77:86:39:47:47:C1:28:F5:45:9A:19:30:3C:67:9E:F3
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 0196827E245273261A90C43D574C81C39B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 0E86
Signing time: Tue 29 Apr 2025 17:00:26 +0000
Manifest this update: Tue 29 Apr 2025 17:00:26 +0000
Manifest next update: Wed 30 Apr 2025 17:00:26 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: sr9zU0tgE9NR2OYGAGNKIoeYVoZg/qJxxzio5eZZLKQ=)
2: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (hash: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:24:52:73:26:1a:90:c4:3d:57:4c:81:c3:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Apr 29 17:00:26 2025 GMT
Not After : Apr 30 17:00:26 2025 GMT
Subject: CN=a093cb8c7786394747c128f5459a19303c679ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:87:fc:1b:de:c8:6e:67:5d:ec:90:fc:76:
24:82:da:4f:e7:a8:fb:84:f2:0e:03:e5:fd:1f:17:
6c:c1:e6:50:6a:cb:56:31:64:66:91:12:92:74:df:
2c:14:7c:71:a9:f3:02:30:ee:05:28:c5:54:38:57:
43:2f:e7:88:60:3f:5f:1e:5d:bc:a6:e6:49:0c:3f:
09:3b:d3:a2:fd:78:90:57:24:8e:d1:65:d6:ab:34:
ff:0d:d0:86:e8:9d:00:ee:30:73:0d:57:8c:56:01:
9c:0c:f0:35:fd:4f:ba:95:ea:d1:22:13:5a:0c:2a:
bd:55:40:72:56:48:2b:04:87:4d:fd:98:5e:d6:7e:
21:04:fb:41:ea:fd:07:00:72:8c:e7:0f:b1:97:ea:
8a:30:ba:15:8d:0d:14:98:74:fe:4c:0b:f5:26:1d:
ce:11:32:2a:12:73:4f:08:7f:25:d8:97:5f:f9:ec:
df:88:a5:b5:e0:bb:aa:bd:50:7b:ea:4f:ff:a9:89:
73:bc:68:8e:7f:10:6f:0d:d8:b6:da:b4:b7:07:5c:
b1:03:35:08:77:96:82:09:60:9a:09:96:b8:75:0f:
fc:e4:38:85:af:f9:ac:75:7a:bf:dc:0d:2c:2f:44:
cd:13:3e:84:b2:c1:5b:ed:ed:dd:da:d0:a8:75:f5:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:CB:8C:77:86:39:47:47:C1:28:F5:45:9A:19:30:3C:67:9E:F3
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:6b:0e:f1:6f:63:15:64:ad:7a:39:37:fb:db:74:8d:7d:
7c:41:ab:24:3e:66:b1:7b:b0:07:08:f4:83:b6:f0:97:7c:25:
a3:5e:17:2c:47:03:f2:67:36:41:ec:cb:ee:de:77:37:e8:c2:
02:ac:ac:18:ac:0f:cc:85:b2:f0:25:fd:50:e6:5f:90:c3:6d:
d6:75:4f:8f:d0:90:02:8b:59:1b:7f:aa:6f:0a:cd:ee:d0:02:
98:72:fe:7e:e0:57:4f:d2:a5:af:1e:aa:54:34:ad:84:9c:6d:
22:66:14:ff:93:8e:dc:69:d3:30:c4:fb:02:eb:18:34:71:3d:
56:04:f1:84:44:f3:eb:e6:e7:57:31:31:cc:de:b7:0f:85:07:
d9:09:28:aa:3b:4f:1d:36:06:23:52:3e:66:bc:5a:56:d6:a5:
6e:78:57:c1:b8:d9:f0:c0:71:a2:7d:0f:64:d7:52:75:90:af:
25:1a:c3:73:fa:b7:46:40:03:98:bc:26:28:98:b8:f0:25:c6:
63:d7:d0:0a:b6:35:96:17:a8:a8:98:11:1d:7c:b6:8a:cc:46:
f5:78:98:53:fc:c0:7a:b4:47:2b:4e:87:4b:21:70:fc:5b:ee:
cd:98:da:e0:00:06:49:33:9f:1d:65:74:7c:65:e2:f9:ad:a7:
6b:4c:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:16 2025 by rpki-client