Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: fUZ63rFPKMOknX/T4nrAD38xe82CExERewlukUyCVeo=
Subject key identifier: E0:4F:09:C0:9B:62:28:89:83:42:9F:63:37:5E:4E:2A:4A:3F:0D:9C
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 019680901BEB1382D05B9761864129162071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 0847
Signing time: Tue 29 Apr 2025 08:00:50 +0000
Manifest this update: Tue 29 Apr 2025 08:00:50 +0000
Manifest next update: Wed 30 Apr 2025 08:00:50 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: XTptOYUm3+Kcmt67XS3aJnXatg/yewzCvlrPz3CvrqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:1b:eb:13:82:d0:5b:97:61:86:41:29:16:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Apr 29 08:00:50 2025 GMT
Not After : Apr 30 08:00:50 2025 GMT
Subject: CN=e04f09c09b62288983429f63375e4e2a4a3f0d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:2c:d7:be:f7:ce:5c:24:79:6c:06:f1:10:
92:53:97:bc:13:73:93:cd:3e:ed:aa:a9:20:ca:bf:
39:c6:bc:91:7b:6d:42:54:e3:ab:b2:8f:11:4a:2a:
d1:23:98:c3:3e:99:48:17:60:fc:48:b0:a0:b4:a7:
3f:97:27:7d:36:d0:46:fc:a0:31:42:28:b5:41:40:
ca:cc:3b:c2:a3:4c:8e:7f:fb:0d:6f:2d:2b:a2:6b:
a4:85:84:30:5e:6e:2e:cc:25:ce:70:25:4b:73:70:
65:f4:46:a8:ae:13:98:5b:92:de:69:7c:29:06:c2:
fd:eb:0a:c9:dd:7c:e4:42:cb:01:83:c1:3d:f0:c4:
cb:a2:80:e6:bc:dc:bf:3b:6f:c6:3c:ef:2c:c7:1d:
23:f6:7f:4e:4d:7c:ea:82:f1:cc:0a:2e:e4:e6:ec:
b7:99:9c:c2:d8:28:e3:25:e9:45:15:19:11:88:47:
7b:67:36:a5:2f:96:df:0d:be:a7:f9:1f:fe:a3:c7:
48:e6:e0:ea:84:14:1b:55:c4:67:63:69:34:cd:66:
9d:07:6a:05:db:7f:03:0a:bd:52:0c:39:c0:41:35:
55:66:17:e8:ed:ef:88:0e:18:27:fc:0b:57:35:85:
ed:29:9f:ea:7c:83:15:da:6c:37:a4:a9:6b:69:01:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4F:09:C0:9B:62:28:89:83:42:9F:63:37:5E:4E:2A:4A:3F:0D:9C
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2f:86:ad:f9:8f:42:ef:68:d6:99:9d:3e:92:54:98:aa:af:
a2:54:c2:d4:9d:9a:29:a0:83:87:e2:0c:1b:63:7d:c7:eb:99:
5c:72:e5:07:24:c0:33:7b:da:0b:4a:d0:55:9f:1a:8d:5f:48:
82:3e:67:7b:50:4e:77:39:3e:82:32:91:e7:5c:0c:fd:f9:b7:
d8:a3:b5:00:ca:99:55:d9:8a:63:c1:3c:68:db:85:dc:78:3c:
9c:d6:71:02:55:f1:37:73:fa:8c:d9:86:69:79:18:60:cb:b1:
cf:85:07:ee:c4:6f:c1:49:3e:22:94:88:b1:eb:23:0b:b6:4c:
69:ca:4a:92:8e:8e:c7:82:41:08:e9:2e:d8:95:4d:c9:8e:0e:
d2:74:d2:96:86:9f:8c:4a:24:a6:4c:5a:c0:ee:90:2f:b0:81:
f4:3f:84:5a:26:4b:95:77:cb:da:20:50:e3:2b:1c:1e:5f:36:
8c:63:1d:e4:27:98:f7:53:6d:d0:b1:11:39:ef:f4:b9:d5:be:
bb:97:d9:9d:cb:5a:04:6e:63:d1:e7:f8:f2:13:50:df:0d:28:
f3:25:86:96:6a:e7:fb:2f:60:39:d9:29:75:4c:12:4a:5f:2f:
ff:65:3c:be:06:40:2a:34:86:02:d9:89:53:a9:4c:8c:06:38:
2b:1b:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:51 2025 by rpki-client