Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: MnyApfPK7SYI5tuvSOh101xWRVtw1pk1wiWMecZNhpU=
Subject key identifier: F0:BD:E3:B3:AD:80:3A:FF:00:82:89:E7:B5:89:FE:4E:B7:9E:0D:30
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 01967A571756E71E01F9339D27039A7CB6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1457
Signing time: Mon 28 Apr 2025 03:00:49 +0000
Manifest this update: Mon 28 Apr 2025 03:00:49 +0000
Manifest next update: Tue 29 Apr 2025 03:00:49 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: tM7yS8T+ONQcUcx+AYh1k05GIyzJtmfyAw0fqB+zyR8=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:17:56:e7:1e:01:f9:33:9d:27:03:9a:7c:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Apr 28 03:00:49 2025 GMT
Not After : Apr 29 03:00:49 2025 GMT
Subject: CN=f0bde3b3ad803aff008289e7b589fe4eb79e0d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:d4:41:d0:0b:4d:7b:00:3f:c9:82:ee:a4:
d8:1e:e4:a9:a3:d6:82:f0:09:07:52:80:7b:81:8e:
38:06:f0:82:12:52:43:15:0f:2f:c5:1d:2e:1c:4c:
22:69:dc:b9:d5:57:8c:bd:df:8f:27:af:69:8d:a8:
43:9c:35:dc:ff:c8:60:ad:6d:e1:bd:92:51:5c:bc:
b2:7c:81:e3:7f:f6:15:04:71:79:81:a3:83:4d:78:
f7:64:e2:ec:d9:e7:de:f7:9b:8c:21:38:20:28:04:
6d:37:73:e0:01:85:a1:19:44:ec:11:70:19:70:5f:
20:02:28:8d:07:0d:29:49:f8:0e:f4:ea:a8:61:4a:
06:e8:1f:c9:87:a2:86:02:a6:f0:23:d9:cb:89:2b:
68:d6:82:54:c1:75:49:9d:00:8c:dd:d2:ef:80:d9:
d4:9c:aa:50:9c:46:f6:ad:d9:1e:e1:14:43:11:8c:
e8:80:2c:12:c0:0b:59:d8:3e:73:9c:fc:7f:23:59:
51:ca:3c:19:de:72:37:4f:f0:a1:80:a3:aa:d3:7c:
b7:d4:15:7d:98:ad:d2:1f:8f:a1:bd:3b:07:1b:5d:
c4:1e:0b:e6:48:c3:02:03:68:1f:bf:a5:26:bf:09:
28:c9:0f:a1:92:0f:b0:38:c2:94:be:5f:e1:ef:18:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:E3:B3:AD:80:3A:FF:00:82:89:E7:B5:89:FE:4E:B7:9E:0D:30
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:83:9c:b7:3a:ee:0f:76:15:a9:51:32:cd:8f:6f:15:2a:37:
e7:f0:9d:97:e7:3a:a3:53:63:5c:54:f7:0a:b3:f4:14:5c:8f:
f3:09:30:e3:1d:52:a3:d2:fb:9b:26:d1:2b:06:30:3e:00:b0:
47:bf:7a:7a:4a:cb:b7:e3:a9:34:9f:1b:fa:6e:2b:7f:36:a6:
43:8e:72:32:cd:4e:85:fb:2e:b5:ee:ac:fc:8a:79:93:a1:57:
1c:a2:c9:01:ec:03:03:ed:75:8a:fa:9c:7f:ee:da:90:bc:d7:
39:69:01:1b:5e:61:ed:a1:4f:a5:f8:c3:49:69:c4:28:e1:13:
d1:3f:2e:af:8b:66:3f:e5:4f:e3:a6:ca:98:4e:b2:d6:11:76:
ab:a3:5a:7d:79:9b:b7:1b:69:31:6a:1f:83:a2:74:96:34:ca:
68:f2:b1:3e:a4:b8:b8:22:46:70:f7:c1:d9:30:3d:42:e1:70:
42:55:96:7c:24:f5:51:00:8d:77:fb:c9:14:5a:6b:4c:11:2b:
07:65:07:54:bf:bd:cb:94:6d:8a:e5:c9:03:a7:ee:91:89:7f:
b2:35:00:1f:a0:3d:78:c5:35:29:da:bb:76:0f:48:8b:07:80:
5b:2b:f7:c6:fa:0b:dd:ff:ce:70:e1:19:d4:c5:92:df:06:5f:
65:3b:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:33:30 2025 by rpki-client