Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: VPLKF5uFef/7CiZ4g4H4FeE1V0Vehde1eVXY+Atf2Es=
Subject key identifier: D1:90:EA:8F:11:7B:05:D3:2E:C2:3A:60:03:C2:98:0E:76:9F:7E:10
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 01967AC4F10E022C1C64053ED26902FB0587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 05FE
Signing time: Mon 28 Apr 2025 05:00:49 +0000
Manifest this update: Mon 28 Apr 2025 05:00:49 +0000
Manifest next update: Tue 29 Apr 2025 05:00:49 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: bXOifIJqox9vH2qFITBMWm/EvdON6ws80gihBTaWRRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:f1:0e:02:2c:1c:64:05:3e:d2:69:02:fb:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Apr 28 05:00:49 2025 GMT
Not After : Apr 29 05:00:49 2025 GMT
Subject: CN=d190ea8f117b05d32ec23a6003c2980e769f7e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:17:bf:e9:03:22:6e:8f:69:c2:23:61:5b:
15:5a:af:2d:e6:75:3d:aa:7e:4c:f0:5a:97:e6:b9:
c4:40:d2:28:39:20:cf:18:64:58:0b:2e:9d:22:34:
22:bf:c2:0a:67:e7:20:f8:bd:d2:1c:ce:1e:ff:c8:
5a:bc:d3:5e:36:1b:d2:6a:82:bf:1e:12:80:84:a1:
b4:4f:d6:42:91:97:63:6b:88:98:13:b5:5b:82:40:
05:46:56:ef:77:d7:37:82:87:8c:f5:e3:be:3f:88:
74:a8:b3:94:a7:fb:0d:71:64:4f:d7:21:23:25:b1:
06:b7:81:27:ee:f2:31:62:5e:c7:05:5e:0c:8b:f2:
c0:1e:93:60:e2:83:4b:9f:46:9d:68:da:39:df:c0:
4f:73:9b:75:9d:6f:5b:68:9e:c7:f1:64:0b:ce:22:
c1:f6:cf:2e:37:af:98:10:d1:77:0e:72:90:f1:52:
2f:4e:ce:ee:ff:00:ea:da:1e:23:7c:9d:b9:9c:8a:
be:94:ff:67:66:5f:f5:fa:af:ac:70:b6:8f:55:f2:
1f:1b:7f:4e:ff:59:ec:2a:d8:3e:7a:c8:03:2b:68:
30:54:1c:68:fa:be:0f:0e:45:60:8a:7f:d4:69:81:
a7:af:fa:d6:30:f3:d6:c8:43:a0:f7:43:b1:07:98:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:EA:8F:11:7B:05:D3:2E:C2:3A:60:03:C2:98:0E:76:9F:7E:10
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:e3:e0:2e:54:3e:80:1e:77:75:8d:4c:29:f9:64:24:f5:
0f:ed:59:72:c4:b3:d8:6c:ae:19:3e:fe:93:10:7c:56:16:6b:
30:8f:b0:38:0f:f6:98:2b:da:71:91:9e:59:98:42:4c:68:27:
7a:79:09:b8:a8:1d:ac:b8:ce:5f:2f:81:41:a9:9d:00:af:be:
16:b7:83:54:8f:63:0f:50:76:14:81:01:d9:ab:3c:01:8e:af:
dc:9a:5a:1e:70:49:1f:4f:c6:e9:bc:24:50:c2:d9:0d:e0:39:
e9:bb:b2:e9:0b:3d:77:02:29:1d:18:17:5e:0a:a8:71:37:c6:
ab:79:b5:f7:47:a5:1a:09:0b:f6:f0:e7:59:d4:c4:43:4a:40:
20:35:ef:9f:95:3a:1e:5b:77:9f:f3:b7:6b:72:11:86:11:fe:
8f:fd:14:3b:3b:c4:a7:5f:67:0c:81:ea:53:6e:9c:0d:24:67:
94:21:74:d4:3c:88:08:af:80:2b:2b:b0:f2:ad:1b:15:01:51:
40:6a:14:c8:54:6a:ee:59:6b:4a:a9:42:84:63:d7:45:cb:f8:
65:ae:02:51:6b:2b:11:20:46:57:86:4b:56:97:2b:17:d3:f3:
a7:83:48:cf:e0:49:ed:dd:e7:58:7c:01:c7:41:a1:e1:c6:a5:
e1:d7:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:34 2025 by rpki-client