Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File: ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier: nyjtTdCn+M32kH4z+OLFHQCFDhGdascssUKM+6mAA2w=
Subject key identifier: 41:4C:1C:57:E4:58:A2:C9:E4:16:7D:7B:73:66:50:36:6A:7C:24:63
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial: 019674FA2FC3EF93AC7EB07BC934598BE38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number: 1280
Signing time: Sun 27 Apr 2025 02:01:15 +0000
Manifest this update: Sun 27 Apr 2025 02:01:15 +0000
Manifest next update: Mon 28 Apr 2025 02:01:15 +0000
Files and hashes: 1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: jp8ysIT543HzDLiW3Xo9/sWJZsVwd21kgkg3yW6sPHU=)
2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:2f:c3:ef:93:ac:7e:b0:7b:c9:34:59:8b:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Validity
Not Before: Apr 27 02:01:15 2025 GMT
Not After : Apr 28 02:01:15 2025 GMT
Subject: CN=414c1c57e458a2c9e4167d7b736650366a7c2463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:66:b9:85:b7:64:42:70:01:8c:99:08:23:
7a:d1:91:73:95:d1:aa:9a:99:27:bf:97:a0:82:d6:
a9:de:a4:99:67:7e:c4:d4:4f:a7:67:7e:fe:b4:38:
33:55:b9:49:6c:93:1c:70:c6:bc:19:41:02:90:95:
ff:28:e3:d2:cd:98:0d:30:32:29:09:59:f9:06:1e:
6b:9a:51:ca:b2:80:77:d9:82:2d:c0:b4:ff:a0:4d:
5b:69:4c:16:c3:70:ee:7a:9e:71:ec:34:fc:dd:b0:
d3:ff:25:c7:3d:67:16:29:3c:da:f9:06:14:ff:49:
51:45:31:32:ad:94:b9:6c:41:1a:7b:9f:70:d3:2c:
57:b6:5d:1f:c2:24:cc:60:f0:a1:25:71:3c:e5:2d:
c4:92:6d:c4:c1:29:a7:c4:de:0d:ea:11:fc:d4:e9:
4c:ca:5e:e9:d3:9d:e8:63:3f:85:51:b9:27:ce:8e:
39:70:91:ab:87:96:75:dc:b0:7c:71:39:1d:ed:0c:
f4:d6:67:21:63:2c:96:d2:71:90:7e:17:f3:67:f2:
34:13:1f:78:6e:12:38:6a:ca:5c:05:eb:9a:9f:3e:
12:9e:30:d1:8d:86:48:78:69:88:87:0a:2a:37:2d:
87:a3:e9:6f:a5:fa:f2:d5:0a:dc:ed:b0:bb:d0:a3:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:1C:57:E4:58:A2:C9:E4:16:7D:7B:73:66:50:36:6A:7C:24:63
X509v3 Authority Key Identifier:
keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:97:40:fb:67:8b:9f:64:4c:8d:e8:76:21:09:d4:14:6b:
97:8d:9a:68:63:84:92:b5:e0:13:90:c1:04:d8:e1:18:55:a3:
ee:5a:5c:66:59:3f:63:35:f1:5d:b1:71:68:72:56:89:1d:35:
06:bd:31:c3:76:ce:cd:98:35:14:d0:cd:12:fe:0d:c4:3f:f9:
6f:98:25:4f:b0:cf:5d:fb:b8:62:3f:60:14:97:82:64:04:e2:
d9:99:58:1d:bc:4f:3f:95:51:1e:4c:9e:f0:ff:1f:8a:46:b7:
ee:83:72:e4:f0:5c:25:40:6c:c4:ed:95:d7:5c:87:d0:10:03:
1e:92:c0:8d:ba:39:cc:f9:43:6f:6b:02:24:64:43:29:cf:94:
1f:28:86:09:2d:f4:5e:86:12:87:4e:26:bf:b8:36:09:e7:4e:
0f:90:51:78:a2:6b:f4:90:13:23:e1:35:9a:32:93:44:61:76:
d0:31:53:88:1a:95:50:97:77:25:f1:fb:6b:1f:20:33:a1:be:
1e:0c:90:40:62:55:77:47:dc:7b:7e:f5:39:d5:77:86:d8:e9:
c7:fd:85:e3:f4:f6:43:72:ae:86:7f:04:b2:26:9d:d6:7a:7e:
28:5a:d8:62:07:05:4a:b7:84:eb:cd:17:b9:fb:70:13:48:b9:
e6:05:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:13 2025 by rpki-client