Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: HrYKcFLsa748Nst1ntzX27l8TeGy63OVGcuUjjuNjBE=
Subject key identifier: 76:FB:81:8F:72:7E:5F:8E:EF:9D:3E:47:6B:58:DE:A4:A1:E6:67:FE
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019674C295741E2A48C6EB78D9E764F08114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 023E
Signing time: Sun 27 Apr 2025 01:00:31 +0000
Manifest this update: Sun 27 Apr 2025 01:00:31 +0000
Manifest next update: Mon 28 Apr 2025 01:00:31 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: 4tPX8fZr8sjA4ec0JNJFqu8DOzidw2DrEx3fSZUm1TU=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:95:74:1e:2a:48:c6:eb:78:d9:e7:64:f0:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Apr 27 01:00:31 2025 GMT
Not After : Apr 28 01:00:31 2025 GMT
Subject: CN=76fb818f727e5f8eef9d3e476b58dea4a1e667fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:62:09:f5:55:cc:02:72:f4:44:04:58:3f:
43:9c:25:bd:3a:8d:eb:d2:4a:80:40:79:28:81:9e:
45:54:42:4d:90:0f:c7:b9:c9:b7:1f:17:fa:42:fd:
e8:5f:61:18:cb:b1:78:df:56:d4:1c:9f:a3:3c:67:
89:a6:68:ed:eb:90:f0:e7:04:c8:82:05:d6:14:92:
c0:88:e2:e2:cb:7f:c1:6f:d8:bd:bd:c1:3e:08:16:
8c:8a:5a:49:f4:28:64:52:bf:b6:1b:de:ef:5a:e5:
86:dd:6e:64:41:d3:b1:73:88:a7:1d:f7:8d:15:cc:
b8:8a:3c:fb:0e:4a:4d:7e:0c:3d:84:bf:d1:dc:d9:
de:1c:56:d8:25:8d:f5:66:32:89:42:32:03:f1:33:
b0:cb:48:4a:a6:47:6f:22:14:49:f0:9a:d1:37:7b:
2c:65:ef:78:aa:2e:42:58:d3:7a:e1:2d:71:42:01:
89:a0:c9:e8:ab:8a:e9:b2:95:4f:5d:dd:8b:91:0d:
3c:f3:3e:1b:8a:17:16:76:96:1a:46:e0:70:9e:c0:
aa:43:d2:49:5b:bd:f1:f9:93:e9:8e:da:a9:01:c8:
0b:2b:e4:a3:7b:8d:c2:4d:94:0e:74:3e:0d:06:9d:
1a:f6:e3:c1:f9:a8:ee:ec:7f:5d:14:3a:fb:7e:7c:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:81:8F:72:7E:5F:8E:EF:9D:3E:47:6B:58:DE:A4:A1:E6:67:FE
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:0f:59:0e:c7:2b:0e:ab:da:33:69:aa:dc:e2:ea:42:7a:
0a:55:b4:c7:cb:89:34:89:f7:22:ba:d4:a4:70:ba:1b:1f:d5:
a8:c1:cc:5f:a1:5a:a8:67:82:8d:3b:d9:8b:d6:83:a2:bc:ec:
01:c1:6e:79:d9:dd:3d:45:1a:4a:0d:f4:dd:7a:27:b9:6a:57:
47:7b:73:ad:ad:c5:77:d0:af:44:d4:8c:6f:40:8d:54:de:84:
f4:1e:5e:23:dc:21:ff:a8:51:30:1a:f5:51:d1:d3:f4:0e:bf:
67:19:10:ff:fb:5e:da:d3:b9:3c:6f:64:48:8b:fe:b9:e6:f0:
af:77:b8:45:48:f3:c5:8b:ee:0d:26:37:fb:12:3a:67:99:bb:
b4:99:bb:fb:00:cc:f0:7e:8e:da:88:04:3e:21:49:26:bd:25:
62:e9:c6:7a:20:dc:0f:3c:cd:25:c5:c4:47:a6:62:be:11:8b:
a5:c5:8c:d8:45:33:02:01:44:9e:82:78:8d:7f:61:72:eb:ac:
97:d0:da:4d:80:d4:cb:82:da:6f:17:c3:11:bd:7c:dd:77:3e:
01:7f:3b:0f:b6:83:09:a2:b5:df:a1:f6:1b:48:48:de:a4:82:
69:b6:e1:7b:65:fb:81:bd:44:a0:eb:93:74:7b:88:5f:09:c4:
38:72:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:38 2025 by rpki-client