Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File: iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier: /sodqg5upqKP8DJngM6u1rp7ktCbDK8A3J9LztA5ge8=
Subject key identifier: D4:84:02:CE:9C:7B:EF:B4:87:AE:BC:BF:F7:04:D0:82:A9:C5:8F:55
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 019678319A0B5B21A49F9222C38ABF858AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number: 08D8
Signing time: Sun 27 Apr 2025 17:00:38 +0000
Manifest this update: Sun 27 Apr 2025 17:00:38 +0000
Manifest next update: Mon 28 Apr 2025 17:00:38 +0000
Files and hashes: 1: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: +Y+pGwYA2NdGotKDMQZdi9+74V+dQ0hTZ7Yb51jPKyY=)
2: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:9a:0b:5b:21:a4:9f:92:22:c3:8a:bf:85:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Apr 27 17:00:38 2025 GMT
Not After : Apr 28 17:00:38 2025 GMT
Subject: CN=d48402ce9c7befb487aebcbff704d082a9c58f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:50:86:5f:c3:16:1d:99:e4:17:30:e1:90:
2e:ad:4a:78:23:93:fb:39:3d:06:d6:a0:18:fa:33:
79:0c:10:6b:de:ba:64:da:e5:c0:76:2e:47:c1:a0:
cf:7f:55:3e:5e:57:9d:cd:82:52:b0:56:8d:3d:8b:
aa:48:d9:26:99:d8:ca:c0:09:64:fe:fc:9b:21:01:
3d:78:a2:30:dc:91:6d:9c:ac:72:b1:7f:a4:11:8f:
eb:51:da:40:0b:62:29:fc:cc:63:e2:00:62:75:5d:
3c:29:3b:30:86:31:9f:cc:fa:19:22:2a:a4:ad:45:
62:d8:c9:71:da:7d:c6:d8:18:65:d2:2e:6b:58:78:
ba:8d:d8:27:a6:b9:f0:c2:5a:56:ce:8f:7a:c6:61:
24:a3:74:f0:77:bd:b8:c5:13:dd:03:83:9c:ca:09:
dd:b5:f0:d6:10:49:18:00:d2:92:05:33:6c:f9:87:
76:05:09:6a:39:b3:2e:a1:47:3f:ce:cf:d7:16:6a:
58:dc:48:2b:15:6e:35:0c:27:40:f0:26:fe:1d:70:
a2:79:56:05:9e:a5:60:16:1b:08:89:ff:50:19:3f:
e0:6e:e9:89:09:b4:1e:d9:cf:a7:cc:50:69:86:b5:
ff:0a:a6:59:55:e0:37:0d:f9:bc:bc:4d:1a:68:e7:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:02:CE:9C:7B:EF:B4:87:AE:BC:BF:F7:04:D0:82:A9:C5:8F:55
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:a4:68:bd:30:32:b8:ec:fe:9c:09:fb:e7:0c:97:d4:dc:
8a:7a:f9:d6:cd:93:39:85:15:e9:43:2d:f8:62:67:33:72:25:
cb:24:3d:4b:6c:70:46:2c:d5:4a:38:ba:d9:9c:39:ec:38:af:
75:55:c4:d3:11:e8:b5:59:2c:09:2c:b0:a1:98:5f:4c:a7:c4:
b3:87:be:67:c4:98:8b:66:d8:f4:91:22:04:c9:5d:25:a9:ef:
e2:4d:1b:4e:6b:b5:9c:d0:5b:56:4a:59:3e:82:c2:78:47:9a:
81:c0:4c:ec:d4:72:a3:ec:07:6d:1d:2f:7a:47:3a:37:e3:29:
20:27:07:c0:20:9c:55:f4:8f:8b:28:7d:cd:2e:55:4d:9b:2a:
5b:45:d5:4d:f8:3f:b0:81:3b:f6:41:48:8b:e0:c3:7f:b8:da:
ef:3a:58:94:c9:d3:7b:8a:92:d4:d4:f6:da:3c:e6:96:e1:d9:
1e:da:1f:4a:f4:2d:5b:89:4a:81:99:08:40:11:ff:bf:8e:76:
4f:5f:b4:6a:d6:31:7d:bf:41:b9:fa:b3:ad:06:8b:82:df:00:
3d:20:25:2b:b6:29:9e:29:75:88:69:f0:31:d5:57:26:62:b7:
02:50:8c:99:b7:38:8c:88:98:06:ec:93:45:f8:7a:4e:67:44:
74:72:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:01:12 2025 by rpki-client