Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: B9NHVuJfOaFtcgKK5sbzRFbWHsc5YL0Ww3oOJvXe274=
Subject key identifier: E5:95:99:F4:4D:73:8B:C3:E5:A4:44:A1:44:94:80:9A:42:65:D5:A0
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 0196741E078ABD1291EAEA275880F07E509F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 033C
Signing time: Sat 26 Apr 2025 22:00:47 +0000
Manifest this update: Sat 26 Apr 2025 22:00:47 +0000
Manifest next update: Sun 27 Apr 2025 22:00:47 +0000
Files and hashes: 1: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (hash: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=)
2: bEaDZXG7S2leXjfPjK7xD1jlEso.roa (hash: 0ajGtMp7A+lCJYkJshgX77oQEEisjFcdxQ+Z17PMX8g=)
3: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: WTVNXqlLR3Ac2N8AXy+xJ2AN8Uq0TbNDny54lIFaoJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:07:8a:bd:12:91:ea:ea:27:58:80:f0:7e:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Apr 26 22:00:47 2025 GMT
Not After : Apr 27 22:00:47 2025 GMT
Subject: CN=e59599f44d738bc3e5a444a14494809a4265d5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:ea:07:96:c2:25:8a:1e:f8:ba:18:9c:2e:
2b:b7:e0:9a:52:5c:ea:2a:4b:af:19:ea:73:25:8b:
0f:45:09:11:ab:c5:1b:ac:20:31:fe:af:2e:91:d6:
0b:f5:c9:0c:8c:e8:35:e7:55:29:c6:41:ca:5a:ef:
99:b1:1b:63:ad:48:fb:dd:9a:98:18:98:04:b7:b8:
e4:7f:27:c3:33:7b:74:a5:0a:26:fc:46:7b:53:2a:
7f:fd:f4:98:60:11:2b:44:bb:a0:8c:c9:87:cd:ee:
7a:7b:9b:b2:b6:aa:23:99:25:d8:9f:6a:00:5e:c8:
61:ff:8a:ed:f5:d4:e7:f6:0d:fa:5a:3b:b2:d0:ff:
52:3f:0d:80:41:d7:27:d5:9a:5d:1a:94:38:c6:9e:
aa:8b:9e:3e:26:c3:33:3d:bb:ef:8f:28:e2:aa:17:
a8:1c:53:2b:06:14:e1:4d:9d:ef:5b:f9:99:da:aa:
55:d8:4e:48:d5:bb:ff:54:38:32:0f:60:63:fc:70:
77:d7:28:4b:c4:7f:eb:ee:a6:27:7d:16:35:c7:6c:
11:62:7e:4d:a1:26:e7:6b:22:e9:2e:b1:86:e0:72:
5b:3d:71:42:cc:15:5b:8c:1c:f6:ee:ee:e1:08:7f:
c8:31:c7:e7:3e:ed:82:ba:60:20:ea:dd:d6:ff:5e:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:95:99:F4:4D:73:8B:C3:E5:A4:44:A1:44:94:80:9A:42:65:D5:A0
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ba:3d:86:4a:71:b2:5f:3e:31:6a:2d:e8:6d:20:65:60:85:
0b:bd:d3:52:66:70:f4:6e:d3:25:51:c5:f1:10:af:df:01:7d:
d6:f6:82:6e:6c:e2:72:cc:6b:4f:09:84:3a:bd:03:06:10:3d:
64:05:65:52:d0:69:9f:b4:16:8c:b5:b9:54:3e:9f:1d:6b:ea:
c9:1b:79:bd:f4:61:92:26:cb:b2:e9:64:46:42:b7:a2:25:aa:
9c:5f:8b:d1:57:c3:20:a9:19:0f:41:d2:7c:fd:b3:4b:ff:f2:
18:cd:00:65:db:22:5f:31:ae:1c:80:53:8d:d1:fd:70:e7:f2:
3a:f0:28:12:75:53:4d:c5:f7:c2:3e:21:a0:01:5c:b1:98:3f:
22:78:c8:bc:c4:aa:3e:33:f6:4d:e6:80:56:ed:7e:cd:60:8f:
f2:df:57:e4:90:56:d9:09:33:5c:96:b5:f5:9d:2f:df:1d:e8:
c0:16:db:01:89:79:a7:93:95:d2:80:7e:d1:f0:02:1a:23:3d:
c8:d6:10:42:ca:b0:4c:12:8b:e2:dc:34:13:70:fc:82:d1:02:
51:21:2f:fd:ba:16:71:8a:61:3e:1b:21:0f:37:6c:37:b7:b2:
cc:1b:ff:86:fc:40:35:1b:0d:55:9d:a1:ab:c1:6c:c4:5f:eb:
de:1d:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:57 2025 by rpki-client