Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: t1wHCNm4cqqaM7k4OKuMOIMBiO/slingB4TIdavYRf8=
Subject key identifier: EF:A9:5F:55:23:78:25:4E:8B:0C:CA:3C:23:74:27:5C:A2:FB:2B:6C
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019674F990A7AE4B23B9DF1F64684027BCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 11A0
Signing time: Sun 27 Apr 2025 02:00:34 +0000
Manifest this update: Sun 27 Apr 2025 02:00:34 +0000
Manifest next update: Mon 28 Apr 2025 02:00:34 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: 8OlhT7aXQrXJGrr5u+f1eYGuHJeIB6csAeKtPmQATrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:90:a7:ae:4b:23:b9:df:1f:64:68:40:27:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Apr 27 02:00:34 2025 GMT
Not After : Apr 28 02:00:34 2025 GMT
Subject: CN=efa95f552378254e8b0cca3c2374275ca2fb2b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:18:9a:34:4e:80:e8:f8:34:93:92:25:a9:e8:
b5:08:bb:d3:78:a1:d6:74:7a:90:99:4b:08:38:b1:
cc:08:e6:87:8a:d4:d1:a4:d9:c9:ee:44:0a:73:5a:
9a:7a:1a:49:95:74:db:0e:6b:12:e1:9c:b3:37:6a:
da:0e:19:15:f3:eb:a5:6b:02:bf:2e:3f:ca:d1:4d:
7b:4b:ae:ad:b1:bd:fa:0f:8d:4c:1e:8a:95:66:cc:
ce:e9:40:05:5c:24:ec:64:77:6c:b1:71:fc:cb:38:
bb:ec:69:f6:53:1e:c1:a0:c2:97:9c:83:7a:fb:30:
8a:07:35:5c:d9:9e:61:25:6f:fd:7c:c8:e3:3c:3f:
bc:13:6b:00:eb:37:6a:68:f7:69:fd:f0:48:aa:21:
f7:96:f2:88:2f:a1:54:9b:27:94:88:47:e0:71:3a:
87:6c:b9:ee:74:37:3f:5d:72:46:76:55:0e:44:95:
66:a2:c5:c1:f4:eb:d2:1b:36:73:f2:df:85:05:91:
69:e2:7c:4c:88:79:b6:46:5c:6c:c1:0b:3a:34:ed:
c6:b6:f4:80:2f:36:e0:32:fd:00:73:a4:9c:82:4e:
ed:b0:f7:67:a2:39:1e:4a:f4:34:63:53:af:1c:d4:
c2:b3:49:10:7f:be:5b:0e:6b:2c:e4:ac:0e:9c:83:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:5F:55:23:78:25:4E:8B:0C:CA:3C:23:74:27:5C:A2:FB:2B:6C
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:83:04:2f:60:66:a1:f2:63:0a:2f:d0:85:93:07:d9:e3:
cf:58:53:7e:af:ad:80:b9:3f:22:12:6c:2f:76:5e:aa:25:b4:
23:8d:5f:b3:c8:f8:75:06:15:5b:e4:f5:18:5d:ca:69:4a:9d:
84:85:69:b2:63:09:e0:f3:0f:6f:22:59:27:d3:7f:8b:9d:f7:
43:12:09:09:aa:8f:00:ea:5f:fd:3b:51:30:0b:87:b7:08:88:
98:4b:ef:4f:75:f1:25:cf:df:1a:8f:66:40:7c:ce:97:28:30:
23:7b:2f:10:28:71:40:71:d7:41:3d:45:d5:91:a8:d5:64:7c:
32:3c:f8:11:ca:0e:3b:d3:13:97:0e:ec:11:ab:96:03:65:df:
77:fa:9d:30:44:09:ec:1a:2b:5d:c8:04:1e:34:f2:05:50:0f:
3a:b2:45:a3:cf:61:c6:ff:8e:d3:6b:3a:20:4a:7e:df:67:c8:
6e:19:2c:a1:d6:5d:e4:d5:73:c6:aa:8a:d5:72:1a:78:a1:3d:
ff:35:b7:87:41:d1:81:53:fa:75:25:3d:03:12:d6:da:69:2c:
58:85:b8:c0:8d:8e:50:67:6a:8b:cc:7a:54:3a:d0:5c:73:87:
61:34:1f:1b:49:bd:2d:12:49:4d:e5:4a:06:89:cf:b6:f0:03:
48:bb:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:02 2025 by rpki-client