Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: RJWgV0BNa8IESILIY5ArABRPEmf32rEnt205ZkMcKeQ=
Subject key identifier: 78:43:B6:72:D7:66:1C:50:AF:87:7B:53:20:40:9A:F5:C6:9B:BF:36
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 01968359FB49E5FDDB6A5B538BFE618734CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 026D
Signing time: Tue 29 Apr 2025 21:00:34 +0000
Manifest this update: Tue 29 Apr 2025 21:00:34 +0000
Manifest next update: Wed 30 Apr 2025 21:00:34 +0000
Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: V/X+wQ8Jy1ia5FNZy52sMdOCD0wr2Dwp40fsANrk6rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:fb:49:e5:fd:db:6a:5b:53:8b:fe:61:87:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Apr 29 21:00:34 2025 GMT
Not After : Apr 30 21:00:34 2025 GMT
Subject: CN=7843b672d7661c50af877b5320409af5c69bbf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:b5:f4:78:1f:02:59:fc:87:62:5f:82:c7:
cc:4c:39:63:dc:b0:4f:b1:8a:1e:3f:98:d8:5d:b5:
b5:57:02:56:ec:3e:71:cf:bf:06:87:ae:56:b0:f2:
ef:14:bf:d6:71:25:79:18:61:48:af:c9:bc:18:6e:
71:24:65:e2:45:b6:4e:14:d9:e3:a5:b0:58:1a:ec:
90:c6:94:37:87:59:72:56:2f:bf:e8:63:a5:bd:f4:
d7:37:37:73:7b:48:75:35:a6:ac:d1:fd:f7:b8:1e:
5c:4d:81:ea:9a:0f:93:e7:4a:6c:be:56:9c:d6:cd:
b8:dc:fa:2d:cf:4f:6f:2b:21:e2:eb:47:12:09:6b:
3e:9f:cd:11:f7:69:f1:0c:b3:15:5d:86:70:2d:96:
3f:c3:b1:6d:58:7b:4e:ab:7c:94:10:68:5f:d9:dc:
1a:cb:f4:51:a2:8e:7f:6e:4d:ad:5a:a5:00:42:83:
00:90:bb:e8:b6:14:fc:95:32:65:02:14:cf:d1:60:
ce:f3:5f:bd:97:dd:78:e6:86:73:c6:ce:6e:05:d6:
37:3c:0b:3b:26:8b:bc:63:4d:b4:50:22:da:90:8a:
64:85:34:df:82:b6:49:73:01:c1:36:4e:06:34:76:
49:61:33:8c:07:fe:94:4c:c5:d0:93:2b:8e:5c:fe:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:B6:72:D7:66:1C:50:AF:87:7B:53:20:40:9A:F5:C6:9B:BF:36
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:fe:44:39:80:9d:34:2d:1f:44:5f:93:57:8a:d5:5e:c5:
58:fd:90:b2:57:08:85:ed:cb:97:de:86:62:3c:bb:06:55:27:
bf:be:57:83:e7:37:97:b4:37:e7:a3:63:aa:fc:c1:76:ab:9b:
1a:27:63:c5:84:76:16:73:30:bd:d6:37:f6:ba:86:82:e9:d7:
8a:d4:3f:4d:96:2e:21:a0:e0:a4:d4:35:09:5d:bf:1e:63:64:
5a:11:62:8f:58:37:7e:26:ab:f7:10:38:61:fa:4a:14:ff:1b:
fb:10:28:fb:c5:08:5f:11:c1:36:d5:cc:00:f3:e2:5a:03:ad:
55:c5:a1:0a:7a:bb:3b:32:92:f6:68:9f:48:e0:6d:7d:41:84:
e1:e7:b8:7b:9d:8e:30:02:4c:a0:c7:74:e4:4b:95:7e:7b:da:
53:b6:6f:bf:c1:da:be:5c:94:be:70:0b:e9:68:76:ac:c3:35:
c8:54:56:5a:3c:05:99:96:1a:d2:76:c6:4f:d6:0c:7c:d6:7c:
41:51:bf:aa:d4:23:88:58:fc:f1:84:6c:8c:fc:12:13:ce:28:
18:7e:e0:72:5c:ff:89:9e:29:87:39:7f:13:b5:63:69:f9:92:
35:c9:86:05:54:fa:cc:2b:dd:f7:95:e2:97:8e:5f:1a:c1:c5:
a2:0e:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:32:48 2025 by rpki-client