Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: x2BVqIy5O7x4QfdHmXC5gC0S4cGdzGI7Cfv3lOX7os4=
Subject key identifier: 75:DE:D9:A7:76:7E:57:E0:72:FA:64:75:D9:0F:C5:BE:8B:EC:5B:02
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019681A268CD25B1BF9A76CDBCE29FE549BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 10A9
Signing time: Tue 29 Apr 2025 13:00:26 +0000
Manifest this update: Tue 29 Apr 2025 13:00:26 +0000
Manifest next update: Wed 30 Apr 2025 13:00:26 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: 3hO0H7g8Gk5gt4COzSD4zDev5OpNh3xr5cwAr4amGAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:68:cd:25:b1:bf:9a:76:cd:bc:e2:9f:e5:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Apr 29 13:00:26 2025 GMT
Not After : Apr 30 13:00:26 2025 GMT
Subject: CN=75ded9a7767e57e072fa6475d90fc5be8bec5b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:8a:db:b8:83:92:04:89:0c:47:8a:be:a3:
cb:37:d0:3d:4d:74:1a:7e:bb:56:6c:45:0d:cf:22:
88:9d:86:73:d8:b3:f7:71:2c:25:4c:1e:ef:21:c8:
7e:fa:8d:67:38:78:30:b3:5c:8d:6b:30:c5:63:2d:
e6:fc:3e:65:88:ac:c8:8e:b8:97:69:3f:01:43:63:
9b:31:8b:ea:f9:98:a0:42:33:14:78:88:64:5d:17:
7d:3c:24:3b:3c:5e:b5:3e:8e:d5:03:6a:50:97:29:
06:40:23:9a:d2:f1:14:e0:0b:c4:42:34:d3:93:9b:
3b:8e:00:70:bc:8e:3a:b3:4a:e6:aa:d2:8b:c1:67:
7f:47:fc:9f:15:6a:87:7b:99:86:d0:54:e0:58:5c:
52:16:d2:30:69:f2:11:03:51:3c:a5:79:c3:dd:6f:
5c:02:2a:cc:70:ba:96:02:c7:43:d7:af:af:5f:5f:
2a:a0:a9:74:23:95:d8:82:59:74:e8:9f:74:20:fa:
3a:d2:4a:f5:af:ba:64:5a:36:02:df:59:b8:ca:0f:
29:ca:d5:27:10:ca:ca:0f:72:03:a6:8f:db:2e:cb:
d4:10:15:2f:2b:22:0a:96:f3:37:d3:13:3a:4f:08:
86:b6:07:fa:e3:97:5d:22:61:f5:34:8e:b1:d9:a4:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:D9:A7:76:7E:57:E0:72:FA:64:75:D9:0F:C5:BE:8B:EC:5B:02
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:d2:25:20:8f:fe:c6:c3:40:12:34:46:c2:3c:15:e0:1c:
b9:8b:eb:46:43:85:e5:90:8c:f1:89:6c:8b:08:ad:f1:be:23:
2c:12:d5:ee:e5:77:4f:62:c2:2e:81:7c:27:33:b1:73:17:c2:
d4:6a:9e:4e:2b:3e:3e:1b:04:e0:c6:d9:ed:73:cf:8c:1f:a9:
81:7c:08:1f:7d:5c:a3:c6:9b:9d:a7:1f:49:d0:dc:57:18:83:
82:c6:ec:e1:16:c9:ed:c2:96:0a:bb:6f:53:d8:60:27:6a:6b:
e7:95:7e:90:b1:52:ee:d4:36:5b:aa:a7:ee:e5:7a:84:0e:3c:
1f:8a:67:5c:b7:4b:89:f0:f5:b3:6d:d8:21:7b:73:ee:c2:69:
e7:a7:e4:f9:8b:dd:e3:43:d3:40:f3:9a:44:01:6e:2e:44:63:
f7:ce:47:34:9a:03:17:46:c7:bf:03:e6:db:9c:22:12:19:f2:
d1:36:c7:bb:25:47:38:70:eb:84:69:d2:84:a2:f5:a0:14:28:
55:8b:d1:36:d7:0d:61:90:7a:8f:60:ce:05:9a:c1:91:1b:12:
29:75:21:ac:cf:23:e1:61:31:be:05:b7:38:10:ce:dc:d9:76:
de:eb:9e:82:0c:bc:2c:15:64:53:44:fd:6c:9e:75:f0:df:c2:
82:08:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:25:08 2025 by rpki-client