Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: D5rmcwAZlTQkWtyfGOYx4zcVEgK3iCaW+mguG8ZrE00=
Subject key identifier: DF:8F:F8:E9:45:28:E1:AD:6C:74:63:D9:71:5B:EA:54:0A:AD:4F:4B
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019677559C824D65CD12E90EB398D738EB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 0447
Signing time: Sun 27 Apr 2025 13:00:21 +0000
Manifest this update: Sun 27 Apr 2025 13:00:21 +0000
Manifest next update: Mon 28 Apr 2025 13:00:21 +0000
Files and hashes: 1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: cBMl3ZntjyU89uiBxtGXlPN1R0sDWLUqMnUdz5qZiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:9c:82:4d:65:cd:12:e9:0e:b3:98:d7:38:eb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Apr 27 13:00:21 2025 GMT
Not After : Apr 28 13:00:21 2025 GMT
Subject: CN=df8ff8e94528e1ad6c7463d9715bea540aad4f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:bd:df:01:49:96:81:64:3e:dc:1c:c7:f0:
2e:d9:65:31:c2:51:87:53:8f:c4:84:2c:9d:92:69:
8f:9e:65:09:3f:d4:02:e7:2c:b8:85:34:ec:98:c6:
85:ab:8f:d9:20:ef:b7:5e:b9:65:cb:07:de:13:65:
b1:b9:31:8d:c6:b8:84:b9:8c:c3:91:2b:cd:85:bc:
71:7c:ba:2b:f6:b0:9c:a9:55:c8:1d:03:2c:d2:74:
7b:05:31:8d:fa:e3:4c:58:3c:89:ca:6c:f6:af:b0:
d3:be:d3:d5:f6:67:5a:6a:37:73:45:66:69:4b:1c:
11:5c:23:aa:6b:47:7a:5a:dd:fc:11:4b:15:a8:58:
f3:e9:c9:93:f6:35:28:49:9c:6a:69:50:a8:2f:59:
13:45:13:8f:ea:c9:2a:88:0a:58:44:36:aa:01:67:
1d:d4:f0:58:56:bb:40:f2:33:d1:fb:42:e5:3c:9c:
ee:3a:18:e0:92:20:6b:ce:b9:37:69:90:6d:84:8b:
f5:d4:d4:2d:4a:e6:ce:49:a9:69:81:7d:ac:59:ec:
38:2d:30:45:28:c7:6a:3f:dd:c9:de:36:24:76:2c:
6d:6e:85:3d:42:6d:12:2f:a9:44:85:92:fe:6a:f3:
27:06:6d:f6:98:69:4d:d1:81:fe:7f:39:38:8d:d6:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:F8:E9:45:28:E1:AD:6C:74:63:D9:71:5B:EA:54:0A:AD:4F:4B
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:30:06:04:3c:e0:ba:8f:e8:c8:7e:a6:f3:e4:10:be:fd:c0:
c4:f0:be:5b:74:75:18:ff:0e:6f:ff:e0:96:ba:17:8f:a7:1a:
1b:41:de:e4:f3:02:dd:c6:ce:83:bb:9e:6c:47:67:dd:13:c7:
ec:fc:c5:45:aa:66:4d:b0:88:35:a4:cd:0c:ec:25:14:d8:df:
62:36:ab:23:03:fa:e9:88:3a:4b:41:2f:ec:09:88:4a:d3:02:
be:eb:59:f5:ce:97:56:8a:23:ab:4e:ce:bd:f2:7c:52:bc:a7:
d6:34:ec:a3:d5:ae:da:d9:e2:54:9c:e7:30:83:f2:5c:50:d5:
99:b6:05:0e:a2:db:b1:b0:11:aa:e6:8d:b0:67:1d:e4:69:60:
ab:f9:f4:bf:ed:bb:99:d0:f6:06:66:92:29:23:d1:2f:c0:a7:
8d:f9:91:d1:64:2b:d3:75:b1:78:0f:61:47:10:b6:6c:97:02:
da:b1:b8:13:0c:fb:14:b7:0f:aa:05:9f:6b:c1:75:17:ba:1c:
87:95:69:61:00:7f:00:25:b0:63:cc:4f:8b:5f:4d:23:d7:cf:
81:6b:17:15:b1:12:01:7d:be:87:0e:ec:10:90:d3:57:8e:6b:
e6:e9:13:8b:69:93:1b:70:63:9a:83:40:75:80:3f:02:b1:b4:
8f:99:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:09:46 2025 by rpki-client