Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: iAu5G/4/jvQ3fm6oS2+rtv/UbTcc8CXPouWw2FpEo0A=
Subject key identifier: E5:DB:24:80:B7:00:24:80:4C:72:33:6A:E9:AF:AF:CA:CE:41:9A:C6
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01968BB8DCCFB8B9B930E48D6AFAFC974CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 12:01:10 +0000
Manifest this update: Thu 01 May 2025 12:01:10 +0000
Manifest next update: Fri 02 May 2025 12:01:10 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: iiEPxE8BeRRJcNu0+rKB+39n1W3Vohrqbad0uIOGbcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:dc:cf:b8:b9:b9:30:e4:8d:6a:fa:fc:97:4c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: May 1 12:01:10 2025 GMT
Not After : May 2 12:01:10 2025 GMT
Subject: CN=e5db2480b70024804c72336ae9afafcace419ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:68:0f:83:c9:29:4a:7c:dd:24:78:94:94:
63:bd:4e:32:c7:dc:0c:e4:31:8f:23:b0:8c:37:12:
6b:07:93:e4:57:05:5b:73:2c:17:6d:a4:8b:22:e4:
8c:71:b5:1c:ed:45:7c:ee:73:43:47:60:b8:16:f3:
42:45:10:86:91:d5:a9:0e:17:7b:5c:ee:b2:59:19:
cd:62:d9:fd:ea:66:2a:4e:97:b5:19:32:2e:6d:6d:
0c:f7:3f:c6:6b:c0:34:c7:8a:80:03:9f:80:58:39:
f5:09:95:5b:13:44:09:f1:3c:eb:01:9c:3b:10:e4:
4c:7f:b9:61:24:c0:0d:21:4e:b0:a1:42:13:c0:40:
e7:78:4e:34:98:4e:05:b9:75:e3:b2:1d:74:81:1f:
4d:8e:b4:90:02:97:d2:4e:93:2b:1d:ea:aa:da:34:
b8:92:a4:12:10:e6:78:9c:68:65:15:6b:c4:13:64:
12:e5:e1:fb:be:1b:bd:92:a3:07:d1:fc:72:6d:b7:
ff:70:7a:8d:eb:40:b2:4c:d5:2f:c9:d8:9f:a8:3d:
66:9a:fd:49:cd:f9:3b:8c:3f:58:83:37:16:d9:53:
7b:14:67:3f:7d:1a:43:55:ba:5c:da:93:52:50:7f:
da:32:43:84:27:32:54:d9:66:50:4b:00:20:34:e9:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:24:80:B7:00:24:80:4C:72:33:6A:E9:AF:AF:CA:CE:41:9A:C6
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0d:77:03:92:39:0e:76:5f:c1:61:07:ae:1f:06:98:03:52:
5e:49:0b:5b:d4:56:71:a1:85:8c:cb:6c:e7:6f:f4:56:fd:75:
1e:82:05:0e:f4:ed:3b:fe:d7:82:39:9e:aa:a8:b8:e5:7b:70:
40:eb:ff:f6:2c:80:4f:f2:e7:11:64:9e:b9:0a:5a:f7:c4:97:
c6:a9:e1:d4:d7:ad:95:42:1e:e8:22:b1:90:a3:ab:9b:c0:57:
69:63:14:27:55:74:d5:19:6a:78:0e:4a:27:7e:f0:70:3d:16:
f1:f7:46:90:b8:81:3c:95:7e:d0:f2:f1:7e:1d:a8:3f:7f:f9:
4e:53:49:10:0a:11:ff:5b:cd:d7:82:ae:4d:2f:96:8e:e2:8f:
ce:f0:1a:0a:19:73:9b:83:42:89:7e:cd:fa:4b:26:e3:30:d2:
70:03:8d:c4:e6:cb:f8:47:a1:f6:5b:5c:b7:e9:d8:4c:65:01:
ee:c3:52:8c:8b:db:cf:71:33:f1:a9:aa:b1:91:ee:cc:9a:25:
05:7d:bc:c1:fd:29:3b:14:0d:81:48:4c:d9:e6:65:8a:05:d4:
80:ff:8a:61:b6:ee:79:6d:3a:3a:4f:42:73:6c:e7:6e:11:c8:
c5:1a:7b:8a:f1:77:0e:ab:b8:18:c1:cd:c1:b8:7e:11:fd:a8:
35:f2:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:41 2025 by rpki-client