Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: tTN0NYmN0FTbu58ZsIK/i48wV3ditdn50BNIXA9mz3s=
Subject key identifier: F5:40:2A:10:15:B1:8A:00:0E:E9:11:C2:B2:D1:A8:BF:62:D9:E2:1C
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019677C38E83DDFC9627789CC924EBB2C43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 15:00:26 +0000
Manifest this update: Sun 27 Apr 2025 15:00:26 +0000
Manifest next update: Mon 28 Apr 2025 15:00:26 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: +Tw9aSlJttWOsgTBUdasxcfibgZ/GUjP3jCIKpze5SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:8e:83:dd:fc:96:27:78:9c:c9:24:eb:b2:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Apr 27 15:00:26 2025 GMT
Not After : Apr 28 15:00:26 2025 GMT
Subject: CN=f5402a1015b18a000ee911c2b2d1a8bf62d9e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:82:53:ca:f3:57:61:12:d6:bf:dd:2a:b6:
1b:a2:7e:d3:0a:74:05:6e:52:a0:8d:38:cb:c6:6c:
f5:d4:34:1e:3c:62:bd:95:72:7e:b6:ed:e4:aa:ed:
71:f5:1c:85:f4:e2:85:b5:f3:a1:79:04:94:ff:5e:
8d:5d:65:78:27:b8:e8:28:25:38:c3:9d:99:52:5e:
32:ee:40:aa:96:11:f6:9a:7f:f9:2d:dd:60:b1:b3:
35:af:0c:b9:3c:6a:e1:73:e9:48:47:c0:30:c5:0e:
e6:18:02:a3:6c:88:29:9d:ea:f7:cc:d9:28:d7:cb:
e7:49:da:0d:cb:c5:2f:96:56:2b:2e:4d:b2:89:79:
e2:da:fb:ee:89:c2:64:cd:82:51:a6:a8:ea:a3:81:
2c:29:82:f7:78:50:45:c1:df:03:f7:c3:39:6f:d0:
48:f4:13:0f:11:00:d7:39:5b:16:98:9a:0f:0c:4d:
03:e1:f1:3b:b5:dd:9b:a4:d6:db:81:ac:20:db:92:
da:c2:61:31:9a:34:aa:0d:7f:d3:67:fc:d7:8d:fc:
cc:9e:96:89:cc:fa:d3:3e:0f:f4:09:ab:6a:d3:cf:
1f:6e:1e:44:b9:50:ae:e9:17:15:24:d5:6f:fb:87:
2b:31:e9:4a:9a:4e:f1:68:63:7d:9a:ae:5b:6b:07:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:40:2A:10:15:B1:8A:00:0E:E9:11:C2:B2:D1:A8:BF:62:D9:E2:1C
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:4e:d4:66:c7:6b:53:76:00:d6:6f:45:af:23:89:7f:6f:
6b:f1:20:d7:d7:c2:0a:aa:8a:e4:70:63:b9:78:c5:4c:5d:32:
04:d8:b0:6e:d7:78:31:f2:ae:42:5a:9d:b2:d8:11:73:23:d9:
3b:ea:68:e5:55:62:75:ff:df:6a:db:ae:c0:5a:bc:12:12:ef:
7d:53:01:9f:8a:56:d9:7c:5b:93:0c:ff:f5:d7:e6:c3:13:cf:
cb:e3:03:49:f1:a8:75:c6:31:4d:a4:45:dd:3f:8a:5d:77:c3:
f6:e7:93:14:28:1e:03:e5:bd:e9:74:1c:cb:30:45:cc:2b:71:
99:6d:d9:eb:ac:a9:98:0e:3c:b4:c2:1a:0f:7e:69:6b:39:76:
49:e0:b5:a5:ed:a0:1a:f0:2e:5a:1e:c6:09:13:01:c7:d3:f6:
c6:f2:f0:7f:e1:fa:b7:2f:aa:f7:34:f7:c0:a9:85:26:9e:5b:
fd:1a:0e:84:f9:e0:c0:6a:54:c1:1e:b5:a1:26:f8:a5:5d:36:
fa:0c:3f:46:bd:2c:97:54:18:f5:5a:a9:22:5f:80:50:25:e9:
20:38:f8:15:c7:75:49:5a:1a:a4:3b:75:8c:a2:81:c7:d5:c7:
b5:7b:32:44:bf:4d:81:0a:77:eb:c0:4a:69:36:a2:0d:68:e9:
cf:00:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:04:35 2025 by rpki-client