Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: QvmgBJh8MmVLTJdWSeqMwh4HtmsnQCERvmS40erDZE4=
Subject key identifier: 1D:C0:B4:81:D1:27:1C:CE:9E:D5:03:54:8C:17:31:39:F8:18:C5:E4
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0196771E85980D44F635E4E525729EDC4D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 12:00:10 +0000
Manifest this update: Sun 27 Apr 2025 12:00:10 +0000
Manifest next update: Mon 28 Apr 2025 12:00:10 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: r3Ua5nZaHT4DLEOWNfuUS+oT7yigdkFRhk+wha11kXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:85:98:0d:44:f6:35:e4:e5:25:72:9e:dc:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Apr 27 12:00:10 2025 GMT
Not After : Apr 28 12:00:10 2025 GMT
Subject: CN=1dc0b481d1271cce9ed503548c173139f818c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:c9:42:59:08:7e:72:b5:42:2e:1d:8c:18:
7a:0f:fb:32:03:72:38:3d:fa:44:f8:4d:6a:4b:cf:
aa:5c:d1:ce:23:90:68:2f:8b:e7:81:34:a0:4f:e0:
2f:ac:fc:5c:a8:13:88:c5:6e:9c:57:50:9a:bf:81:
2e:96:b8:65:d1:fc:95:48:a6:82:cb:72:94:3f:43:
62:5a:2c:b5:f3:57:37:4e:c6:e5:53:f5:01:92:7a:
47:f4:f1:15:54:be:c6:c0:01:b3:0b:c3:c4:99:10:
8b:cf:65:fb:a8:44:40:07:3f:d0:4b:50:f5:90:21:
b2:04:9c:20:62:f7:66:4a:6d:7e:39:db:0b:41:31:
7d:af:b8:d6:6f:56:7e:2e:0c:da:f2:c0:02:05:dd:
d4:90:e6:79:00:54:08:f1:2c:33:70:e1:89:87:c1:
30:d9:59:fc:b8:3e:25:e1:cd:58:08:bd:35:ad:8b:
f8:53:50:0b:5b:cd:fd:44:d6:6d:93:57:f9:fe:d5:
9a:b6:78:7b:66:b0:26:56:21:a3:ea:b9:a5:d9:2d:
4f:a4:34:8b:94:9f:17:4e:ab:fe:7d:e4:60:31:b7:
41:9b:e4:b1:92:c2:27:73:e7:96:c4:4d:ca:c4:fa:
d5:3c:73:fc:4a:f7:34:12:e8:f1:06:9b:ce:45:94:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:B4:81:D1:27:1C:CE:9E:D5:03:54:8C:17:31:39:F8:18:C5:E4
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:dd:e9:5b:da:da:8b:4c:23:65:9d:2f:a9:f5:91:5e:6c:
86:09:a6:3b:c6:b0:37:35:57:fd:12:08:e9:77:04:b5:f5:02:
82:54:62:a1:b4:78:70:14:76:4f:80:7f:59:08:9f:bc:27:98:
b5:04:18:0c:7b:cc:22:89:91:fe:bc:10:48:37:a3:6f:af:2d:
3f:2d:57:f0:8d:46:cd:dc:c4:02:9b:79:f7:01:06:33:03:42:
c0:8a:ab:d5:a7:a1:02:8f:c9:b0:bb:fb:d3:72:23:8a:9a:12:
47:27:8b:fc:07:a1:a0:9c:bb:88:f7:c4:70:93:c3:c4:e3:aa:
9b:83:06:f0:67:56:bc:a6:75:81:f8:80:67:d5:c8:68:12:42:
c8:62:47:5f:6a:15:5b:5a:d8:2e:eb:bf:c7:23:e3:f3:67:88:
08:7e:e9:69:0d:cc:0f:fe:b6:41:0e:c1:7a:ed:e7:a7:b9:c1:
0f:f9:ab:b9:0f:cf:b1:f8:cd:18:56:47:c9:ca:5a:79:8b:8b:
9a:03:95:c7:03:eb:99:f1:6d:62:0b:67:75:c7:00:e8:88:a5:
06:b7:04:83:d4:66:05:49:19:f8:85:18:4c:1f:7a:6e:df:fb:
0a:39:40:7f:89:67:1a:6c:3e:6e:06:6c:05:86:f5:ef:03:50:
dc:2d:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:31 2025 by rpki-client