Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: e+wVW2GblqvYkvuB6dIELQwweJ7nfB61POp84CagsKM=
Subject key identifier: 7A:A0:E9:57:7F:80:F2:5F:A2:D6:8A:E6:A9:8F:38:6B:B4:E2:92:62
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 019690A76779F231F2FEFE2938624EFD2F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 11:00:12 +0000
Manifest this update: Fri 02 May 2025 11:00:12 +0000
Manifest next update: Sat 03 May 2025 11:00:12 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: K9XcWKfsm8u8r17ZW1bfipVgJ8/J/xHljcNPROTs5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:67:79:f2:31:f2:fe:fe:29:38:62:4e:fd:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: May 2 11:00:12 2025 GMT
Not After : May 3 11:00:12 2025 GMT
Subject: CN=7aa0e9577f80f25fa2d68ae6a98f386bb4e29262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:63:fd:c9:8a:21:80:f3:34:25:12:e5:c5:
94:86:1b:b5:e1:b2:4f:d8:02:9d:d9:e3:e2:04:50:
05:6b:b0:02:57:f8:0b:b8:5b:59:bd:73:c4:ca:4a:
a8:a6:73:7c:d0:68:6d:3b:7c:b0:87:3f:ef:79:40:
67:1e:c4:dc:a6:e8:a2:ea:2f:da:da:65:ac:83:dc:
ca:4e:84:46:5e:ea:bf:c3:a5:55:99:a5:a8:0e:ba:
8d:23:04:ec:53:78:95:63:ae:9b:42:33:8c:a0:63:
a6:a6:d8:48:2e:9d:82:34:f7:c8:14:0d:ba:64:c2:
9c:0d:23:bb:06:0e:dc:4d:ba:ce:4d:1d:1e:51:2b:
99:c3:b8:fc:c4:c7:89:35:d2:73:f9:db:26:14:73:
5a:92:6a:79:95:6c:ac:1f:50:2f:93:fc:47:47:0a:
75:39:63:c6:de:54:f3:89:d0:2e:8b:b2:6a:ea:4a:
fd:c6:07:ae:a6:0f:0e:69:c7:58:f5:5d:59:71:7f:
fb:5e:20:1d:ca:62:f8:da:dd:77:53:93:df:9f:9d:
db:5f:14:76:6b:62:6e:05:04:2d:d9:38:7e:cb:82:
51:43:f6:10:ac:7b:86:13:19:7f:56:39:67:6f:07:
f9:91:27:8d:25:cb:bd:07:d1:13:4c:f1:64:8c:f2:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:E9:57:7F:80:F2:5F:A2:D6:8A:E6:A9:8F:38:6B:B4:E2:92:62
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3f:ec:5a:c7:6c:0d:1a:27:48:67:a4:be:aa:b9:82:46:5f:
d5:40:e4:67:00:36:1a:20:1d:f6:cc:51:d3:b1:d5:4d:5e:c0:
1c:e0:07:ac:96:c2:c1:be:2d:c6:a7:11:ec:f4:cb:14:68:4c:
f7:0e:50:6e:ff:7d:4a:f4:d7:a3:93:11:83:91:5e:85:e9:b5:
45:fa:7f:82:a0:46:b9:9c:dd:a3:42:bc:96:f2:fc:6e:88:55:
15:b3:8a:e3:22:3a:3d:c7:c8:55:52:fd:1c:e8:eb:82:8c:59:
d3:a6:48:d7:ff:79:2d:0b:63:ee:68:53:b7:01:be:85:40:ea:
02:5c:dd:1a:7c:9a:3b:d5:b5:b3:52:ba:3e:48:27:2c:75:1a:
e6:29:fe:f4:23:a8:64:2d:30:1e:a3:91:0a:78:43:48:7e:50:
88:92:5f:79:71:c7:15:75:8e:da:4b:aa:99:b8:b4:cd:6f:fd:
8b:f4:33:4f:58:e7:5b:cd:cc:ed:33:15:46:2e:47:bb:aa:f1:
49:28:40:de:ff:91:b9:06:9a:72:49:e9:54:37:dd:9b:ff:95:
d4:9f:ce:d4:72:65:b9:46:c7:b6:d1:4d:6e:76:bf:e8:ea:f1:
8e:68:e2:8e:2b:aa:a9:55:17:88:13:e8:5b:09:68:28:d5:30:
25:0f:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:29:42 2025 by rpki-client