Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: LLtb3BpNRyJSS+EFOy7CmF0MUpXkjYlICr5lgfYuEd0=
Subject key identifier: 0E:80:4E:16:D0:60:21:AC:1D:B8:E5:89:93:01:FA:46:73:CD:47:B8
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 0196876E6D661140053A4B6CEE2065B5FE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 16:01:23 +0000
Manifest this update: Wed 30 Apr 2025 16:01:23 +0000
Manifest next update: Thu 01 May 2025 16:01:23 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: NQZefKCm/dTyTzcoevJWPlQ68g1DmiMJUZU2OmzU2Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:6d:66:11:40:05:3a:4b:6c:ee:20:65:b5:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Apr 30 16:01:23 2025 GMT
Not After : May 1 16:01:23 2025 GMT
Subject: CN=0e804e16d06021ac1db8e5899301fa4673cd47b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:65:2c:cd:97:79:46:51:1a:3a:58:dc:a7:
5f:8c:e9:03:d8:40:05:ee:e5:f8:65:e2:79:2e:6f:
f9:69:15:cb:24:eb:11:06:4b:3e:71:b4:90:cc:3c:
21:bc:a3:d9:bd:7e:15:cd:a9:79:ab:d9:5c:32:74:
dd:fb:83:b9:0d:6e:71:df:c4:ab:30:27:45:75:be:
02:55:28:bb:cc:47:52:50:be:2a:74:7c:dc:53:b0:
d9:cc:b9:9d:b7:06:d0:40:91:4d:f1:74:87:3f:fe:
ce:53:b0:b0:7f:c2:89:7c:d0:2f:d9:4c:48:c8:ef:
09:39:70:ee:f3:25:18:04:02:37:fd:3f:eb:00:17:
02:36:24:71:a8:6f:7d:83:16:3b:f6:fe:ca:0d:26:
16:2d:ad:08:d6:3a:10:75:30:f6:1d:47:cb:41:9f:
d3:58:c6:5b:47:c8:b8:45:58:1c:d0:9b:d2:0d:4d:
e5:a9:22:e1:40:31:41:b7:49:f3:31:03:d1:c4:18:
6b:73:3c:bc:a4:31:b0:e4:e7:11:f3:0c:58:f6:4f:
55:fd:ca:d3:a9:2e:fe:16:20:32:6a:1e:54:c8:0e:
fc:6a:ed:12:97:f9:9d:23:c8:ff:f4:36:fd:56:e5:
98:5f:54:8c:c5:f8:33:84:1c:e7:28:4c:c2:78:63:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:80:4E:16:D0:60:21:AC:1D:B8:E5:89:93:01:FA:46:73:CD:47:B8
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:18:92:2a:09:6e:aa:52:08:e7:68:ab:ea:14:3b:d7:b3:
40:4e:6c:46:62:ba:72:06:b0:bf:32:ee:f4:0c:0f:8a:4f:9f:
1e:e5:5b:fb:25:97:46:cd:a4:a0:ef:09:fe:2c:41:43:29:04:
c1:9e:90:2d:31:0d:ee:24:e6:51:b2:42:ba:bf:8a:4e:c0:a2:
e8:fa:c3:71:90:3e:ac:86:ed:c9:b9:ac:a4:96:f8:1d:aa:93:
8d:81:e7:8d:85:bf:9d:47:10:bb:21:34:63:94:b0:31:26:cf:
41:d5:0c:76:69:7c:56:3a:07:c5:8d:7c:c5:45:07:45:45:a7:
93:ca:c8:80:64:c5:0b:d0:94:60:98:f9:14:e7:e1:2e:2f:35:
71:bd:cb:33:aa:15:79:74:ec:ef:7c:60:48:97:06:a5:f3:a7:
ad:e1:20:85:45:e0:c5:fc:b7:5b:94:15:e0:40:f0:97:2f:2e:
79:73:7c:a8:24:8a:9a:fc:52:e5:3a:ff:8c:96:25:fb:03:7f:
aa:24:ea:bc:fc:d5:f4:cb:09:56:b1:ec:47:ed:86:c7:b7:6f:
b3:1d:aa:72:ba:23:79:a8:cd:04:68:14:17:82:37:33:b5:91:
70:44:7d:d8:40:46:52:cf:c8:5d:90:1f:ec:02:c3:0a:3c:65:
44:0d:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:45 2025 by rpki-client