Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: 5FUK3wCcXnmbq7albddsXVbDN+wVGwO90RcXUwwgrAk=
Subject key identifier: 70:21:20:90:4A:6A:CA:C4:95:EE:53:BC:74:68:CC:BC:01:B1:CE:76
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 0196729D5852C4F74BD6B9CC5131A54D6B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 15:00:36 +0000
Manifest this update: Sat 26 Apr 2025 15:00:36 +0000
Manifest next update: Sun 27 Apr 2025 15:00:36 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: 8eYFNS+XuNz+oyCRVBx7sNI8ep8dZtuzUY0y+qTCqYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:58:52:c4:f7:4b:d6:b9:cc:51:31:a5:4d:6b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Apr 26 15:00:36 2025 GMT
Not After : Apr 27 15:00:36 2025 GMT
Subject: CN=702120904a6acac495ee53bc7468ccbc01b1ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:d1:f7:6d:e1:36:c8:48:c1:1b:21:5f:0b:
74:9f:c5:0a:79:f7:a4:b1:b2:ce:04:f1:47:f4:f7:
da:64:98:82:2c:97:5d:d1:b6:81:9b:8e:8e:05:19:
97:0e:15:cd:8f:11:2f:f0:5c:64:cd:eb:32:ac:d7:
fb:41:85:09:0e:08:11:63:16:51:41:86:fa:74:a5:
fb:73:94:39:e5:f6:c2:63:71:65:b9:f1:e1:46:cb:
ef:13:bd:45:14:25:20:cd:d1:0e:87:f4:8b:ec:ad:
42:62:2d:64:8f:7a:d5:8d:b8:6c:88:7c:b0:e0:05:
b0:ce:90:88:d8:80:89:0d:a5:93:d0:20:9b:c7:ac:
bd:c9:0f:54:f5:9e:92:65:5e:53:45:18:ff:83:6d:
b4:35:9d:b5:b3:9c:68:d6:96:99:91:f1:b1:25:fe:
7d:be:78:f6:b1:d2:c1:b9:e5:6d:4a:84:91:db:4d:
87:b7:b4:ba:4e:98:14:b3:82:44:88:99:cb:2f:c4:
3f:4c:75:c5:0c:cf:47:c4:26:7d:3b:62:a5:bc:1a:
f6:eb:6f:e1:94:f8:57:e2:5b:77:b3:a9:5c:6d:d0:
72:cb:90:40:96:c7:03:52:92:58:8f:ee:5d:81:c9:
26:e3:ab:5b:50:4e:60:c0:ee:2a:2d:54:30:f5:99:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:20:90:4A:6A:CA:C4:95:EE:53:BC:74:68:CC:BC:01:B1:CE:76
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:33:e9:84:a2:7a:e3:9e:0c:92:98:ed:49:4b:85:f1:93:cc:
e6:52:c1:fd:90:f7:c0:c6:5b:a8:31:1f:03:0c:2c:53:7d:2a:
e0:6d:d4:53:68:8a:76:f3:3d:99:64:97:19:64:d6:3d:9a:d5:
6e:45:b6:42:f8:72:1c:ae:49:8b:01:ab:e6:ce:85:42:5b:f0:
2a:b0:b4:69:8d:3d:b0:a8:de:56:6c:8d:6b:44:4e:cc:e9:8c:
a3:05:76:e5:02:bc:59:86:9a:46:e2:7d:20:2c:d8:2d:73:e2:
84:04:20:b7:69:be:a5:0d:6a:e4:f8:cb:00:73:ab:f9:f3:83:
a2:9c:0c:39:b7:18:d2:c7:88:23:51:5b:cf:0f:02:fb:7d:0e:
25:5d:e4:a3:af:3f:04:aa:03:79:ea:22:4a:ab:7a:e4:82:d0:
d8:44:4f:e9:54:19:d5:22:8e:80:84:db:49:65:09:6d:a5:52:
b5:98:1e:e7:0e:c6:8e:01:41:5b:3d:f9:23:fc:2b:74:48:67:
65:d4:4c:a1:49:69:f0:0d:54:08:c1:3a:e3:8d:f5:30:f5:37:
dd:d6:1c:5c:a7:c9:c1:71:a6:d4:dd:58:86:b5:4a:36:f2:96:
21:6c:6e:f2:a4:32:97:0e:02:0f:48:13:06:93:3c:16:e4:20:
3d:66:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:14:57 2025 by rpki-client