Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: kf8fEV60HksjJx7pihv5Z67cGnPlb5BneD8D9P1QEsU=
Subject key identifier: BF:A2:52:8F:0D:C1:72:57:20:98:C2:4B:8E:F1:4B:F6:1C:4C:33:23
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 01967679B947F5DB49328D0096C389CA5E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 1213
Signing time: Sun 27 Apr 2025 09:00:10 +0000
Manifest this update: Sun 27 Apr 2025 09:00:10 +0000
Manifest next update: Mon 28 Apr 2025 09:00:10 +0000
Files and hashes: 1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: TXm5xNnF1NT1my7zmkJ9wpZftA3qju2yhxKdyTTAlcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:b9:47:f5:db:49:32:8d:00:96:c3:89:ca:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Apr 27 09:00:10 2025 GMT
Not After : Apr 28 09:00:10 2025 GMT
Subject: CN=bfa2528f0dc172572098c24b8ef14bf61c4c3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:13:0e:7c:f8:0e:e7:c7:b3:84:bb:34:e0:
9c:ce:84:24:75:50:2d:10:26:3a:fc:2c:d4:fd:c0:
ef:e5:fd:d5:3e:77:02:ff:fa:52:60:b4:03:10:ba:
e9:ea:d3:2c:34:c3:20:88:e9:d7:ac:ac:e0:0b:bd:
c2:83:2f:d1:dd:e1:c0:54:cd:e1:b2:62:47:51:07:
4d:76:4f:f7:be:98:47:f8:3d:7b:82:2f:2b:14:0e:
90:04:f2:a7:55:c3:ef:88:97:e8:9a:dc:7a:e1:af:
df:74:bc:1f:33:de:40:be:15:7c:4c:c0:31:fa:5e:
f0:3e:0d:b8:1f:96:24:97:87:9b:1b:db:f7:bd:9e:
1f:5e:98:f4:c3:2a:da:0d:cf:64:32:2d:fb:57:f9:
a2:3a:2f:7f:24:b6:c6:1f:3f:d2:44:ed:e1:76:12:
cd:c5:77:b6:ad:41:ce:3d:dd:d4:55:5b:c3:fb:54:
77:68:db:23:29:83:e1:ce:5c:56:4a:37:55:de:56:
14:01:29:3d:e5:30:65:e4:bc:42:0d:9a:30:4b:01:
d0:00:db:31:a6:d3:8e:44:fe:d5:69:e3:09:3b:50:
e3:fe:a5:f1:11:cf:c1:46:b0:02:68:4f:32:f2:de:
5d:da:05:d2:44:d4:14:d2:3c:9a:38:c6:89:77:73:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:52:8F:0D:C1:72:57:20:98:C2:4B:8E:F1:4B:F6:1C:4C:33:23
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:24:96:0b:c0:bd:74:51:4a:24:9e:00:aa:81:66:4b:e1:49:
5e:a5:25:a1:aa:bf:b9:32:90:fe:6d:68:58:1c:bb:2e:f2:5f:
da:a7:9c:61:55:0a:09:a8:09:dd:68:f1:ad:39:1e:45:69:aa:
4a:b5:c9:0c:ca:c1:1e:0f:70:e6:cd:af:11:98:22:63:d2:11:
30:54:f7:2c:28:3a:0c:38:b1:cc:25:dd:de:db:71:37:2d:61:
71:50:b0:fb:7a:99:2e:ab:1b:bf:22:7b:3e:c4:44:22:aa:0e:
18:9f:06:16:51:60:49:d4:56:05:0e:7f:5f:1f:06:f8:9a:0e:
48:2b:b2:a7:c6:af:28:01:e5:8c:df:82:13:7e:67:0b:2b:96:
b9:fe:99:fa:64:b1:22:f7:f5:a5:f4:68:33:2f:06:d0:82:ca:
df:7e:23:56:50:d6:76:10:7b:0e:c9:da:27:1f:35:ce:e0:a8:
0a:a9:6a:79:3d:d1:3c:05:f5:1c:e4:89:64:ce:e6:fb:2f:dc:
e3:84:f8:ff:f2:2f:13:06:09:1b:bd:9d:11:c2:9c:8f:3a:23:
f5:0b:20:c8:9e:b8:26:3c:f3:96:31:25:ec:62:e5:de:e2:82:
ef:b3:ff:1b:df:e3:ab:93:86:38:87:6a:aa:5d:d1:66:69:f8:
dd:18:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:50 2025 by rpki-client