Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: YQgkC2E/M0Yb3RJd17M7PpWzsIWwqLUGm+j5xYM2HMo=
Subject key identifier: 94:D0:96:3D:85:56:CE:A8:B3:1A:04:F4:08:EC:13:F7:B1:8E:12:23
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 01968F9532B12DB9AE56D3D50B6D1B816A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 06:00:41 +0000
Manifest this update: Fri 02 May 2025 06:00:41 +0000
Manifest next update: Sat 03 May 2025 06:00:41 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: 53kmRYYm/7Yz4LWtNWE85XYqW6Pjhf0+f2a/GTrx7Bg=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:32:b1:2d:b9:ae:56:d3:d5:0b:6d:1b:81:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: May 2 06:00:41 2025 GMT
Not After : May 3 06:00:41 2025 GMT
Subject: CN=94d0963d8556cea8b31a04f408ec13f7b18e1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:70:84:27:5d:95:26:2a:cc:ac:27:3a:b8:
63:fd:a2:8b:c5:ff:75:fb:6f:f8:d4:cb:b7:bf:9a:
8f:a8:2a:46:07:01:23:19:5e:a2:0a:20:af:ba:08:
42:51:b6:fc:9a:58:d3:ee:6f:a3:3c:da:04:1f:bf:
a5:5c:2b:a4:20:d5:1e:ab:3f:9f:e5:e1:f8:a8:11:
d6:41:19:59:b1:47:37:a9:47:d8:08:25:91:17:da:
93:fc:d7:e2:a4:6f:a4:38:f2:17:30:8c:9d:64:98:
b7:35:c8:f9:e1:38:4c:c9:69:45:9f:ac:29:23:c2:
32:5a:e6:8b:0c:dd:f0:31:44:6c:13:c7:8a:7b:72:
dc:5c:b5:02:fc:56:02:8e:66:2c:b1:79:b8:40:5d:
70:5e:e5:f3:24:05:29:ff:6e:9a:83:51:f7:8b:cc:
b4:11:6d:40:c0:bc:13:99:1c:f4:9d:97:7f:24:15:
ad:30:a2:22:3b:35:e9:30:8c:68:ab:c5:97:ef:78:
e6:2c:d1:66:ca:4b:0c:58:3b:c1:75:12:6e:66:0b:
91:0f:43:e3:37:0b:8c:b3:89:a5:02:9b:57:aa:3e:
f3:1f:87:e4:d6:92:ed:a3:e0:4b:7b:9b:ab:e3:a7:
45:17:cb:88:48:ec:3d:32:a3:56:f3:0a:4c:23:15:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:96:3D:85:56:CE:A8:B3:1A:04:F4:08:EC:13:F7:B1:8E:12:23
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:69:c9:75:69:84:75:77:89:d4:d3:7b:72:cb:d3:86:f2:
82:82:64:0c:17:61:49:76:0e:db:68:03:f7:49:ab:99:f2:d6:
35:a1:2b:e1:9f:54:27:c3:3d:90:3a:09:10:47:ef:86:ae:33:
ba:d9:24:0e:3d:09:70:77:5e:7f:cf:78:f2:84:78:d3:59:33:
8b:0d:bc:de:0c:c1:71:36:a5:18:07:3d:e7:12:f0:e4:ee:97:
2d:5e:9b:88:26:27:8c:56:12:a2:c8:14:fa:ed:a4:17:c3:45:
d3:aa:0a:3b:a0:05:ff:5c:e0:15:7c:60:14:2c:72:65:a1:b0:
93:89:c3:44:e7:a6:70:b6:b1:e7:52:b3:b1:dd:b0:c1:17:41:
2a:1e:76:5b:7d:43:52:f6:3b:05:97:6b:d8:ff:1e:29:40:32:
53:1d:c7:33:25:77:61:e8:e5:77:f9:0d:3f:0b:96:47:e2:da:
e2:22:f6:b6:fc:0e:35:22:9f:b7:55:e4:a5:7c:61:68:94:28:
ee:f0:88:55:d6:80:b4:a8:09:c6:4d:a6:ce:eb:b0:5f:80:6a:
7f:ae:52:98:21:71:f2:37:d4:54:d1:44:49:12:95:d9:39:b7:
67:83:ae:12:85:e5:5f:7e:81:c8:da:2c:07:ab:32:52:c5:2f:
09:81:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:33:52 2025 by rpki-client