Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: qQLkatlgYro/Z8clVzAWdVR7HyW6cBUtqUNnol/hi8g=
Subject key identifier: 19:AF:00:94:07:0D:15:6F:1D:46:85:C0:A4:C6:E0:F5:EC:CC:7A:12
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 01967755C2F98180CE0458C47E3D4B02A718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0BE6
Signing time: Sun 27 Apr 2025 13:00:31 +0000
Manifest this update: Sun 27 Apr 2025 13:00:31 +0000
Manifest next update: Mon 28 Apr 2025 13:00:31 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: rPoRxofCPV3vDu9O14TXSQ5/4Hj7j6cFaBZqntl9ORQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:c2:f9:81:80:ce:04:58:c4:7e:3d:4b:02:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Apr 27 13:00:31 2025 GMT
Not After : Apr 28 13:00:31 2025 GMT
Subject: CN=19af0094070d156f1d4685c0a4c6e0f5eccc7a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:cb:e9:dd:6e:f3:8b:68:25:6f:dd:cb:aa:
26:38:6d:e2:55:df:bc:68:1e:e3:22:f4:b8:b4:42:
79:e2:ed:c7:f4:82:55:63:8e:e5:18:96:72:c8:63:
60:7b:db:07:7d:69:8b:7f:b6:69:3a:fe:0e:43:b0:
5a:f9:bd:c1:6a:3d:58:26:0e:91:6e:51:c4:da:7e:
82:61:d5:f1:8d:fc:7f:0e:df:6a:10:f7:70:d5:5e:
4c:e7:11:92:b6:51:0d:06:ae:3d:21:7c:59:0c:1e:
e5:ad:76:3a:30:db:1e:9e:19:07:7f:a7:9e:16:63:
c1:8b:df:3f:fd:7c:08:8d:9a:80:bd:9f:58:42:d2:
e8:5d:c4:9b:01:0c:7b:70:98:83:9b:81:c3:d8:bc:
7c:c5:9a:d0:f2:a0:6a:27:64:03:3b:99:35:8c:f6:
03:3f:a3:12:0a:ae:23:66:b1:33:7d:26:88:ee:e2:
6c:5e:21:38:28:14:67:71:e2:98:ae:34:78:a6:9a:
82:e8:ea:f2:11:fe:50:19:3c:09:d0:d7:01:94:84:
42:07:51:0f:5d:06:2f:15:14:e3:0e:58:b3:ea:5e:
00:6d:45:6f:f0:27:d5:f6:7e:f4:4f:7c:5f:26:a5:
cd:33:1e:5c:44:81:69:d2:05:86:6c:2f:64:c1:fd:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:00:94:07:0D:15:6F:1D:46:85:C0:A4:C6:E0:F5:EC:CC:7A:12
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:75:49:8a:47:a7:f1:83:91:19:47:59:e6:69:5d:f7:ee:56:
5d:74:c9:1c:7f:6f:41:72:33:c5:a3:6d:26:30:73:a2:c2:d0:
84:7b:20:9b:45:8c:1c:28:72:6d:25:49:59:21:9b:08:1f:ff:
8b:d8:b4:c2:8b:96:03:36:df:09:d0:24:16:0f:9e:0d:9c:35:
a6:60:f6:5f:1f:83:17:ea:2c:21:f0:e7:17:de:dd:c0:c5:b7:
8a:60:be:b6:23:a9:01:e2:3a:d2:bc:0d:2e:e8:10:6b:d6:4d:
a3:82:fc:95:b3:82:0a:84:59:46:84:d1:d2:c6:ea:43:b4:cc:
25:51:73:6d:87:36:f2:f5:d2:b9:3d:11:17:a4:00:1a:65:c8:
8c:10:7b:a7:e9:fd:d4:2a:3d:6b:de:eb:38:98:09:14:c4:10:
1d:60:1d:6f:57:61:3f:96:98:0e:f0:70:d3:d7:0d:9c:da:61:
04:78:25:dd:b7:d9:4e:8a:d3:17:d2:a7:34:c2:26:94:4a:0f:
03:01:1d:9f:a0:f4:8b:98:26:18:ec:37:0a:e3:ee:0b:49:34:
6b:5a:a5:39:2b:67:3f:3d:94:73:ec:a1:49:b5:3c:a4:9c:ba:
ae:80:99:77:0e:9c:c6:ae:1a:28:bc:22:2f:37:fa:12:79:af:
74:e2:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:38 2025 by rpki-client