Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: QALiuVoFvvSKpSU8VS+Bgr6k2oQL0C2v7c6BjDg+H7w=
Subject key identifier: 65:23:D7:D4:52:46:CC:DF:B5:F9:EB:53:1B:65:61:A2:B9:37:1F:F7
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 019676E82A526F849659FF3138FF029819A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 1395
Signing time: Sun 27 Apr 2025 11:00:48 +0000
Manifest this update: Sun 27 Apr 2025 11:00:48 +0000
Manifest next update: Mon 28 Apr 2025 11:00:48 +0000
Files and hashes: 1: 3nS1HLz39tr7tq2EFPNnPFroRnU.roa (hash: pJKIFiqTsdzCaAiPIRSnCqbmwY0+EAZrl4VIft8OeOE=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: rUmhmvdm72NZxpsChp/Bv3fTN8TmSouEKSET5yvxOB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:2a:52:6f:84:96:59:ff:31:38:ff:02:98:19:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Apr 27 11:00:48 2025 GMT
Not After : Apr 28 11:00:48 2025 GMT
Subject: CN=6523d7d45246ccdfb5f9eb531b6561a2b9371ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:22:9f:6e:fa:51:9c:30:06:2c:30:75:47:
54:85:3e:f8:e2:b3:b1:a7:0b:4e:76:b3:94:98:a2:
fa:98:67:2e:e5:9f:87:4e:1f:39:c8:76:ab:fd:11:
33:b2:5d:97:e5:ac:20:78:f5:ce:c3:ae:7e:73:72:
08:21:92:ae:33:c9:bf:01:a2:ed:b0:ef:25:8d:10:
c7:9b:bd:a6:28:12:de:ab:0c:ce:ba:7d:3b:c2:46:
68:07:b8:d6:ac:78:1b:a6:85:7b:ac:bf:8b:96:94:
05:2f:ff:2d:c9:d4:26:f1:f3:27:3a:96:e5:22:34:
e3:81:2f:5f:c3:83:1c:16:da:07:12:da:05:21:8e:
52:a7:ad:f3:27:0d:a7:9b:2f:42:ec:e9:70:f2:fa:
de:1c:74:36:b9:75:1b:40:b5:b3:e5:d6:3b:e8:bc:
c5:78:8b:d7:4e:8b:c7:d7:c8:64:e2:7e:67:cb:f3:
9d:5b:b8:a9:58:46:42:ce:88:37:81:05:59:12:42:
73:50:e2:62:e8:97:ec:35:fa:ba:d7:a5:14:ce:81:
34:39:ed:db:ff:c0:52:8c:44:fb:bd:3a:69:36:e2:
b0:be:79:7e:d2:dc:b7:4c:dc:45:de:6b:8f:39:7a:
9a:28:53:11:5a:9b:40:ec:72:d4:e8:34:bc:9a:16:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:23:D7:D4:52:46:CC:DF:B5:F9:EB:53:1B:65:61:A2:B9:37:1F:F7
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:93:b2:21:4c:99:34:13:7e:b2:84:71:86:28:bf:7b:35:
3d:0c:35:21:85:cf:34:a2:e1:9a:88:fa:1a:c1:ce:e8:a7:d6:
2e:ab:9c:da:db:1c:cd:54:c5:29:17:09:70:1f:f3:70:7a:16:
43:1f:20:bd:62:30:b9:49:a2:f3:84:08:d7:60:4a:87:cb:b0:
2f:ff:38:ba:f3:0c:eb:96:84:43:41:a6:2a:97:d8:39:b4:c9:
e5:17:b6:ed:57:5e:c9:7f:4b:b3:46:e5:7d:cd:c2:b6:4b:1a:
ca:9f:b0:f1:b7:08:1c:ad:99:4d:f9:63:92:ef:8a:ef:f7:60:
8e:88:f7:11:ad:88:ef:eb:68:38:ef:1b:a6:84:a8:a0:7a:05:
d2:2e:cc:17:b8:02:7f:57:ab:a9:e7:5a:5e:be:7b:ad:ee:f3:
5b:1e:6f:92:be:79:8f:c4:32:5f:08:34:68:8b:2d:ce:bb:f3:
56:b5:c3:eb:c1:0d:c8:0e:60:84:bb:71:0a:84:51:32:8c:14:
bf:27:d3:48:89:d6:ca:47:4c:cf:2d:70:54:ca:10:82:72:38:
28:12:99:8d:d5:24:38:20:6f:26:4f:ff:db:0d:9c:37:9b:23:
be:18:b7:29:5c:14:58:cb:37:f5:b6:f4:12:f1:55:c1:78:88:
bd:96:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:44:55 2025 by rpki-client