Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: swKtLEq432dRU4pWHW4wZYNv0/3FYg4xnM/2wNFZVLM=
Subject key identifier: 24:F8:6B:72:C8:A0:28:92:2F:42:34:FD:25:07:3A:D5:06:06:26:CD
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 0196759EB3A7E430D56FC863398A19AA48E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0BEF
Signing time: Sun 27 Apr 2025 05:00:56 +0000
Manifest this update: Sun 27 Apr 2025 05:00:56 +0000
Manifest next update: Mon 28 Apr 2025 05:00:56 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: pOWqcuYdhX1CMZMwYVVl/pfCMLjQxyYIiXIp2HFogt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:b3:a7:e4:30:d5:6f:c8:63:39:8a:19:aa:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Apr 27 05:00:56 2025 GMT
Not After : Apr 28 05:00:56 2025 GMT
Subject: CN=24f86b72c8a028922f4234fd25073ad5060626cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:de:99:b1:19:40:dd:d8:52:77:60:88:af:
78:64:2d:84:ee:50:f7:70:64:76:62:44:6d:fb:9c:
3a:06:3c:24:13:ea:84:f6:3e:08:3b:77:b0:da:66:
ad:5c:0e:3b:b3:68:2f:57:cb:bf:12:81:1e:d1:27:
1c:4e:c2:cd:9c:e2:46:ed:46:d0:57:07:e9:db:eb:
4e:b3:98:65:9e:12:ad:49:a1:84:26:75:86:e9:e6:
45:cb:7b:c3:75:9c:0a:f5:23:7d:f8:d9:07:e6:a7:
a3:9b:a2:d2:05:a5:27:a5:45:3b:d3:c5:ac:ff:ff:
4f:61:3e:6b:19:a7:44:d0:48:6e:f7:f3:44:30:e0:
e5:56:b8:dc:e3:bf:23:50:01:1e:3a:06:e0:50:e7:
0e:c6:ad:b5:12:2f:55:bb:db:bd:b7:b3:b9:3a:8b:
d4:f7:67:4d:62:fa:11:f7:f7:4c:28:a2:86:e0:83:
c4:56:a0:84:a0:3d:e5:72:a6:c5:f3:67:52:57:78:
57:be:bb:8b:36:1a:ef:7e:37:6f:0f:0a:89:ba:61:
7e:ca:b7:a9:f7:77:23:3c:c2:a7:de:f4:33:1e:0e:
6a:09:a8:48:9f:1e:4f:66:c7:b7:d4:64:40:78:8c:
13:63:a7:24:a0:7c:af:6d:da:cb:98:11:a2:69:02:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:6B:72:C8:A0:28:92:2F:42:34:FD:25:07:3A:D5:06:06:26:CD
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:fc:9b:3f:b4:b0:7d:b0:95:6b:34:60:de:40:05:05:1a:
dc:23:ee:cd:8b:a1:c8:e1:ed:ce:9b:b5:ab:2f:37:07:b8:04:
16:87:09:9e:2e:35:77:6c:71:d3:b0:e6:e9:1b:28:89:92:f1:
2a:0d:a9:83:c2:99:dc:42:93:3a:59:20:5b:40:39:d1:ab:91:
eb:d0:95:2e:2a:3b:b4:c3:93:24:b9:a1:54:5f:a2:9d:ea:01:
fc:ee:be:66:ee:56:1f:8d:a5:97:e8:2a:24:ea:c3:58:75:bf:
85:cc:88:5b:c8:10:0c:91:a7:43:cb:a1:61:1a:26:bf:ec:cd:
6e:fb:b5:c9:e1:d8:3a:1f:b0:ca:f0:85:4d:4e:35:cd:3a:ad:
05:0a:19:21:f1:66:87:6a:9f:49:6a:3c:d6:b0:3b:cd:82:8e:
0f:62:6c:99:b8:b9:d8:d6:b0:fe:ae:79:d0:61:13:3c:a9:de:
7b:5e:bc:fb:70:b4:93:9e:61:92:66:0d:62:23:dd:af:c0:ce:
36:59:cb:69:e4:43:bd:48:56:cd:d6:49:a0:20:80:91:8f:67:
58:d0:4c:a6:3e:d2:f7:bc:88:0d:a9:23:9d:d7:14:02:fc:88:
94:90:aa:4c:1b:0c:2c:30:3b:7e:39:1b:74:a5:90:9d:64:5f:
21:b1:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:54:28 2025 by rpki-client