Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: nbjkGN6edk3Z+dM/UOlGi99zfRKdFNTrpD9ehNiZvo0=
Subject key identifier: 47:DB:7B:5F:7E:89:9A:28:88:2C:94:11:6C:B3:97:BC:14:3C:9E:21
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 019682EBC2E45546E09350664A51AD825D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0953
Signing time: Tue 29 Apr 2025 19:00:11 +0000
Manifest this update: Tue 29 Apr 2025 19:00:11 +0000
Manifest next update: Wed 30 Apr 2025 19:00:11 +0000
Files and hashes: 1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: fVUPyzl5QsefT302C9OJB2Uqg0SbMo5as4Yt7Nct0jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:c2:e4:55:46:e0:93:50:66:4a:51:ad:82:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Apr 29 19:00:11 2025 GMT
Not After : Apr 30 19:00:11 2025 GMT
Subject: CN=47db7b5f7e899a28882c94116cb397bc143c9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:5d:80:2a:82:0f:52:43:7b:aa:7b:13:f7:
11:01:5a:69:e6:73:e6:4c:d8:ee:3f:e9:37:d9:4e:
d9:7a:8a:3b:b9:8c:26:5f:76:16:9b:0e:14:23:c7:
fc:93:70:0f:a2:0f:3b:04:7e:50:fc:0f:65:7a:3c:
1c:7f:0b:69:45:74:1b:9f:46:9f:02:dd:78:01:3b:
c1:6e:91:b3:e3:79:97:27:66:06:6f:1d:c4:a3:56:
fb:89:42:d0:5f:e2:7b:44:26:31:67:51:c5:cb:e7:
87:77:42:0c:68:dd:42:cd:6a:96:81:d0:20:8a:0b:
5d:af:70:95:f5:0e:01:63:e3:36:45:d4:b4:f9:2f:
b8:c3:52:87:ab:bd:cc:78:28:8c:6b:c7:c0:37:46:
92:fc:9c:b3:68:6f:32:27:27:e8:c1:4f:6e:4b:9e:
82:ff:78:76:09:ea:3d:75:88:ab:66:a4:bd:6e:00:
e7:66:56:ae:ef:e1:7a:b7:84:d1:aa:58:e4:fe:ac:
50:9b:b7:ed:c6:f5:76:9c:ae:d2:8c:c7:cf:68:09:
db:02:5c:bf:c0:8b:ad:36:02:0c:31:62:56:96:0f:
83:33:1c:b0:f4:5d:a5:d8:a9:91:9d:29:f4:8b:e5:
fc:60:e7:c1:34:e6:e7:6f:f2:fd:89:07:53:bd:cf:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:7B:5F:7E:89:9A:28:88:2C:94:11:6C:B3:97:BC:14:3C:9E:21
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:c6:cf:d9:9c:9b:ae:6b:00:73:b2:10:17:12:ae:d0:a5:
94:ff:17:c7:d6:3c:72:fe:3f:d7:8b:da:2b:5d:e5:c6:45:47:
d1:92:a6:c6:cc:2a:ab:74:91:91:fe:a1:f7:d6:16:c4:8b:80:
ec:20:f3:0c:3a:fe:d4:d7:b0:2f:5f:e3:e4:62:a7:f4:0c:b0:
2e:d8:58:20:a5:08:63:6c:fe:a6:f6:8b:79:5d:2a:08:30:64:
30:56:1b:4e:9d:ca:34:3c:b6:fe:43:43:c6:4f:db:ae:db:de:
bd:e1:7e:45:f5:91:b3:26:87:eb:74:02:00:b4:b4:f3:df:b9:
f0:f9:a5:06:b3:35:81:50:d1:41:f2:22:f1:db:f7:4c:01:6c:
b5:5b:55:43:10:e7:a5:88:55:e1:11:93:ca:d9:6d:f5:bf:36:
ef:14:aa:bd:62:c6:9a:23:1d:61:72:28:3a:aa:ff:06:c3:62:
b7:a4:c3:e0:8b:94:d7:b5:c4:57:c7:5c:47:53:7b:c1:36:d0:
e2:56:a4:c7:52:8e:ea:30:d3:7b:cf:ea:46:0b:09:14:72:82:
ac:d2:93:af:bd:37:b6:1f:be:9c:f4:d8:61:d6:c5:fa:62:6f:
a6:79:0e:20:e0:9b:ab:f7:f7:ff:7a:41:e0:03:2f:13:17:05:
9e:13:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:50:23 2025 by rpki-client