Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: O5VxtnEOD+Qv71UgU/Wgb91tTRiKi1rO4r+HjR9iUE0=
Subject key identifier: AE:7E:AA:64:3C:0E:20:4F:F4:41:00:FC:77:FE:08:C4:A2:11:01:51
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 019677562D0B46D92E44E63647E7CE675ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 109E
Signing time: Sun 27 Apr 2025 13:00:58 +0000
Manifest this update: Sun 27 Apr 2025 13:00:58 +0000
Manifest next update: Mon 28 Apr 2025 13:00:58 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: xU1m+zZnBN0+C2lXcZ9cmtZ3YCI3RlVxGBRXfh5qmKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:2d:0b:46:d9:2e:44:e6:36:47:e7:ce:67:5e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Apr 27 13:00:58 2025 GMT
Not After : Apr 28 13:00:58 2025 GMT
Subject: CN=ae7eaa643c0e204ff44100fc77fe08c4a2110151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:37:be:ba:7f:27:ab:2b:59:32:08:28:29:
25:4b:83:91:6d:d7:c2:15:4a:3c:eb:c1:8c:2d:5a:
07:b1:09:24:73:7b:72:0b:e6:42:66:51:c8:2a:76:
ee:80:33:16:c9:c6:f0:96:44:ec:79:af:72:24:86:
86:ac:a3:a0:49:5d:21:cf:87:7b:dc:34:df:43:b4:
35:06:2f:19:18:de:57:8c:36:f8:8e:1c:d0:16:68:
72:c1:3e:e1:c8:e9:cf:a4:db:30:ce:a1:fb:ed:f7:
06:2a:02:8b:86:f3:29:74:c5:41:11:71:ee:d8:e0:
b3:70:3d:dd:c8:cf:bf:15:2b:5d:aa:55:dc:75:be:
8d:2f:81:78:19:b6:89:6d:8d:d3:8f:4f:10:f5:9c:
28:4b:7f:8b:81:7d:21:9f:3b:03:0e:16:05:c3:ae:
a4:f6:c4:2c:66:91:73:ec:18:a2:bb:da:48:3a:90:
90:d7:a7:41:d9:8c:0d:3e:5b:6c:c7:2c:c7:83:44:
75:b7:3d:d9:c1:3f:35:47:8f:82:29:0f:8d:31:88:
d1:59:93:fd:e3:dd:55:ed:ef:1e:3b:4e:22:38:c7:
84:00:1e:42:36:5c:f7:5d:a1:8d:cc:35:e4:27:ef:
13:36:36:02:ba:cc:d8:a5:a1:00:8d:63:ac:0a:3b:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:AA:64:3C:0E:20:4F:F4:41:00:FC:77:FE:08:C4:A2:11:01:51
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:6d:d5:7c:85:42:92:da:a6:6e:eb:60:91:dc:25:de:1d:
ac:6c:21:9b:3d:e3:e0:fe:a4:f4:a8:4d:b3:55:59:52:0e:86:
80:e3:d0:26:25:52:e1:3a:5f:c7:83:fb:14:46:66:03:9c:d0:
66:c0:1e:3f:7b:8a:1c:61:54:16:b4:0c:db:d1:27:97:1c:62:
33:f6:0a:bf:54:f4:d3:f9:2e:3b:83:05:67:bb:6d:13:b2:3c:
1d:79:c7:44:e5:27:0a:59:a3:16:22:b9:a1:1c:96:78:59:b7:
30:2c:ea:c4:cc:fd:79:61:f0:f0:1c:cc:58:c7:0b:6f:15:78:
68:2c:f9:8b:94:e4:53:ea:72:02:e3:cf:1b:d5:8e:5a:c4:03:
2b:86:17:1f:d0:e1:29:20:38:d3:6a:65:0f:47:22:a1:f1:21:
39:b0:bc:2e:e8:ac:2b:44:3d:19:01:c5:f0:34:eb:26:68:67:
cd:ca:47:d9:a5:b4:00:e4:52:2c:a9:d4:92:52:78:f4:5b:d6:
0e:58:6e:f6:7c:7a:02:c2:0e:69:eb:ca:08:ad:99:f5:3e:1c:
da:48:0a:c4:88:f9:37:f9:9f:25:5d:18:dd:a2:39:69:83:af:
91:5f:6e:d2:e2:b0:c9:61:01:bb:3a:ad:6a:04:59:1e:d5:2e:
c8:71:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:56:15 2025 by rpki-client