Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: 7sYExGaIQHQ6iaZWda325AAm4ZOFw4iv//4vsB7S0Ek=
Subject key identifier: 0B:EA:F7:52:4F:C6:89:A2:C5:27:F6:03:1C:F7:C0:42:DA:68:A3:C5
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01967755E174A869F96DC3310A65256E0717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 13:00:39 +0000
Manifest this update: Sun 27 Apr 2025 13:00:39 +0000
Manifest next update: Mon 28 Apr 2025 13:00:39 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: f+EB9WdJjUCHC9x1h3OgW9Xjlo1qxtvcE5+4wgIpUps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e1:74:a8:69:f9:6d:c3:31:0a:65:25:6e:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Apr 27 13:00:39 2025 GMT
Not After : Apr 28 13:00:39 2025 GMT
Subject: CN=0beaf7524fc689a2c527f6031cf7c042da68a3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:c1:82:33:4d:02:8e:17:66:0a:d8:a3:6f:
22:ad:98:ee:78:6c:91:77:31:26:54:3e:63:46:56:
e0:d9:2c:43:a7:f2:4f:be:6b:db:ff:68:4d:c9:92:
7c:80:92:c2:a8:91:ce:2b:31:66:17:24:20:06:c5:
f0:95:b5:92:39:66:2c:40:d4:d6:18:df:9a:7b:d4:
d2:ee:53:99:86:ed:0c:83:fb:16:0e:ac:0d:73:b6:
c6:d6:46:8a:12:d5:95:4e:80:b4:6b:ee:34:33:da:
c1:09:2e:2d:c1:1d:29:f5:c2:b5:d9:5f:0a:54:bd:
d1:83:45:98:f7:da:53:7f:84:2c:c0:99:7f:f9:bb:
cf:d0:26:3a:9b:b8:65:26:67:66:43:3a:a7:97:4c:
43:88:ef:ef:9c:7e:8b:3a:e2:35:0c:de:9a:23:53:
1e:b7:6a:df:28:41:db:78:73:02:b0:30:45:1c:17:
88:36:6b:21:da:ee:13:af:fc:2c:bb:82:ed:c7:b9:
8c:96:30:95:f8:cb:f5:9a:3c:0c:1c:11:7f:0e:64:
15:68:f5:2f:9b:c5:16:a1:b0:5c:d5:0d:75:df:8d:
79:a9:07:db:22:63:bd:97:5e:5c:15:10:a9:57:8b:
03:c4:09:f1:14:09:d7:8e:07:46:c1:60:9d:64:e0:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:F7:52:4F:C6:89:A2:C5:27:F6:03:1C:F7:C0:42:DA:68:A3:C5
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:da:91:20:c7:e4:6b:39:80:e4:47:14:fe:98:12:6b:b3:
be:eb:48:81:bd:57:34:2b:2e:13:4c:b7:6d:d0:51:34:c6:01:
2b:1c:e3:90:2c:6c:5a:b7:4a:ab:fc:e1:89:16:4d:3a:2e:51:
ce:82:ac:66:2a:4f:b9:9e:3f:a5:b3:49:59:a0:7f:ab:a1:65:
63:f2:8c:2b:08:0b:68:7d:49:18:d0:93:37:67:55:2e:73:3c:
cb:7a:56:ee:a1:86:92:1d:4b:09:bb:8c:56:d6:d2:44:a5:0c:
a8:f0:10:96:11:63:53:f0:41:ef:af:bb:8c:a3:bb:f1:2c:66:
d8:aa:bc:e8:44:bb:c9:19:db:36:bf:87:72:b4:45:1c:8b:27:
88:81:2d:f5:c9:de:af:3b:67:c9:3f:ca:f1:ae:69:32:63:39:
0a:db:d2:ca:39:50:f7:9f:d9:10:47:02:ac:44:df:96:0f:41:
7c:7c:16:25:f9:ba:cb:21:7d:58:86:c7:69:08:1c:2b:93:94:
ee:f0:0f:52:48:e0:5a:b1:4b:f4:6c:d0:fb:ea:40:a0:25:79:
a4:96:01:0f:03:b2:73:47:44:d4:b3:08:2d:b4:6c:a7:0d:0f:
4a:3b:66:b4:f9:9d:eb:16:df:47:58:a4:05:ba:b4:3a:2f:54:
60:da:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:14:40 2025 by rpki-client