Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: Hn6kn9jAvvnv9UQ0Hmfgi7Ve7B+hhIfhPBUODn7qWmQ=
Subject key identifier: 04:31:8C:D5:95:03:20:8C:F2:EF:A1:37:10:72:94:6D:2F:09:B3:C6
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 01967D20E9D84F23B3D76F18C2B5428BED7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 04D7
Signing time: Mon 28 Apr 2025 16:00:31 +0000
Manifest this update: Mon 28 Apr 2025 16:00:31 +0000
Manifest next update: Tue 29 Apr 2025 16:00:31 +0000
Files and hashes: 1: Myd15gMrCliz6UcSUIWdQJsW6Z0.roa (hash: KNSAanuPg0NI3AJP/E/C6OAIqMKQEnFg1+ec0Jx1Kuo=)
2: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: faYDfjGiRh9y5CzO7SceeoN3tBXtf1qk6r2tSgP9Ra8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:e9:d8:4f:23:b3:d7:6f:18:c2:b5:42:8b:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Apr 28 16:00:31 2025 GMT
Not After : Apr 29 16:00:31 2025 GMT
Subject: CN=04318cd59503208cf2efa1371072946d2f09b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:49:2a:22:49:27:37:6b:4e:73:b2:6d:21:
4f:7c:bd:9f:57:8a:16:af:3e:6c:0e:96:9c:e5:41:
60:ce:d2:75:f0:37:04:74:ad:f2:6c:5d:e3:f9:bb:
1c:20:5e:95:ee:d8:80:4b:32:e1:4b:c2:d6:54:0f:
45:e9:9b:c1:e3:33:87:a0:80:47:94:1a:29:24:43:
56:3f:60:35:6f:35:6f:1b:55:ef:46:2a:db:e4:cc:
cb:32:55:76:e4:e4:59:f7:a6:b5:41:e1:03:d3:0f:
21:ca:7e:f1:60:7f:d1:bf:1d:13:2a:cc:5b:33:20:
71:90:d0:b5:24:20:a1:96:bd:22:2f:ca:9d:56:74:
b7:3a:9d:c5:8e:96:45:d6:be:32:8a:c2:8d:69:b1:
80:90:dc:2c:4d:77:75:6b:e4:74:c9:d2:e8:d1:d1:
cc:7e:7b:08:c8:60:b8:d3:f7:d4:13:ef:77:b9:dc:
47:fd:87:88:76:4e:b7:5b:02:d1:15:a5:d9:43:04:
e0:14:80:09:1b:39:4b:c3:ef:8d:42:91:5a:51:25:
f5:d6:c9:98:d6:00:b1:7c:e9:90:6a:03:9d:05:ed:
87:fc:94:dd:ae:5f:78:79:86:ca:d8:b7:1e:f1:74:
a3:5e:12:63:eb:59:53:55:97:7e:f3:7d:ab:fc:fa:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:8C:D5:95:03:20:8C:F2:EF:A1:37:10:72:94:6D:2F:09:B3:C6
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:9e:07:09:9f:42:00:8f:89:1e:6b:4d:ec:76:96:c7:29:
67:de:60:0c:d2:6c:c1:ba:68:e2:a5:28:2a:bb:ad:17:b3:77:
e6:e5:ff:75:a1:ea:01:5c:2b:ba:ed:b7:e1:e2:72:98:2d:17:
3a:09:57:a8:3d:5c:26:11:04:94:b7:93:a7:92:46:1b:84:d7:
cf:ba:c3:0d:ba:0a:b2:66:5c:5c:54:1a:a4:79:04:15:55:98:
a8:7f:54:84:e9:59:b5:a0:2c:f5:d0:e7:5a:25:f8:0f:d9:09:
d7:df:d9:21:bd:a8:4e:12:ad:7f:e6:57:62:a6:49:a8:82:2c:
c8:8b:b2:22:f4:64:93:27:e8:cd:f1:5c:42:26:5f:26:c1:e3:
f9:30:31:59:26:89:33:17:ec:3d:1e:e6:14:85:84:ee:f1:28:
2f:6b:98:d4:6c:1c:2b:3d:b6:e2:f7:ba:1b:1a:58:88:aa:6b:
61:ca:3b:ab:ca:b2:47:b2:58:1f:ce:5d:3e:86:cb:0d:ae:7e:
b1:31:9a:2d:0e:12:9a:7c:d0:08:8a:29:1c:c1:f5:f8:ad:83:
ab:e0:ef:b1:37:37:10:54:31:bc:b1:29:a6:6b:51:3a:f7:bc:
0c:82:26:b2:e6:29:30:85:91:46:06:c9:85:b5:09:19:78:03:
4d:7b:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:19:06 2025 by rpki-client