Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: 2PzL/ALjTJyj7y04c9n7sHyETD+aqTlgT2mNsyQ8qpQ=
Subject key identifier: 57:2B:13:72:6F:C1:6D:23:71:2E:16:A3:04:86:A9:8A:7F:CF:0E:2F
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 01967CE9F64B2F27C3E22A36F98F19EE896F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 031E
Signing time: Mon 28 Apr 2025 15:00:29 +0000
Manifest this update: Mon 28 Apr 2025 15:00:29 +0000
Manifest next update: Tue 29 Apr 2025 15:00:29 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: CLoIRcio/nIvkJeTh4xkkvLcG3SSZ9cHUHj9M07/Ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:f6:4b:2f:27:c3:e2:2a:36:f9:8f:19:ee:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Apr 28 15:00:29 2025 GMT
Not After : Apr 29 15:00:29 2025 GMT
Subject: CN=572b13726fc16d23712e16a30486a98a7fcf0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:f5:8f:cc:d5:96:10:13:fe:2b:b5:82:eb:
8c:04:ee:84:05:2d:49:05:30:c5:95:b2:ce:b1:4a:
04:7c:7a:58:54:87:16:81:37:0a:96:9a:43:27:8c:
97:4b:6a:65:34:18:9b:67:b2:56:f9:4d:7b:a2:de:
5d:ae:0b:bd:22:d8:19:05:7d:fb:97:41:1f:ff:53:
47:a2:4e:ea:87:76:5a:e7:52:86:bc:d9:c2:7f:3b:
85:9d:d9:a6:5f:57:a8:91:8d:60:27:6e:cd:be:a9:
3a:b9:18:ab:11:d0:62:7e:c6:2e:ae:85:cd:93:db:
ef:82:a8:f7:39:5b:57:ab:33:82:d4:c1:1a:20:d8:
31:c6:4d:9a:b2:f6:7a:30:e2:51:51:b6:33:d4:62:
2a:b6:48:18:53:76:59:3d:26:89:fe:cd:f4:2d:4c:
99:a5:73:55:53:8a:3c:11:bc:72:93:e2:e4:26:0a:
a1:83:22:6f:e0:c5:e9:58:0c:e7:df:38:f6:cf:d1:
92:74:ff:54:b9:37:a5:e8:32:ee:80:ae:7a:bd:bf:
92:f2:86:a3:53:12:47:31:a5:bf:2b:9b:36:ae:c7:
ca:47:fd:38:58:22:13:58:2b:d9:27:c5:51:fd:5e:
27:e2:af:be:b9:07:f8:c7:0f:65:a7:cf:b2:5d:40:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:13:72:6F:C1:6D:23:71:2E:16:A3:04:86:A9:8A:7F:CF:0E:2F
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:2e:20:9a:5c:87:a5:b9:be:9d:88:a4:97:cf:a2:14:b5:
e9:db:e2:de:a6:70:62:c1:f5:ef:29:4a:22:6e:36:86:ca:42:
52:eb:b4:bd:7f:4a:d9:a0:51:38:e7:75:f3:57:a1:1b:82:26:
a7:90:4d:1d:90:dd:9e:ea:df:de:46:64:1a:36:d6:b1:b3:5c:
cf:ee:a6:c5:0c:47:92:30:9b:4f:d8:93:b3:c6:03:3e:a0:73:
19:f5:21:4e:32:39:a4:9a:25:69:7e:ca:81:21:7e:57:cd:19:
47:98:3b:0e:43:63:f8:69:3f:d2:86:3e:01:e3:68:ed:50:a7:
49:52:94:88:c2:c9:17:93:3e:d4:98:b2:be:31:d3:4c:68:99:
4a:24:f4:57:06:94:e0:72:bc:68:cd:96:b7:a6:6f:39:1c:2a:
52:21:18:11:b9:d1:d6:06:5c:02:cf:36:2a:42:83:9b:ff:9f:
63:e1:97:97:ff:5f:59:59:ea:65:9a:b4:89:94:57:fe:e1:d9:
cc:58:fc:8d:ff:7b:4e:cc:6b:85:3c:00:c2:29:85:8c:a2:c1:
fc:18:63:58:47:a9:92:57:ae:81:c6:d4:11:4d:b5:a4:03:45:
b8:89:1d:d9:ec:d2:cb:dc:c9:ae:0f:34:a4:03:90:e0:44:67:
c6:05:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:04 2025 by rpki-client