Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: qWApn9/hgwj5RSla9/KXk5uyqA3bMSXThh52jY9nIDQ=
Subject key identifier: 68:DF:60:44:7C:1C:5C:80:0B:D9:57:13:5D:31:85:BC:96:FE:96:A2
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 0196B52259302B293249936C5F85052C17C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 13:00:49 +0000
Manifest this update: Fri 09 May 2025 13:00:49 +0000
Manifest next update: Sat 10 May 2025 13:00:49 +0000
Files and hashes: 1: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
2: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (hash: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: NzfnNvAxlQ047lkyDepFZgZw/zNASn3Tn6+M7lz1SNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:59:30:2b:29:32:49:93:6c:5f:85:05:2c:17:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: May 9 13:00:49 2025 GMT
Not After : May 10 13:00:49 2025 GMT
Subject: CN=68df60447c1c5c800bd957135d3185bc96fe96a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:92:ec:d9:eb:02:cb:4a:7e:fc:87:83:10:
08:96:93:be:80:56:7b:d4:9d:85:12:d7:a8:43:04:
d2:5d:4a:38:ea:1b:f3:27:df:b9:6c:e9:9f:29:7b:
40:23:d6:0a:58:08:09:79:1d:9c:31:4f:86:cb:76:
56:15:1f:79:31:5c:f3:c5:81:ea:18:95:ba:ae:ae:
f3:e1:c9:b3:65:92:a6:68:52:5f:35:50:73:9e:d6:
d7:d5:2d:cb:15:8f:60:cb:2d:9f:67:55:6e:ed:c1:
f6:eb:b6:29:e7:c4:66:9f:f0:40:6c:c6:02:29:ee:
e9:bb:e8:c4:bc:d3:a2:9b:41:47:44:0e:60:7d:dc:
8f:40:d7:c3:5c:46:68:36:23:f1:e4:94:3b:63:5e:
f0:0d:8d:4b:da:29:c3:90:71:1e:d1:e5:5a:35:d5:
dd:e0:ad:0a:4a:cf:6a:9b:07:65:0d:d4:95:88:6c:
81:f5:5c:5a:8e:da:38:64:06:59:d4:b0:63:df:56:
6d:9c:8f:7a:cd:5f:d2:a6:2f:83:1a:56:57:23:ac:
be:d8:f6:22:82:fb:61:d2:f0:d7:5d:37:85:37:ef:
d2:df:be:dc:56:32:35:6b:ca:d3:db:07:46:23:97:
b5:51:8b:24:d2:3f:61:ba:a1:90:c4:ad:08:c3:74:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:60:44:7C:1C:5C:80:0B:D9:57:13:5D:31:85:BC:96:FE:96:A2
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:1c:cd:5f:51:a1:03:5b:5c:2d:c8:3e:7c:58:d9:d0:fb:
2e:5d:7a:1d:84:c4:59:64:fa:17:ad:98:7b:83:16:9b:31:1e:
8e:0f:62:b3:e9:4e:49:f8:18:e3:97:64:fc:84:60:1c:a7:40:
09:56:99:40:66:26:04:08:9a:70:5e:19:f2:3d:f4:8a:35:e9:
c2:9c:5e:31:1d:07:fb:d4:32:8e:f7:e8:fd:1b:25:b4:5d:18:
23:d1:cb:b6:74:04:d0:4e:d7:ac:58:22:36:14:ed:11:16:4a:
a6:8b:48:65:9e:bd:c3:e0:4f:1b:44:cb:3e:48:ff:6e:97:d5:
1f:8b:5d:0f:ac:52:28:6e:a5:75:b5:e9:70:bb:96:34:9d:6e:
cc:18:09:1b:91:4f:87:13:5b:14:91:36:26:35:6c:ba:f7:46:
db:d6:dc:d0:fb:27:89:cd:58:9c:e6:98:da:b4:72:3f:31:0b:
3c:36:0d:56:52:cc:d9:e9:91:d4:50:24:81:06:bf:b0:64:41:
ae:fa:6a:df:16:23:bd:6c:0d:60:4e:47:ff:78:af:6e:0f:68:
3b:6c:a4:24:63:61:44:a6:c3:a7:ea:11:05:aa:4d:d6:4d:51:
dc:1e:84:03:53:62:94:33:87:7e:3b:c1:2d:a7:9f:de:51:48:
49:cc:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:23:27 2025 by rpki-client