Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: bdL2mmA7ho7Ww93D0mm+TLNVufjE7B53mL58n6f9AJs=
Subject key identifier: 22:DC:23:76:B6:3E:C6:FE:89:5F:38:91:8D:20:D2:75:34:61:65:8B
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0196C0B85632FF7314EFBCF2DDC3DC956CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 0F30
Signing time: Sun 11 May 2025 19:00:28 +0000
Manifest this update: Sun 11 May 2025 19:00:28 +0000
Manifest next update: Mon 12 May 2025 19:00:28 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: 45ZUKZacoDxiMwHNsqOG4mwPl7MhCl+u52m1r0jKC6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:56:32:ff:73:14:ef:bc:f2:dd:c3:dc:95:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: May 11 19:00:28 2025 GMT
Not After : May 12 19:00:28 2025 GMT
Subject: CN=22dc2376b63ec6fe895f38918d20d2753461658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:31:50:0b:8e:70:83:b6:55:af:4a:56:e5:
41:f2:91:c5:29:2b:24:ec:8b:2f:84:f6:12:be:e3:
c9:e4:4e:23:b7:13:31:6e:bd:e3:f2:26:62:33:2d:
e1:c1:e6:56:f3:b9:a8:96:c3:51:13:01:cc:c8:d6:
d2:aa:46:8c:2c:1d:97:bb:72:1d:53:a5:14:7a:e7:
e9:c1:d0:7c:80:5d:84:a3:47:af:86:03:70:7b:88:
2b:da:08:35:2b:1f:11:a8:05:bd:78:a8:02:03:c8:
88:55:bd:e8:2e:2b:39:df:47:4f:61:ab:c4:eb:8a:
3f:05:ac:31:57:8f:e2:2c:62:e2:5b:9f:2f:49:78:
a3:91:2b:67:ac:7e:4d:92:e9:3f:4c:d9:e9:3c:a4:
43:d1:8b:a5:cf:a7:48:87:3e:59:83:b1:95:33:57:
15:ed:d3:6a:66:d9:ab:b7:5f:c8:c2:70:4f:25:0c:
5a:85:19:c3:e1:73:db:0d:25:5b:d9:3f:f8:2c:2c:
b0:17:2a:5a:a7:dc:bf:61:b0:4f:53:fa:0e:7f:e4:
4f:da:da:0c:d2:81:b8:38:73:ea:de:4e:46:b1:cc:
b8:bd:10:19:c9:f0:2c:3a:87:f7:a2:58:2c:8d:f6:
63:bd:99:a0:04:2d:47:c4:53:eb:ab:a9:e1:f2:e5:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:23:76:B6:3E:C6:FE:89:5F:38:91:8D:20:D2:75:34:61:65:8B
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:90:b5:bb:cb:fa:1f:49:ed:26:e0:c0:f8:b2:91:4d:3e:5f:
ff:3b:ec:df:43:52:36:d4:eb:a4:8d:3b:5b:96:73:8e:73:0c:
29:54:94:39:c3:66:2b:11:4a:36:c3:66:18:73:31:1f:93:e1:
a0:be:d6:46:8b:37:3d:27:04:25:86:96:8a:d0:43:9a:1c:81:
75:d7:98:b7:34:fe:37:fb:1e:fb:b5:63:a9:15:db:b6:d5:15:
d8:85:55:1f:ae:41:3f:f0:bc:b9:2c:e0:0a:d1:e4:f4:28:3c:
1b:78:ec:ee:8f:a3:92:d1:81:da:0a:01:15:b8:4b:1f:2f:65:
18:9b:dc:45:51:47:f5:0b:42:17:c4:e3:6c:df:22:37:b5:e7:
e9:a2:a5:5d:dc:c7:b0:f5:b0:6b:98:9b:c6:92:25:15:0d:63:
4d:bf:b4:21:0b:c0:5a:6e:f2:31:43:5a:a7:2b:ff:bc:73:c4:
70:c5:eb:2c:0d:af:30:1d:ee:8f:01:98:a4:ca:a7:69:d2:6a:
33:53:d3:89:a0:31:cf:d6:0b:cc:05:05:ad:10:9a:78:a1:0b:
af:1c:1f:69:0a:90:0e:ea:32:9e:95:5b:30:a6:72:31:fd:38:
28:3b:07:ad:bf:0c:f9:50:32:34:6d:ba:df:74:e0:11:ac:1f:
12:00:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:09:46 2025 by rpki-client