Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: jzGYneejmq/g+y2JuWwUghd1UQIiem/oOe9u4a0nkX8=
Subject key identifier: 87:5A:B7:E2:FA:20:08:D7:48:98:DA:2F:F6:DC:40:40:92:90:CB:FE
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 0196C1943E4F038AA2375B0CF1BB106A1CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0965
Signing time: Sun 11 May 2025 23:00:40 +0000
Manifest this update: Sun 11 May 2025 23:00:40 +0000
Manifest next update: Mon 12 May 2025 23:00:40 +0000
Files and hashes: 1: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (hash: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=)
2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: UONFKDv4bwoT9XFfUaFvdqvsUDuy0xW3PUv74ko+zi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:3e:4f:03:8a:a2:37:5b:0c:f1:bb:10:6a:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: May 11 23:00:40 2025 GMT
Not After : May 12 23:00:40 2025 GMT
Subject: CN=875ab7e2fa2008d74898da2ff6dc40409290cbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:57:e1:33:3e:ed:17:ff:46:00:ce:1e:62:
19:40:18:7f:2b:25:74:e9:53:d7:8b:7f:f1:8f:8c:
84:b9:15:b5:c5:8c:fc:a9:fd:72:f0:df:0e:89:cc:
99:72:3b:22:70:ab:91:1f:7f:92:08:77:61:20:b4:
0f:20:b1:d2:01:bd:af:78:6f:37:c7:be:b8:62:9f:
f0:41:97:01:64:26:00:2f:bd:92:40:87:b1:7e:54:
5c:19:7b:2c:bb:72:51:44:76:f7:a7:e6:09:51:f6:
68:6d:78:8f:c8:4f:18:d3:80:d0:96:fa:de:39:3b:
2c:36:b1:29:60:db:2f:f8:b0:96:33:dc:a9:9d:73:
30:3b:b2:06:c5:07:ea:8e:fa:19:69:1a:56:4e:65:
7c:9c:b0:23:64:0f:1f:1e:72:07:75:9a:f7:30:fc:
18:51:d5:bf:28:46:15:4e:84:76:ac:64:1c:3d:70:
cb:2b:ae:1a:30:af:05:27:29:b5:6d:5f:bf:47:f8:
af:04:0f:6f:c0:ae:f3:94:de:96:8b:06:9e:38:34:
e0:94:88:1d:b7:7a:19:bf:a2:87:c7:d6:2e:2a:be:
a4:5c:0b:87:af:88:72:4b:e5:95:a0:2b:40:d7:58:
a2:32:f5:54:df:cc:58:55:9a:03:e5:3b:8e:79:67:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:B7:E2:FA:20:08:D7:48:98:DA:2F:F6:DC:40:40:92:90:CB:FE
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3c:bc:50:e6:8d:bf:3f:00:4a:d2:3e:22:70:92:92:8c:bd:
69:57:21:f8:b9:6c:a3:a9:93:14:77:9a:2f:c5:eb:d0:b5:d8:
37:cd:d2:f7:07:25:42:c4:99:25:a5:85:57:bb:7b:3e:84:81:
9f:93:82:4a:ac:1a:7d:c6:8d:5e:30:94:28:4c:36:78:fc:4d:
31:96:96:3e:74:c5:39:16:12:b1:dc:ed:aa:6d:7b:10:87:db:
cc:1a:b8:6f:9b:78:f4:75:3c:9b:54:37:1e:a5:c6:ee:18:a3:
d0:bb:64:0f:7f:25:62:16:c6:0e:49:e9:90:d6:67:8a:43:1b:
16:30:1e:c4:3d:92:79:83:5d:55:f0:2b:b0:ea:9e:9a:0a:66:
ce:c6:61:32:85:fc:17:e9:57:a9:e0:41:42:d0:8b:4e:fe:e1:
e2:d0:cf:b1:63:96:2d:76:7f:c5:96:ea:81:b4:2a:56:e9:0f:
f5:7c:67:54:f9:07:8a:26:03:73:28:bb:68:4b:6b:e9:d6:65:
32:d7:52:dd:18:cc:fe:f4:fe:b9:91:89:f4:88:ce:c3:bc:95:
5c:58:7a:e5:e5:48:8d:38:20:ab:00:7b:c0:c2:bf:76:67:f2:
25:bc:c0:bb:ac:ee:64:00:d8:be:9b:6c:df:d1:2d:25:4d:0e:
01:de:a9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:36:44 2025 by rpki-client