Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: CZdFiqopnCfNPbNLwJ9kqNFm5FfYGCfz4iZKuDhDyMQ=
Subject key identifier: 1C:CA:CE:06:95:9E:90:21:0A:07:0A:B0:31:C9:7C:48:0D:FE:DF:FD
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 0196B3D8EA8792C9AAB5523CBF2755714F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 035D
Signing time: Fri 09 May 2025 07:00:59 +0000
Manifest this update: Fri 09 May 2025 07:00:59 +0000
Manifest next update: Sat 10 May 2025 07:00:59 +0000
Files and hashes: 1: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (hash: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=)
2: bEaDZXG7S2leXjfPjK7xD1jlEso.roa (hash: 0ajGtMp7A+lCJYkJshgX77oQEEisjFcdxQ+Z17PMX8g=)
3: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: UhFRy44Vx92epQFhfsSwpvBaQ/Uv7p/9wuUOGHkiM6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:ea:87:92:c9:aa:b5:52:3c:bf:27:55:71:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: May 9 07:00:59 2025 GMT
Not After : May 10 07:00:59 2025 GMT
Subject: CN=1ccace06959e90210a070ab031c97c480dfedffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:78:c4:05:52:c2:4e:6b:75:9c:4a:28:35:
d7:19:72:12:50:8b:51:cb:fb:b1:c7:aa:20:a1:f1:
86:76:4a:a1:ef:d7:28:46:00:88:5e:15:c0:7a:4e:
14:72:75:9c:8c:c3:ab:f4:84:c7:64:fd:a8:ad:18:
03:df:62:ba:fa:42:e9:69:de:8f:c1:ce:5c:67:bc:
1a:a7:7c:d0:49:c1:52:08:86:02:ff:ce:2b:e6:ff:
6a:53:78:53:52:c8:3d:6b:bf:fa:74:4c:bf:0e:9f:
68:10:5b:9a:6b:e6:c1:30:ec:e4:6b:25:89:dc:f2:
94:d4:10:69:fc:10:be:6a:74:c9:db:b1:02:e8:da:
16:9a:bb:b3:62:8d:79:08:02:c7:36:c5:1a:8e:d6:
8f:bd:c0:a0:26:c2:9f:30:14:65:11:90:8b:bf:62:
5f:74:68:a0:a8:cb:de:fd:87:02:c6:eb:97:0d:a0:
fd:07:2c:c1:a5:2e:fe:3d:59:29:5e:45:45:c4:70:
18:23:00:83:87:f3:2c:5e:ed:46:b6:6c:ac:ff:be:
ed:a8:c2:ad:88:ec:fd:f4:61:2e:1d:35:9a:46:e9:
6c:79:02:65:97:57:60:ab:93:7f:b3:c0:38:29:2c:
19:92:3f:96:f4:fd:7d:98:19:25:ac:72:b2:ae:a2:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:CE:06:95:9E:90:21:0A:07:0A:B0:31:C9:7C:48:0D:FE:DF:FD
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b5:c2:86:dd:f7:21:e4:9f:bd:06:1e:b5:12:6b:ce:6d:87:
be:2d:ca:8c:b8:15:48:dc:2e:dc:ad:72:c5:03:67:1f:c4:3d:
87:59:af:51:d5:aa:cd:c4:c6:78:b8:4e:c3:cc:ae:62:1b:e2:
7d:f5:23:5f:8f:8f:0b:a7:4c:6e:80:4c:4c:1d:31:04:54:64:
de:13:8e:f9:68:16:46:c7:6c:7a:70:a8:0b:b3:8b:ea:90:a7:
71:c8:69:d2:e1:50:82:67:72:05:a1:d6:ba:38:37:2a:08:7f:
ec:ce:ef:e5:e9:ee:4e:7c:51:d1:36:4b:d1:5a:8a:48:89:de:
83:6b:9c:1e:f4:85:2a:12:85:72:1c:52:dc:10:5a:bb:5e:18:
7c:38:3a:fc:c8:fc:3f:52:50:a4:8b:15:2d:73:8a:f5:96:f9:
e8:05:7e:32:89:3e:cc:73:d1:1f:8e:5b:55:12:f5:cb:d5:76:
ad:6b:54:2a:93:f9:85:dd:31:f6:ca:87:72:d5:70:fa:d0:94:
04:b1:07:6b:44:00:69:4a:29:15:15:f7:c5:50:89:25:0e:8e:
29:ec:7e:c7:50:50:a6:de:dd:a5:fd:8d:05:a8:71:63:dc:fe:
32:36:b7:e2:1c:36:e1:89:61:83:7c:a5:80:4f:f9:e1:22:32:
fe:7d:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:15:54 2025 by rpki-client