Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: jAoibjlxRLjNhRV4hye3si/eaJEdekVYhjQA5do+LLo=
Subject key identifier: 5A:76:99:10:CA:FC:67:6F:54:CB:A7:66:EB:5F:5C:59:56:BE:F2:AA
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 0196BC001741D3A360A30F63930F6E0CE0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 113B
Signing time: Sat 10 May 2025 21:00:44 +0000
Manifest this update: Sat 10 May 2025 21:00:44 +0000
Manifest next update: Sun 11 May 2025 21:00:44 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: bNQiXFXO075/+CUCpEwvj2hgGFHRdkQiYiB1co21H7g=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:17:41:d3:a3:60:a3:0f:63:93:0f:6e:0c:e0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: May 10 21:00:44 2025 GMT
Not After : May 11 21:00:44 2025 GMT
Subject: CN=5a769910cafc676f54cba766eb5f5c5956bef2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:5f:18:56:95:14:f9:92:81:be:44:f1:ae:
9a:eb:8c:16:b0:2e:d6:2c:84:6b:19:9d:4d:ac:64:
02:93:4c:16:93:14:bb:bb:d5:0f:96:ce:c3:1e:d0:
9d:d9:05:a4:88:c2:9b:b9:a3:10:45:d3:8d:71:66:
10:57:d6:e9:2d:f1:77:a0:f6:c5:5c:c6:b6:28:ba:
75:89:22:06:27:8d:4a:f8:a1:05:10:6e:65:56:e0:
2b:80:df:05:8b:f4:e0:95:54:36:ff:39:4d:77:a4:
b6:d2:e4:0b:65:4a:6f:b5:4a:f6:8f:76:27:33:a9:
bb:de:ac:b6:03:78:08:73:f5:09:58:ae:88:a7:74:
81:e6:6e:f9:a7:f6:02:20:11:0d:76:69:94:df:13:
5a:ad:1e:15:37:b2:50:3d:cf:be:eb:a8:99:a5:90:
6e:c2:f7:a2:da:4f:58:97:b3:d3:ed:a4:70:9c:db:
6f:e5:21:55:aa:98:56:b3:91:62:86:73:b6:b2:19:
aa:36:2b:4d:d4:d9:5d:25:d2:cd:d1:f3:81:21:3e:
b3:24:44:5e:15:e1:81:c1:6e:4d:a1:af:fe:e1:c3:
e0:45:2c:c0:87:00:0e:d6:31:dd:24:79:4c:bf:1a:
a6:34:c0:60:04:01:a9:57:c5:2c:47:e0:ea:b0:f0:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:99:10:CA:FC:67:6F:54:CB:A7:66:EB:5F:5C:59:56:BE:F2:AA
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:16:e4:0d:ef:c9:d9:e9:2e:fe:43:54:29:4a:79:d0:06:
0b:fe:3c:03:8f:fe:f3:78:44:98:82:07:39:5d:73:e4:a6:a4:
27:89:a6:5e:36:78:9d:6a:3e:82:07:9b:11:b9:c0:89:b3:d5:
e6:7e:0f:63:81:74:ce:91:fc:94:ab:fc:52:61:ba:31:b6:71:
fa:94:cd:1b:26:06:9e:f9:bb:ec:a7:71:e1:81:fc:9c:aa:21:
40:3f:2f:aa:74:fe:9f:c6:d0:cd:ea:c7:3b:73:ff:95:b8:fe:
5f:0f:53:e5:55:14:d1:9c:3d:7c:fa:ed:5f:83:b6:91:bb:56:
1e:9d:01:ac:a8:56:dc:8e:d7:a5:be:6b:dc:10:48:5e:19:47:
a2:62:1d:01:4d:18:c8:64:f9:02:92:ad:a0:9d:82:b5:06:db:
d1:61:32:55:5c:76:73:8f:c8:b9:cf:51:20:45:ba:9d:0e:ab:
60:74:b0:11:fe:5a:c2:a1:ee:d9:c7:31:bf:eb:d0:91:28:36:
62:4f:c2:6b:0a:36:0e:65:3f:4a:f6:5f:7f:39:60:24:fb:09:
57:0e:29:02:5c:47:4f:3f:09:2e:28:68:df:33:f8:b8:3d:6d:
ff:f5:63:43:6e:0a:67:6e:8d:7d:ad:38:d0:2b:13:82:da:a9:
52:57:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:22:39 2025 by rpki-client