Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: jAp4xjBtKhPXbJZVvnYNRReaZ9yte7RZCiaSRv2oCyM=
Subject key identifier: 56:CB:5F:28:30:76:C9:F2:77:52:D9:0B:57:B8:8B:DC:C7:C1:67:1D
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 0196BA48745EFD0303A7AC12AA9797692316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 148E
Signing time: Sat 10 May 2025 13:00:32 +0000
Manifest this update: Sat 10 May 2025 13:00:32 +0000
Manifest next update: Sun 11 May 2025 13:00:32 +0000
Files and hashes: 1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: Ni2XpPHG4qxJ08IVXzoMY6KXIz8ue/u1G5hII+/E8b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:74:5e:fd:03:03:a7:ac:12:aa:97:97:69:23:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: May 10 13:00:32 2025 GMT
Not After : May 11 13:00:32 2025 GMT
Subject: CN=56cb5f283076c9f27752d90b57b88bdcc7c1671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:d3:8c:87:0e:63:8c:29:02:a5:53:6f:d5:
e3:68:08:29:0f:0b:1f:c2:be:aa:b5:11:db:a4:72:
57:dc:e8:4f:93:9f:6c:c3:09:9c:a0:6d:8c:fc:35:
92:98:98:2a:5f:f1:6a:af:7e:61:9c:b4:f9:b1:5d:
46:e5:f3:87:bb:21:aa:8d:b0:d1:b8:46:09:7a:a2:
62:ac:a5:2b:46:72:87:a4:1d:e8:23:89:23:9e:00:
7b:db:6c:aa:ee:3b:d5:c2:5f:04:90:3b:2d:c0:47:
ef:58:02:f8:63:32:05:9d:f6:ad:be:ef:3a:30:02:
94:e3:c6:64:6b:76:1f:36:74:45:17:b6:62:b4:ba:
e1:1a:dc:4c:c3:aa:04:92:71:e6:62:46:3e:20:4f:
9b:ac:68:a1:04:f8:85:79:1b:7e:b1:dd:20:9d:4a:
c5:e5:56:b2:cf:dd:db:10:c2:a5:4b:b0:f7:5c:97:
27:fd:6f:62:9a:d5:31:e3:7e:ef:84:4c:32:2b:3c:
02:79:d5:b5:c6:fc:f7:2b:01:24:d9:d1:a6:5d:d5:
9b:00:20:85:a4:22:fd:69:50:11:11:af:74:9d:a7:
59:8c:fb:1a:58:51:59:c7:2f:45:e0:6d:c2:28:a5:
18:8c:81:2c:9c:50:fa:54:7a:69:8b:4e:34:6c:13:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:5F:28:30:76:C9:F2:77:52:D9:0B:57:B8:8B:DC:C7:C1:67:1D
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a4:b5:a6:83:31:c5:c4:b9:2d:1e:7d:e3:4d:88:93:2a:05:
1f:4f:a8:a3:c2:ee:3f:2d:f4:ef:06:12:82:41:3d:e8:f2:74:
f0:22:42:0e:06:7f:81:e2:12:0a:a9:44:92:b4:ba:3c:22:ca:
7c:0d:55:d3:07:f6:44:54:ba:84:7c:ac:3f:40:53:1c:c3:bc:
fc:bc:17:f5:4e:e9:c0:50:34:96:01:7f:7c:82:44:00:5c:0e:
42:ef:ec:7a:fe:26:d5:f7:f9:56:9e:3f:8d:f2:dd:5d:af:1a:
08:5c:05:5f:d9:b3:ac:e6:8c:3d:cc:34:f8:63:d2:ca:8b:5c:
85:64:3c:e0:d8:73:dc:69:94:96:98:71:e2:31:28:4d:36:c5:
a0:a3:b0:41:c0:a1:d8:31:4a:c3:f0:32:07:6c:0a:d0:ca:d7:
de:19:bd:1a:da:e2:9c:a9:78:65:48:36:58:dc:f2:2b:24:c1:
de:75:52:46:5b:5e:bc:a8:ad:2a:63:41:ff:8c:0d:3a:be:52:
eb:4a:df:3c:82:25:dc:7a:60:4c:46:21:ed:ee:fe:b9:69:44:
a0:81:7c:87:26:81:86:19:77:97:85:ef:3c:0a:c9:ae:9b:de:
42:57:52:81:d9:c1:90:8b:e0:38:e5:b6:0f:0a:72:2b:40:f6:
b5:2a:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:34 2025 by rpki-client