Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: zNv9KTpAXYKZefyLLnvote0U9jnR2n1B7NqiaLsiRrg=
Subject key identifier: A9:B6:06:B7:13:F2:49:66:9D:C9:7E:7B:27:18:7F:F0:1E:D4:B3:2F
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 01969D87D976B8F4816C9200C43156C50F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 01F7
Signing time: Sun 04 May 2025 23:00:48 +0000
Manifest this update: Sun 04 May 2025 23:00:48 +0000
Manifest next update: Mon 05 May 2025 23:00:48 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: iL7dQ5GZDrWFxpNvrvVnBxMRWXdvbqOp/GSbZFNrj4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:d9:76:b8:f4:81:6c:92:00:c4:31:56:c5:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: May 4 23:00:48 2025 GMT
Not After : May 5 23:00:48 2025 GMT
Subject: CN=a9b606b713f249669dc97e7b27187ff01ed4b32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:7d:fa:69:7e:0b:42:35:a3:cc:62:7e:8c:
1a:20:b4:a1:7b:87:50:3d:e7:e8:f3:ed:68:f3:b5:
ad:cc:52:b0:fe:9b:c4:f4:3c:db:ef:00:74:5e:6e:
48:b3:05:83:86:d3:f0:ff:95:ea:e7:74:64:72:06:
1e:00:87:15:40:3a:b5:10:f5:47:79:38:01:aa:3c:
a5:8b:29:be:82:9b:49:dd:77:54:ac:fa:9e:af:0c:
dd:c8:c7:c8:33:2c:ac:28:2e:0b:80:cc:22:ab:58:
85:d2:40:3c:50:c5:8a:bd:77:da:9c:33:26:65:58:
86:c1:92:88:96:46:e9:9c:8a:f8:36:f2:f7:c5:46:
b8:57:52:0d:9d:08:eb:53:94:49:88:fb:df:37:d4:
7d:f2:c8:08:4c:cb:40:b6:c7:c6:de:4b:0f:cb:69:
29:1e:df:93:68:f1:3a:15:e6:12:c2:72:d0:23:1d:
d8:7a:9b:cf:65:56:2b:03:d5:35:ad:d0:16:13:a9:
ef:56:25:95:4d:3b:6f:f0:7d:b1:6d:9b:02:04:a1:
c0:ec:59:c2:f7:e4:99:f8:62:ea:36:14:1c:77:14:
a9:bc:12:a2:56:38:2c:f6:a3:da:9c:70:ed:f1:ab:
4e:d3:cc:08:19:40:a0:88:28:d7:35:da:ae:f0:e6:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:06:B7:13:F2:49:66:9D:C9:7E:7B:27:18:7F:F0:1E:D4:B3:2F
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:4e:4f:07:1b:f5:d6:99:d1:a2:b2:a4:f0:e2:af:ff:77:
cb:c0:0c:53:88:62:e0:68:31:68:84:20:cf:3a:e5:e4:bd:83:
62:9f:78:41:eb:ab:fd:53:c6:5a:33:24:4d:24:e8:59:18:45:
09:1e:6b:23:72:b8:ac:69:6f:e9:34:1c:5b:01:79:ff:ee:2e:
50:b4:b2:d5:d8:7c:c6:22:07:52:f9:36:0c:46:d1:43:58:7c:
4f:ec:49:7c:d1:f0:fc:79:29:db:aa:51:5f:44:c0:87:05:df:
f8:7e:34:c0:b7:a2:e6:03:80:fa:4a:75:88:8a:f9:28:3e:37:
2d:da:14:81:f0:d1:52:09:50:65:a0:54:d6:e4:82:d0:26:f5:
36:2a:f9:68:1a:7f:21:b7:f1:8a:8e:55:33:1a:46:62:35:d7:
f3:35:fe:ea:27:bd:7d:6f:9c:6b:f7:a6:06:ec:85:0d:d8:e0:
6e:1d:fd:07:6e:cf:bb:b8:54:5b:a3:9b:19:49:47:2b:3b:57:
0b:30:9a:25:b7:66:5d:37:4c:a8:c4:6b:18:0b:45:15:74:69:
f6:7e:dc:3f:06:bc:1f:cc:65:8f:b6:1b:d9:60:39:ee:11:b1:
be:f1:b8:aa:e5:2f:36:55:58:36:2b:2e:54:b0:6f:d5:cf:3d:
49:36:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:30 2025 by rpki-client