Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: e6WXDQsgtCzmWBg0V2f934CQ19tQITdWZ36VNiSC1PY=
Subject key identifier: A0:45:F3:36:50:42:7E:AE:2A:0A:9D:0B:60:9E:1F:B2:1A:5A:EE:67
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 01969E9B23D4B6BFB95B6E13CF24A0A18DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 10B8
Signing time: Mon 05 May 2025 04:01:29 +0000
Manifest this update: Mon 05 May 2025 04:01:29 +0000
Manifest next update: Tue 06 May 2025 04:01:29 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: cj/2HXb6/loNCOuOKNqrtm1s2j3YlvEqgAM03Wqlfs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:23:d4:b6:bf:b9:5b:6e:13:cf:24:a0:a1:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: May 5 04:01:29 2025 GMT
Not After : May 6 04:01:29 2025 GMT
Subject: CN=a045f33650427eae2a0a9d0b609e1fb21a5aee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:e3:04:b8:cd:73:ca:24:c9:2a:79:74:e7:
d6:cb:d2:13:a2:c1:8f:14:e8:34:5d:87:7c:45:f7:
02:b4:bb:d0:26:a4:c2:67:e4:da:31:3f:75:39:88:
d7:cc:e3:dc:99:30:2b:f2:66:a2:f6:d9:6d:20:7f:
b5:8e:a4:82:93:85:17:c3:0c:bd:2a:c2:9b:e0:cc:
1b:e4:4f:1b:ea:67:b1:55:9c:3c:9d:5e:07:a0:b2:
2e:5f:85:93:89:37:bf:57:00:07:dd:1d:8e:c5:d9:
7b:b1:27:97:e5:2a:f1:7a:3e:d0:a7:39:66:0d:ca:
b3:25:c6:4c:26:c9:3c:04:37:44:6d:c2:69:05:9c:
8d:b4:49:f6:2e:b9:57:9a:0a:3d:79:41:e0:2f:e8:
3d:57:33:1d:bd:fe:0c:52:62:f9:01:33:9c:b5:46:
52:c7:b8:06:66:5d:dc:10:b4:bd:e9:a3:2f:a5:97:
9c:39:9f:a0:61:af:f2:fe:c6:36:f5:44:b6:13:df:
a6:d0:1d:43:a0:0f:8b:48:5c:3c:60:43:0c:fc:6c:
37:e4:40:0c:f4:cd:db:09:bb:01:25:c6:39:29:51:
d1:ea:9b:5c:04:11:11:6e:f6:06:05:36:8f:12:89:
5d:47:5f:43:21:d8:82:57:ef:da:91:9f:63:6c:26:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:F3:36:50:42:7E:AE:2A:0A:9D:0B:60:9E:1F:B2:1A:5A:EE:67
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:93:cb:6c:16:68:84:08:fe:72:37:cb:29:74:e7:fa:9a:
e4:b2:88:00:b3:a9:77:00:e7:ae:3c:03:6c:68:21:de:0f:a8:
7f:2f:49:0a:7d:39:fd:af:68:1c:5d:27:e5:cb:7c:68:b7:6a:
93:a1:8c:d7:3e:fc:b9:0e:57:80:3d:a7:6d:aa:7d:0f:17:50:
c1:7d:2f:24:e8:55:0a:23:de:d9:31:8b:7e:b1:8f:b8:d1:2c:
69:26:ac:6d:00:e9:67:42:bd:68:89:14:28:bf:6e:b0:10:bd:
d5:f0:56:1e:49:d7:f3:1f:42:78:d1:b0:ad:e8:95:aa:45:0d:
6a:81:25:7f:ea:bb:08:8a:c1:6e:7f:4d:cc:52:d7:a3:ba:12:
1c:16:38:33:d6:1b:eb:07:fa:5f:1d:8d:6a:06:aa:02:34:4d:
a2:2b:25:4a:c4:13:3f:b7:4a:d3:1d:42:a5:33:c1:65:00:60:
fc:e6:3e:b1:6f:57:1d:ca:4c:64:fe:af:85:d5:05:26:b9:7a:
88:60:85:3d:a0:a5:0a:a3:8a:08:aa:4f:21:ad:57:be:0f:9a:
b5:fc:6d:65:72:8a:c7:e0:b9:17:cf:d3:05:be:8e:ee:b9:c6:
e1:e8:b9:4d:3a:54:05:a1:95:27:74:87:27:75:77:ae:82:ba:
51:0a:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:50:30 2025 by rpki-client