Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: mPKpJdJ5Y4KwT7jmwjFWHlv2303ThRxy8k+AbQOTEgs=
Subject key identifier: 36:1C:68:2C:E7:9A:91:B1:D8:56:7B:19:6B:54:43:47:83:67:E4:D7
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0196C3B91EF13F1DDDA40155EA2B38D480AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0F9C
Signing time: Mon 12 May 2025 09:00:11 +0000
Manifest this update: Mon 12 May 2025 09:00:11 +0000
Manifest next update: Tue 13 May 2025 09:00:11 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: mtgLVdOdyTxiTYvYNs0uGYb0Qm+4dqmHY+ZgdcjzVxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:1e:f1:3f:1d:dd:a4:01:55:ea:2b:38:d4:80:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: May 12 09:00:11 2025 GMT
Not After : May 13 09:00:11 2025 GMT
Subject: CN=361c682ce79a91b1d8567b196b5443478367e4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:92:61:71:be:44:66:11:3f:77:f7:26:ff:
9d:0e:ee:47:fb:4b:99:d6:07:76:f5:c4:c6:37:0b:
7e:c4:33:ef:3f:45:a6:d6:d3:25:be:71:b1:94:a9:
15:ab:45:a1:54:ab:74:32:38:d4:ec:0e:5b:2f:e1:
10:79:ec:ef:a0:41:62:ad:c4:86:4b:c0:fb:8e:29:
72:a8:8f:84:c4:a0:43:00:e8:c2:d3:bc:30:b9:3b:
d3:18:5c:07:e8:df:c0:df:21:4d:1d:2f:45:a9:4b:
8d:df:6a:40:25:3a:cb:40:1f:ce:5d:5a:1a:67:2a:
c7:a7:a5:53:8b:ba:ad:9b:c1:5f:6f:91:9e:3d:46:
81:c8:6a:28:c5:c7:06:04:e4:b9:21:54:d5:7f:8d:
fd:ea:a7:91:e9:5d:c3:fa:18:cd:f3:92:82:8c:35:
0e:eb:ca:09:59:2e:42:16:9a:a5:e5:d5:0c:1c:01:
8f:ac:f2:1e:38:bb:01:79:b3:d1:d6:01:d7:fe:99:
1c:04:ed:ca:ff:bd:a4:30:5a:7d:d3:52:36:9c:5a:
5c:37:ad:ce:d9:6c:34:b6:fa:3e:f0:4c:c6:3a:8a:
28:a3:90:70:a2:49:e0:a1:d5:db:6b:b2:18:a0:2a:
11:e9:ec:a8:ab:69:e6:e4:1e:de:b9:2d:84:ec:26:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:68:2C:E7:9A:91:B1:D8:56:7B:19:6B:54:43:47:83:67:E4:D7
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:51:98:32:57:0b:19:fa:16:da:02:7b:51:9f:91:a5:72:33:
e7:5b:d5:4f:a3:64:64:f7:cd:a5:59:31:9d:24:30:bd:75:ec:
9c:00:d6:ff:1d:24:92:f1:03:28:53:c1:b1:d3:0b:17:49:cb:
94:2f:b0:68:02:16:63:88:7c:21:22:34:f5:3e:52:89:a5:e2:
74:9b:74:df:e1:1f:d5:38:c8:8b:a4:8f:7b:43:d0:87:8c:2b:
87:c6:e1:68:6b:47:11:38:ad:25:2c:6a:64:62:48:fc:fa:e6:
f8:4a:83:1d:78:23:74:f9:f4:ee:32:2b:93:03:c4:40:9b:16:
bf:3d:c1:2d:13:15:8e:82:60:48:82:73:69:fd:28:3a:9d:6a:
10:fe:2e:3c:87:44:f8:58:c5:af:9a:63:70:81:c1:ed:75:6e:
40:b7:12:7c:f0:3b:38:4f:4a:21:b4:d2:ff:f3:b0:a4:b6:30:
af:08:f3:35:1e:0c:f9:8f:25:5b:06:f7:ad:a7:84:a3:32:40:
5b:57:43:aa:ac:f3:52:ee:2f:f7:10:75:fd:c2:b4:db:94:82:
5e:6a:51:96:64:5b:da:b8:87:d9:c3:9b:82:e5:c9:3c:76:6e:
5c:63:9a:54:6f:b5:21:28:2b:59:e0:d2:9f:78:15:9b:e5:99:
56:a7:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:24:31 2025 by rpki-client