Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: UN5vpMtrqMenESPSndIaKHTlcUJSYrrFUg18O4/bzk8=
Subject key identifier: 55:6E:CF:F1:A6:FD:47:22:7A:06:7A:53:D7:E7:94:69:B5:9F:42:7B
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 0196C7963BD633F8DD4B311F2BC9ECAA8721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 03:00:33 +0000
Manifest this update: Tue 13 May 2025 03:00:33 +0000
Manifest next update: Wed 14 May 2025 03:00:33 +0000
Files and hashes: 1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: KZXhi9UIiv/geocy5DIXKmmzgdk+G28AKzX6l43z2bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:3b:d6:33:f8:dd:4b:31:1f:2b:c9:ec:aa:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: May 13 03:00:33 2025 GMT
Not After : May 14 03:00:33 2025 GMT
Subject: CN=556ecff1a6fd47227a067a53d7e79469b59f427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:63:fa:ba:3b:4d:1b:5e:d9:b6:00:34:c7:
82:f9:0c:78:73:af:2e:bc:d6:bb:a0:8e:4b:8a:9e:
0d:b6:14:2b:9f:7c:f6:58:b3:e7:68:a9:91:c4:24:
89:c0:7e:16:f3:39:3c:47:19:6a:3f:b2:03:a8:4b:
48:6a:41:4f:18:6e:be:ce:20:90:a3:b8:22:47:7d:
7a:f2:64:6e:e7:b7:b5:ba:13:ea:e9:c9:e4:c9:d2:
c0:de:c4:6e:14:ce:b7:c1:fa:36:41:91:ed:a3:fe:
dc:17:54:91:74:90:86:5b:16:58:41:fb:b0:8b:76:
76:8e:35:8e:51:dd:45:5b:96:d5:d9:2e:94:de:f5:
3f:ae:1f:89:85:d0:c3:41:b6:17:c1:35:56:d0:c0:
d5:e9:dc:40:ee:ea:ea:84:d8:88:54:3b:b0:cb:5b:
a0:f0:3c:3c:19:b2:5e:b3:32:72:81:76:e3:6e:77:
6a:d4:06:91:21:3b:62:c0:7c:79:a2:73:bb:86:4d:
e5:7d:e3:28:2c:e1:44:62:38:6c:22:f2:d4:dc:27:
58:b0:f2:8b:19:75:cb:f5:e6:be:39:51:83:05:3d:
8f:cd:ee:d0:eb:e4:24:0d:60:cc:80:13:86:10:e4:
c8:bf:0b:10:ca:62:15:6f:d5:39:3e:82:c9:10:b7:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6E:CF:F1:A6:FD:47:22:7A:06:7A:53:D7:E7:94:69:B5:9F:42:7B
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:eb:b8:91:af:79:b5:7d:f5:14:96:df:7c:4c:eb:d2:7c:23:
65:7a:df:e4:2b:2c:d4:8a:21:8e:a5:fd:ac:f8:45:7b:ff:22:
d5:43:9d:f1:e5:34:1d:1d:a6:c8:4f:87:0f:a2:c6:b9:2e:88:
c1:6f:e5:fd:4a:ec:c9:d6:5a:f8:e3:7b:1f:88:22:9f:dd:5f:
b8:23:3c:13:39:27:5f:ad:c5:6c:ae:26:e7:cc:b0:0f:86:15:
f3:e8:24:0a:a8:6b:26:d7:98:61:ac:e2:63:f2:77:cf:6c:85:
dd:46:4c:b0:df:26:9e:2b:98:0f:57:c9:f8:6a:4a:e4:13:e3:
b0:6d:91:f7:19:33:8f:03:d4:ad:6d:03:55:92:9b:24:e7:c9:
8d:49:a4:76:55:91:2d:fd:4a:76:07:2c:cf:1e:88:cb:1a:0d:
83:9d:30:8d:d1:f0:b0:68:32:41:9d:df:aa:bf:e2:42:fb:7c:
43:d9:b8:02:ad:ad:ce:a9:97:3f:30:df:5a:3f:da:02:46:0c:
45:6b:69:3f:f3:02:42:1d:84:d2:6a:9f:97:ea:cd:59:c3:90:
1c:51:5d:13:fb:47:fc:e5:8f:97:35:1a:85:71:68:d4:69:88:
2f:63:a8:1c:dd:25:98:ac:1c:d1:f6:57:f3:62:45:3a:f7:d1:
15:4c:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:29:38 2025 by rpki-client