Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier: YW+s2TAQWZiUjUPMu1aRpfXzG6RbcQrwy81mJ+E3C/M=
Subject key identifier: 08:33:0A:19:04:74:3E:FF:66:10:6E:4A:08:60:4E:B4:E6:A7:0A:3D
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 0196A95493F3D43DE0EF75EE33C15676BBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number: 109A
Signing time: Wed 07 May 2025 06:00:14 +0000
Manifest this update: Wed 07 May 2025 06:00:14 +0000
Manifest next update: Thu 08 May 2025 06:00:14 +0000
Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=)
2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=)
3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: Rsn+gcXUV2VF/5LblofW8nSfGy9mzzaJkmNgKmP1pKw=)
4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:93:f3:d4:3d:e0:ef:75:ee:33:c1:56:76:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: May 7 06:00:14 2025 GMT
Not After : May 8 06:00:14 2025 GMT
Subject: CN=08330a1904743eff66106e4a08604eb4e6a70a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:d8:70:f7:17:25:84:a6:64:49:fc:ab:ed:
8d:40:2d:3b:8a:8e:2a:d4:d7:71:d5:38:40:54:26:
a8:2a:3a:4f:7e:e5:ba:1e:03:a0:37:3e:32:e0:91:
7a:d6:23:16:eb:7a:22:10:92:68:7a:37:2a:00:ae:
7c:58:d3:f0:76:8f:10:4c:5c:03:bd:18:f7:0b:be:
c1:15:1c:bb:1e:15:4d:4f:d7:0b:c8:75:2e:b2:22:
dc:2a:cd:13:60:cc:dc:96:ee:55:df:ae:fc:9a:d8:
17:11:54:6c:56:2a:49:65:a1:31:a1:94:86:f4:08:
dd:c0:9a:79:40:f4:42:af:8d:11:a0:68:61:12:62:
9a:d5:93:3b:9d:7b:80:cf:c4:3c:24:8d:ba:3a:cd:
07:f8:a6:d9:89:3f:7c:61:11:33:66:20:ce:cf:bf:
f1:99:dd:d1:0d:49:f3:93:e3:be:d5:4c:d9:43:74:
29:d3:07:9c:02:21:8c:1c:c9:26:e6:c2:ec:52:d7:
bb:c5:d7:db:8f:9a:eb:82:30:72:77:cb:c9:b4:2b:
f0:8b:74:9d:15:83:c5:36:e2:fc:d1:3e:39:f2:ea:
92:d6:a8:cb:96:3a:91:2b:ff:6c:50:83:de:76:48:
6c:36:2f:7d:03:79:a9:a7:bc:5a:d4:41:18:70:e6:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:0A:19:04:74:3E:FF:66:10:6E:4A:08:60:4E:B4:E6:A7:0A:3D
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:eb:20:ca:85:bf:5d:ba:cd:61:9f:71:65:d5:78:88:97:a8:
31:97:eb:27:38:f3:eb:f2:2d:9b:d4:e8:05:c5:28:97:69:d9:
33:2f:15:eb:68:79:74:ed:b6:b1:03:82:ca:b1:ff:bb:24:dc:
59:f6:92:e0:ca:4f:f2:ac:c4:fc:70:a8:59:1a:0d:99:7a:8c:
11:87:2d:54:e6:ae:9e:69:42:31:dc:4d:8e:53:86:7a:92:f2:
63:39:d8:0e:d7:ef:7e:f1:d1:5b:9e:3c:6b:ef:90:76:62:65:
d9:db:bb:59:61:db:68:b1:ed:21:c1:b9:a2:c8:9e:b9:1c:aa:
47:f0:15:85:c8:79:9d:86:4f:48:70:05:db:a5:47:af:90:36:
78:00:e4:b7:58:9e:13:91:ed:96:c7:07:29:00:8a:57:0f:9a:
ac:b8:2a:28:a2:c2:50:70:80:87:38:12:66:b3:f5:57:1e:89:
40:d2:a8:76:f5:9d:6d:38:9a:f9:43:fe:bf:70:15:03:f3:74:
de:20:c0:34:41:a5:cc:17:98:4a:6a:fa:03:da:a5:f6:53:da:
1a:ab:b4:11:47:71:67:73:a6:da:ca:f4:a3:df:02:6c:fc:96:
99:68:01:26:5c:23:8c:13:61:f3:02:7d:62:8e:e9:a4:c0:9e:
91:38:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:03:09 2025 by rpki-client