Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: 4O+blgs4n9s16VT1uT6sY0/i25lEDCWGy0BQDJcO1RY=
Subject key identifier: 6E:B3:E5:00:43:CD:C3:98:81:F0:A4:DE:DA:63:1E:6F:E2:D5:9D:7A
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 0196B9DAB597BF5B6E8003B744689E8CA77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 0298
Signing time: Sat 10 May 2025 11:00:40 +0000
Manifest this update: Sat 10 May 2025 11:00:40 +0000
Manifest next update: Sun 11 May 2025 11:00:40 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: JD50YP4bedlAUHZ67+9nggeuMr9D/S8dNYfLVkOHfEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:b5:97:bf:5b:6e:80:03:b7:44:68:9e:8c:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: May 10 11:00:40 2025 GMT
Not After : May 11 11:00:40 2025 GMT
Subject: CN=6eb3e50043cdc39881f0a4deda631e6fe2d59d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:59:52:46:4d:26:b5:44:8c:c4:dc:25:f7:
13:cb:28:42:0a:47:7c:75:78:18:b1:89:ce:7e:ef:
0d:be:9d:b0:d6:b8:ad:61:26:a1:08:42:53:b6:a7:
08:15:54:17:23:53:dc:3c:99:69:68:04:59:69:9b:
3c:64:c4:91:1e:34:23:2a:1c:64:87:27:b2:33:7a:
7e:d4:4c:02:c9:74:f5:be:8b:93:d8:d0:0a:a3:29:
df:50:f4:ce:c5:88:10:85:13:aa:36:cd:9d:b2:6e:
bd:fb:02:f3:18:93:c6:b1:46:0c:44:66:6c:90:a6:
20:47:d3:89:f5:56:0d:cb:60:f0:7e:1c:b3:ba:7f:
cb:dc:15:f9:30:46:49:7c:5c:89:e1:32:75:5b:53:
88:22:e8:ed:26:21:83:16:ad:a1:cc:67:42:96:be:
14:c0:22:48:9d:53:73:e0:4e:a6:ed:dc:95:a1:d4:
53:b2:ab:43:de:07:be:f3:49:1a:96:41:89:1c:e2:
ee:1f:d7:15:b9:fd:6a:86:a9:22:12:5d:80:9e:bb:
e4:96:87:bd:16:3c:87:df:ce:6b:79:fb:8e:1f:78:
8e:91:d5:fa:ba:10:01:05:c0:bc:a8:bf:dc:36:28:
91:24:b9:da:07:64:8c:58:1d:d6:d8:cf:51:56:48:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:E5:00:43:CD:C3:98:81:F0:A4:DE:DA:63:1E:6F:E2:D5:9D:7A
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ff:f4:77:3a:34:b0:ab:7c:2c:90:a1:be:f4:d2:25:b5:ba:
eb:17:45:4e:63:db:bf:c5:68:54:34:92:c6:e7:0f:69:1e:36:
90:ec:64:db:97:d8:bc:d5:4c:90:25:92:b8:20:b9:7b:15:e6:
32:5c:85:f8:aa:dd:aa:05:0a:74:85:db:72:05:2e:c7:29:72:
97:41:2c:73:7e:16:fa:1b:c1:1c:26:ef:41:07:c4:08:c1:89:
9f:cd:e7:9d:c8:cd:87:98:9f:73:74:f7:e9:b7:0e:c8:7a:89:
ca:bc:fb:29:68:23:a9:93:c0:7e:1e:7e:83:20:28:f4:57:d1:
ba:91:b3:64:d5:6d:64:5d:f3:c7:e4:58:6a:81:34:7f:b3:3f:
be:8f:93:47:bd:9b:4b:c4:14:1c:6d:5a:5c:d9:d5:c6:72:f3:
1a:8d:13:ec:25:cc:bd:69:e8:d0:a8:07:35:47:17:c1:6f:e2:
f1:b4:61:59:c5:d5:09:f8:b2:b9:a4:10:86:af:50:75:ac:d0:
8a:a0:27:23:d3:ca:ab:28:75:69:46:3a:12:84:ca:e5:2f:d3:
43:aa:6c:6d:00:82:ac:b5:d2:8b:5d:21:7b:0f:1f:a4:0e:37:
f7:7e:4a:8d:b9:ba:b5:dd:20:92:12:2f:75:94:1e:64:8d:f8:
f9:62:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:10:31 2025 by rpki-client