Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: 7zo1c09T9Ecfk+fRemgyuxBfio5FubX1qmrdToece70=
Subject key identifier: 6F:AF:F9:78:1C:53:1B:00:4A:86:15:30:61:2A:3F:BB:2A:2D:13:5C
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0196B3A142C5340D3E77955C41769F2E277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 06:00:12 +0000
Manifest this update: Fri 09 May 2025 06:00:12 +0000
Manifest next update: Sat 10 May 2025 06:00:12 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: GIZjWeJqS4mkc0MZfsHHXqxbcxZWZSQ69KUeo3+ELVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:42:c5:34:0d:3e:77:95:5c:41:76:9f:2e:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: May 9 06:00:12 2025 GMT
Not After : May 10 06:00:12 2025 GMT
Subject: CN=6faff9781c531b004a861530612a3fbb2a2d135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:33:95:59:f8:56:df:2d:4a:62:d8:a0:be:
2f:aa:fe:68:d2:c7:35:2c:5e:45:51:09:7b:ed:43:
e0:63:c2:a2:63:44:23:9f:7b:cf:26:09:c6:8f:3e:
03:a7:d8:c8:ba:83:cf:33:e9:0a:30:cd:d2:1c:2d:
eb:74:40:dd:4b:3d:e6:e7:f4:e4:1c:ee:00:9c:de:
fc:92:0d:b2:fb:8e:2b:db:90:d6:f9:48:a9:48:65:
cf:83:3d:c8:c7:df:3e:69:60:e8:ab:a5:4e:a4:48:
01:87:53:45:63:78:41:64:a2:3c:99:59:ea:ff:d7:
61:9e:d0:ae:b2:a0:1c:15:48:c2:7e:66:b4:fb:b8:
aa:27:13:3c:60:2d:0e:0f:bc:7a:73:b6:49:a2:14:
b8:64:d8:66:9d:a0:5c:c8:15:2d:b6:70:ab:e1:38:
9a:24:5d:e5:5c:85:33:bd:13:e0:1d:a1:38:b8:56:
fb:5c:d5:1d:0d:29:48:75:94:0d:14:69:d3:81:b0:
2a:8e:d5:b6:b5:6e:7b:77:e8:9a:68:4e:f7:67:c3:
6f:59:04:7f:be:cb:7f:d7:36:5a:7f:88:05:99:03:
0e:59:11:73:1d:de:83:31:19:e1:e4:90:c0:1b:b7:
9c:e6:5f:af:d6:f9:8e:a5:0a:55:cc:a1:fc:6c:81:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:F9:78:1C:53:1B:00:4A:86:15:30:61:2A:3F:BB:2A:2D:13:5C
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:c0:6e:01:9f:01:1f:c8:2d:0f:d9:eb:6f:8a:f5:9e:ee:
58:38:3a:3e:96:f0:76:4e:fe:4e:15:4e:1a:ec:b1:51:eb:ed:
7d:df:4c:b0:11:96:56:ea:a9:79:e9:70:2b:64:4e:c0:00:7d:
cc:d5:a0:75:ad:5a:e6:5c:ab:21:f3:00:b8:59:f9:be:72:59:
ea:54:09:45:69:c1:e4:cd:6c:60:5e:d0:fd:38:c2:68:54:52:
fd:0f:de:72:26:19:5b:39:0e:c4:b5:13:47:f0:8f:6a:02:e8:
69:ad:ea:25:c8:85:08:42:25:37:2b:39:15:73:ef:2c:bd:b0:
f8:5e:1c:eb:47:dd:93:63:92:c2:b4:3e:4d:f0:12:2c:e0:63:
75:c4:bd:a8:64:17:5d:d2:88:0b:13:43:5b:f3:a2:87:26:d4:
08:8c:d6:56:0b:0a:52:e0:c2:ea:a3:ca:bb:c5:42:88:e2:cc:
c0:f6:09:d9:a4:da:5b:4d:c9:e7:17:cd:1f:7c:86:ac:ce:03:
11:f7:4e:85:8a:ae:6a:be:8b:13:75:53:b4:93:bd:61:69:2e:
9e:f7:32:07:2a:b3:0c:aa:a4:01:ed:12:13:94:7a:9b:7d:8a:
f5:fb:8c:b3:55:45:88:b6:77:4f:1e:70:72:ab:51:fd:bd:cd:
02:22:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:44:06 2025 by rpki-client