Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: 4RS3+cbMnOCaSbBX1te2qYgbbQ5u1Ba9Tj6NI+bdP/o=
Subject key identifier: BF:09:97:B0:CF:59:95:75:9A:2E:B8:9E:87:A8:E0:C0:2B:F1:7F:35
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0196B822FF8E65238947D8CCE0BAFAE7EF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0AA2
Signing time: Sat 10 May 2025 03:00:23 +0000
Manifest this update: Sat 10 May 2025 03:00:23 +0000
Manifest next update: Sun 11 May 2025 03:00:23 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: VLUxRpDxk7rrzULcTA94ug2/SRgAfhVR2lOUElXHvgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:ff:8e:65:23:89:47:d8:cc:e0:ba:fa:e7:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: May 10 03:00:23 2025 GMT
Not After : May 11 03:00:23 2025 GMT
Subject: CN=bf0997b0cf5995759a2eb89e87a8e0c02bf17f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:54:af:45:db:9a:bc:95:a8:00:ac:a5:f1:
44:96:97:a9:37:63:3c:6a:d5:ef:ba:4c:ef:3f:72:
7d:c9:00:1f:7c:53:81:79:8a:98:bb:66:d7:33:6e:
bb:75:7f:f4:b3:53:8c:2a:1f:b6:c8:aa:87:ef:8c:
6a:7f:03:f5:6e:79:14:40:72:25:d1:23:d5:72:5c:
82:3c:36:b8:11:84:8d:90:1e:76:ec:e6:91:ae:da:
47:95:5f:22:61:2f:24:e9:e8:58:8f:98:89:fd:a8:
8c:e5:ea:23:c9:a1:30:98:aa:cb:34:16:e3:0e:e9:
ba:c4:00:aa:ee:16:c7:ec:21:13:31:62:5a:df:75:
6f:4d:30:ae:b0:ec:61:c1:88:ca:0f:78:e9:1a:9d:
46:28:8e:cb:4f:f8:93:5c:47:2e:7f:53:ec:ed:0d:
ce:b1:d9:1f:a9:1a:1d:b4:ed:aa:cc:01:9a:42:45:
d0:00:bf:38:35:82:47:c5:95:27:ab:41:e3:e9:57:
de:1d:2e:ce:19:2c:a3:18:00:ee:0a:83:1a:ee:33:
a6:80:aa:07:96:58:71:11:26:53:d7:20:8e:c9:5d:
ea:d6:ca:d6:e9:40:cb:72:44:6b:22:ba:7e:bf:c2:
9a:88:82:d1:d6:df:16:d6:f9:f3:2d:27:cd:f6:19:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:97:B0:CF:59:95:75:9A:2E:B8:9E:87:A8:E0:C0:2B:F1:7F:35
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:bf:a5:42:96:2c:42:57:17:bb:76:7f:34:e9:7d:9d:ed:
2c:c9:18:8b:04:1a:7b:8e:88:e4:2a:12:cd:14:ec:d9:85:2b:
89:d7:81:16:01:18:d4:e8:d4:63:f8:12:6a:58:bc:9a:fd:75:
2b:4a:2e:28:95:9b:49:04:18:29:b0:73:05:79:8f:f3:0f:e3:
6d:ab:df:11:3f:2b:fb:5b:0c:57:24:84:de:6a:97:60:4e:68:
74:0c:b3:49:88:06:e1:ec:6b:63:b0:83:c5:28:5c:65:85:39:
43:b8:fe:85:e7:52:c2:b1:90:97:e5:4c:e6:b9:a2:18:57:bb:
36:2f:d6:6c:4e:14:97:f0:42:e7:39:16:f7:c5:96:90:35:9f:
32:44:e8:b1:a4:b6:4f:29:42:3b:aa:a4:52:02:e5:dc:34:ae:
da:06:42:9a:3a:45:a2:a9:f4:d1:aa:73:31:27:fc:e9:ea:02:
2e:d6:0e:44:45:6d:71:cd:ce:71:66:c3:33:cf:45:fd:71:08:
3e:75:b0:3e:1d:32:80:81:bf:82:42:c4:cd:07:a2:6b:95:25:
dd:96:c8:63:ca:7b:6a:5f:35:06:01:a3:cb:45:65:8e:83:58:
15:11:0f:b9:ed:cb:72:82:98:e9:1e:55:da:1b:bc:eb:8d:4a:
8c:0c:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:02:49 2025 by rpki-client