Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: /ne8XK7DIyNfILX55b3Bb0MCDGYRsZSDvrJhA5LN/X8=
Subject key identifier: 6D:67:56:17:44:04:AD:51:7E:3C:76:B9:CC:AA:CD:38:BA:66:BE:C4
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 0196B6D9ABE523897CE23E093A1C7E9390FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 21:00:40 +0000
Manifest this update: Fri 09 May 2025 21:00:40 +0000
Manifest next update: Sat 10 May 2025 21:00:40 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: Kx0Z36ckoEWKfscTyOw3vqYioOvLAQ19GONIvpR0lqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:ab:e5:23:89:7c:e2:3e:09:3a:1c:7e:93:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: May 9 21:00:40 2025 GMT
Not After : May 10 21:00:40 2025 GMT
Subject: CN=6d6756174404ad517e3c76b9ccaacd38ba66bec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:c5:67:16:b9:2d:fa:c8:2b:53:0d:47:63:
da:1a:91:11:3f:d8:f0:c5:8a:2d:95:fb:f8:05:ba:
5e:b9:41:e0:14:17:14:08:88:1f:73:f5:69:62:00:
0f:6a:72:e6:e8:e2:60:2e:c0:c9:2f:31:d2:5a:46:
94:f9:8d:d6:96:79:e3:ac:0d:2b:5d:0e:92:05:c6:
17:db:22:92:4f:65:ab:de:64:60:de:3c:e9:44:43:
89:bd:5a:0c:ef:27:b6:03:c6:37:14:21:38:ec:d3:
28:06:8c:32:c0:1d:8f:28:f2:27:bb:a9:8d:da:0e:
fe:8c:76:24:31:8d:1f:67:98:9a:81:fe:e2:0a:70:
cd:98:e2:bc:92:2e:d8:bb:02:c5:7b:09:6b:a7:b2:
b6:9a:10:26:83:66:17:dd:b9:9d:7e:d7:80:f0:69:
30:4b:34:79:aa:97:28:39:0f:bc:35:83:45:48:7d:
a3:1b:4e:e4:d8:56:42:16:7f:dd:f5:8b:98:b5:45:
16:fa:4c:16:87:f6:dd:89:5d:91:26:25:71:e4:27:
62:34:9c:c3:97:b7:5a:3d:61:87:70:ef:fe:4b:23:
6d:65:fc:ea:dd:70:13:76:a5:26:ca:e1:e6:84:5a:
e0:78:44:a0:03:35:ea:30:dc:c2:65:e2:da:8f:a2:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:56:17:44:04:AD:51:7E:3C:76:B9:CC:AA:CD:38:BA:66:BE:C4
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:60:73:6f:00:37:68:5e:06:ac:c7:84:20:ec:6e:f0:84:
de:e4:ca:e3:b2:96:3c:c7:fe:a4:42:cd:13:05:44:70:7e:67:
7d:64:5b:9a:07:dc:4f:69:b4:17:67:37:c4:70:73:3a:f4:d9:
88:63:4a:b7:70:ed:3b:79:62:7c:0f:c8:93:ad:a1:bb:18:f5:
b2:16:2d:13:65:14:3b:16:eb:60:77:23:14:c1:ad:a2:37:86:
29:6b:a2:15:08:35:e3:5a:8a:cf:30:5b:76:c9:c4:d8:f7:49:
97:d3:55:e2:e7:1a:73:b2:15:05:3a:06:3a:c8:ec:ed:b6:96:
fe:66:cf:d5:23:88:73:90:46:82:b0:5e:15:56:24:53:db:e6:
de:5a:e8:21:11:69:e3:7a:f6:b7:5a:16:2a:0b:a8:61:a0:ee:
92:3d:97:ea:d4:d8:c9:00:1c:a1:92:8b:7d:43:24:13:a9:cc:
f2:3a:80:cb:c0:03:ef:ae:8a:49:9a:a1:c4:37:c1:dd:61:e2:
0d:78:24:35:15:33:5a:f0:c9:17:f8:06:cc:15:08:ee:5b:8c:
15:21:07:4a:5e:2c:1b:5c:d9:4d:47:80:6c:f2:8b:01:14:cf:
67:e0:fd:0a:8f:21:b0:f7:47:5a:54:9c:b9:90:77:2c:c5:e6:
37:03:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:48:30 2025 by rpki-client