Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: PD2o8bnMoJOU4oSUX1JhNHvz8NdXuw02KiZvnvTGz+Y=
Subject key identifier: BB:11:53:2F:60:8E:B3:7B:67:8C:A1:30:97:12:16:12:84:B1:EB:84
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 0196BA7F7D810FF14E1443D18EA0443A9D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 14:00:39 +0000
Manifest this update: Sat 10 May 2025 14:00:39 +0000
Manifest next update: Sun 11 May 2025 14:00:39 +0000
Files and hashes: 1: 1OpL7R1BVF30eYquogWaFw9Zjpg.roa (hash: 5HBfkLhlNjgyPTg16npPx/gVvuAnNfr9yckXUxVoyH8=)
2: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
3: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: TJyFoSi2M37OocgQBY0XcsqV1x8pmUUwjcMqUqqksfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:7d:81:0f:f1:4e:14:43:d1:8e:a0:44:3a:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: May 10 14:00:39 2025 GMT
Not After : May 11 14:00:39 2025 GMT
Subject: CN=bb11532f608eb37b678ca1309712161284b1eb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:f0:3d:b1:52:72:4c:87:16:9b:74:58:65:
87:32:8d:f5:78:c5:7f:5a:dc:26:f6:1b:e6:d1:8f:
ee:e4:23:a2:fb:fd:82:98:7c:7b:82:28:1d:e5:d5:
f1:9c:3c:11:61:df:67:ba:83:11:c3:fa:08:bc:92:
c4:df:3d:2e:ab:8f:a4:b6:53:ce:54:b8:1d:13:af:
3d:3a:5c:76:9b:1b:11:10:cd:bf:59:b1:72:5c:90:
24:bb:39:4a:34:4b:29:54:2d:83:3a:c5:af:f1:71:
db:48:16:9c:ca:57:3c:9e:29:c7:31:4d:5a:56:e7:
92:05:73:40:6d:80:94:23:f7:0d:16:41:af:56:3a:
11:42:7c:d7:88:d3:6d:fe:98:f1:01:8e:23:26:5f:
05:9b:b0:7b:4d:9c:9d:74:ce:fc:07:c1:08:97:d2:
59:3a:c4:33:26:98:0a:dc:c4:63:99:53:62:f2:bb:
90:f5:b9:37:08:39:b4:d8:bb:bb:96:22:88:4f:74:
a8:a4:57:75:50:d8:61:9e:0c:fd:d5:c7:62:7f:3c:
fb:dd:5f:a5:9a:69:8c:32:5f:0a:56:ae:29:a9:fc:
70:63:ae:9f:59:68:29:dd:71:a4:b3:b8:77:7d:a1:
ea:d6:cf:e5:e5:95:b2:84:aa:a2:6a:73:34:67:f3:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:53:2F:60:8E:B3:7B:67:8C:A1:30:97:12:16:12:84:B1:EB:84
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:6c:4e:05:4d:23:00:4d:a3:06:fe:56:65:ce:04:1a:01:
24:ac:34:ae:65:bd:19:40:5f:75:d0:94:3f:62:81:b3:5a:49:
f9:01:51:cd:d5:9e:5e:41:72:6e:30:2c:ba:0a:98:ee:cc:4c:
4b:6d:b3:67:04:30:b6:c5:4f:49:ff:bf:5a:6f:00:e5:a0:05:
fc:bd:91:b1:4e:9c:3b:22:aa:01:fb:47:31:ca:f2:c9:ec:3a:
7e:77:d6:18:d3:52:eb:c1:41:75:cb:83:25:d8:02:e9:0d:05:
0a:8e:c4:7c:96:5b:d1:a2:11:54:2f:f4:bc:2e:b9:0e:86:7d:
65:23:3e:17:18:69:18:fc:ef:b6:43:27:61:1c:97:4d:54:3e:
be:50:f1:86:5a:f2:59:1b:d3:4f:9a:ab:06:19:49:e3:f9:ec:
9c:d6:68:1e:39:c2:69:e9:89:7e:ef:77:68:81:15:8e:df:91:
3b:ee:f9:53:08:fe:7c:e4:c3:1e:00:d6:57:d6:17:d1:a9:7c:
75:aa:f4:e7:3c:62:00:81:3d:f4:40:c5:9b:c2:8b:d0:3d:53:
57:fd:05:d2:44:65:9b:79:86:d7:40:d5:9c:ee:47:35:d7:23:
b5:01:6e:e5:06:51:1e:0d:ef:02:55:64:45:bd:6e:ed:56:5d:
11:d9:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:18:57 2025 by rpki-client