Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
File: mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json)
Hash identifier: 6me5lf9f5Yb2SGQO2TGiDFVnzNDGGNA0B96RGPPpM90=
Subject key identifier: D0:4F:31:34:8B:DC:92:5B:1E:DD:62:C9:07:C4:F2:53:6F:73:A9:9C
Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
Certificate issuer: /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Certificate serial: 0196B7B59EC1CA1E7A6D1AB326888B99205D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
Manifest number: 0527
Signing time: Sat 10 May 2025 01:00:55 +0000
Manifest this update: Sat 10 May 2025 01:00:55 +0000
Manifest next update: Sun 11 May 2025 01:00:55 +0000
Files and hashes: 1: j0Asbb5ngsOWlyvv7kth_3yoBYM.roa (hash: O/JfF/netiv5OyRHt3hhhICYzLbMzCW+fJQdQl7HVfM=)
2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: mjCLBCncKDBCqcu/GjNzbe3NqtWkigrSnxpiXAPSMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:9e:c1:ca:1e:7a:6d:1a:b3:26:88:8b:99:20:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Validity
Not Before: May 10 01:00:55 2025 GMT
Not After : May 11 01:00:55 2025 GMT
Subject: CN=d04f31348bdc925b1edd62c907c4f2536f73a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:90:a0:72:60:4c:7d:e3:9b:ab:6d:dd:32:
7c:e9:9e:1a:09:4f:c9:3d:f4:9a:49:17:3d:24:6f:
4b:28:a5:ef:bf:d3:ed:82:92:b4:67:dd:3e:92:c2:
68:f4:f3:2f:5f:58:f0:ed:cc:5c:ab:67:ab:4e:cc:
f4:1a:52:2c:0c:78:63:15:bd:59:00:07:22:f3:ae:
da:11:82:46:e3:fd:51:2a:97:ea:77:52:96:c8:9c:
7b:28:b6:69:2f:b8:91:de:d9:1d:53:a1:3a:7d:70:
ad:ae:d1:2a:c2:25:58:bf:02:d0:35:e4:d4:10:84:
3f:38:25:13:8f:f0:05:2a:38:17:45:71:68:d5:fb:
e3:23:50:5f:93:cf:00:86:0b:43:8e:8e:16:02:b2:
65:4f:71:81:56:bd:92:58:9d:a9:7b:56:83:64:d8:
12:59:b9:8e:ce:98:9d:64:4d:e7:a9:fe:06:d5:93:
16:22:d5:e6:e7:88:10:cb:e1:d4:10:2d:a4:9d:7a:
62:b8:6d:5c:bf:08:b6:c8:8e:33:11:de:de:e0:e3:
d6:3e:7c:72:68:6d:69:a3:8f:7b:2e:9b:3b:d4:19:
42:ac:eb:7d:d2:62:ba:6d:98:f9:38:bb:92:39:8b:
06:76:4a:be:b6:42:1b:fa:59:79:8a:0b:41:42:71:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:31:34:8B:DC:92:5B:1E:DD:62:C9:07:C4:F2:53:6F:73:A9:9C
X509v3 Authority Key Identifier:
keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:68:cf:11:02:36:d4:26:9a:aa:f4:a7:ce:72:fe:55:c3:
fb:dd:96:6d:f5:5a:59:df:64:0f:fb:b0:20:9b:ee:0c:17:a6:
41:1a:c2:e9:c7:62:c1:84:a5:17:b5:4b:66:d7:11:99:53:fa:
cf:de:da:60:07:fa:0b:42:6b:4c:89:87:65:b8:d0:b8:b8:7b:
4c:9e:77:dd:7d:98:43:c0:b0:46:c5:e2:70:b0:d6:94:bd:a3:
47:a7:74:3f:1b:73:f4:43:11:64:ad:62:88:fc:f5:d4:71:c9:
83:af:94:04:39:97:49:95:9a:71:fd:a3:ea:47:b2:4b:8c:97:
a5:09:a5:36:5b:42:97:26:ec:f0:3d:ac:e4:5c:48:28:9c:b7:
92:8c:3c:5e:c3:f6:3c:48:59:9e:d0:99:74:01:eb:60:a1:8d:
ce:12:13:ee:11:7a:97:6f:e1:e6:b3:12:01:07:b6:a5:8d:10:
9a:e8:26:01:ec:43:d0:e2:7b:4a:b2:a4:ac:97:80:a7:ce:19:
b7:6d:2c:01:ae:06:52:c4:6a:48:68:95:5f:6e:30:9b:d0:d1:
6a:0d:f7:5b:e6:d5:4c:82:12:d4:a1:a9:90:e8:d9:06:1d:b9:
f0:93:be:9f:6c:26:42:c9:c1:6b:95:a8:ce:95:28:d1:c3:52:
9a:96:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:14:06 2025 by rpki-client