Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: 5Fgejim61VBaopWAyi5pFG90HXULDgQBTPnyNQA3luI=
Subject key identifier: 8D:D1:4B:76:BA:B2:89:32:66:EF:9D:1A:92:42:9D:D0:AB:47:2C:30
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 0196BB247D15EDB6960A3D437D45984809DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0D8D
Signing time: Sat 10 May 2025 17:00:52 +0000
Manifest this update: Sat 10 May 2025 17:00:52 +0000
Manifest next update: Sun 11 May 2025 17:00:52 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: T2Y+4RUfB0w//RA+37HU/v4CLRGj7e6sejhBNNSMht8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:7d:15:ed:b6:96:0a:3d:43:7d:45:98:48:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: May 10 17:00:52 2025 GMT
Not After : May 11 17:00:52 2025 GMT
Subject: CN=8dd14b76bab2893266ef9d1a92429dd0ab472c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:98:c9:b2:58:2f:10:8a:5c:93:cb:9c:4d:
69:09:cf:aa:31:09:17:fa:46:24:58:d4:67:01:8e:
47:76:76:98:12:cd:68:de:a4:6c:d5:93:65:c5:e4:
e5:d6:fa:41:f8:4f:fc:68:3a:86:d3:03:d4:bc:7c:
c5:b2:9c:fa:d1:91:16:61:30:40:51:10:91:76:d0:
8e:d5:8f:34:c3:d1:38:92:d5:cf:59:c4:e3:80:42:
bd:3e:4e:7c:4a:17:4f:e5:90:5a:00:fd:6a:08:34:
18:21:7b:ee:7f:37:89:8f:1c:88:87:91:c3:7e:7c:
57:4d:91:e7:d5:57:46:80:33:9d:05:b6:fc:f7:09:
43:a4:52:75:29:62:b7:94:4b:70:b0:65:81:ea:4a:
ad:66:2c:6b:76:71:94:f0:7b:72:ea:0c:04:eb:c6:
53:3f:bc:11:c9:ff:5b:54:bd:77:fe:3a:5e:8e:5b:
90:92:aa:67:61:97:c1:d4:73:ed:f1:da:07:55:f5:
5d:48:eb:b6:85:33:8f:1c:67:f0:05:ec:02:77:64:
e0:3c:b4:a9:4c:c9:ca:3c:96:6b:f8:6d:91:f4:4c:
06:2e:91:94:53:c6:4b:39:a5:49:d9:70:ae:78:b3:
28:ee:41:81:2f:6f:36:b3:35:7e:0c:1f:3b:03:b4:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D1:4B:76:BA:B2:89:32:66:EF:9D:1A:92:42:9D:D0:AB:47:2C:30
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c1:3e:77:a5:18:60:63:35:a0:97:99:0a:dc:73:52:92:9b:
29:dc:f5:bc:fc:6b:b8:c5:4c:bb:63:61:31:7c:1e:27:87:ad:
16:fa:68:2b:75:ea:23:ce:73:98:de:60:30:e0:9c:30:b7:de:
d7:7e:a6:28:8e:13:6d:3a:52:30:01:47:4a:de:c8:8f:58:ba:
1b:86:85:c7:0a:aa:62:d7:db:3e:5a:99:c0:d8:79:9c:f9:7c:
a0:10:fb:28:68:e4:8f:1d:9f:a9:99:cd:7e:77:74:6d:55:69:
ba:c3:f0:14:df:d3:2b:0a:29:b2:7d:b1:31:59:66:58:55:aa:
26:59:95:a8:fa:b7:3d:1a:1f:36:bb:03:c1:01:92:ca:35:92:
23:c4:65:f2:67:f1:a8:0c:54:86:16:ad:3c:a5:6b:6e:1e:5c:
a5:08:f8:36:f8:fc:97:e9:93:17:16:32:13:09:38:29:c7:42:
90:38:8a:0a:b5:02:34:a7:8e:6f:0a:35:c0:62:0a:25:76:92:
95:62:93:70:98:e1:81:d5:68:f0:11:60:c8:b2:8d:90:3d:83:
c4:9b:51:b6:8d:a1:2b:b6:4a:72:fb:33:51:4b:ad:29:54:d8:
89:01:60:ad:5c:e1:9b:30:a8:ea:64:9d:07:97:16:33:a3:b9:
e7:3c:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:22 2025 by rpki-client