Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: YspIIyTxufVKnZ7jjKSiUIF5RKP8Qv5gNWHDAcZvycc=
Subject key identifier: 3A:A8:3F:00:19:24:6A:F1:F9:44:B4:11:BF:DF:7A:F8:36:7D:68:35
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 0196BFDC871B0047446A23EEB71E3BEFE1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0E44
Signing time: Sun 11 May 2025 15:00:22 +0000
Manifest this update: Sun 11 May 2025 15:00:22 +0000
Manifest next update: Mon 12 May 2025 15:00:22 +0000
Files and hashes: 1: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
2: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
3: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: UjQoVrXXjnyQfOgEUKgTOpaaKxaNqp+Qxe6av+qLvik=)
4: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
5: shTn7GqCkQHNe5th-DoeAc9YFfk.roa (hash: aySq0BgEVOrK/vhv+t0wKgyn8II5kEUij+WlbV5t6wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:87:1b:00:47:44:6a:23:ee:b7:1e:3b:ef:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: May 11 15:00:22 2025 GMT
Not After : May 12 15:00:22 2025 GMT
Subject: CN=3aa83f0019246af1f944b411bfdf7af8367d6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:87:48:5e:83:9f:37:2f:59:be:81:a5:40:
1a:de:66:a6:6d:b0:41:9b:09:7f:32:21:85:f9:d4:
86:41:bd:2f:f5:32:f8:b8:3d:fb:eb:1a:4a:20:da:
f9:c7:ac:39:b9:53:ce:3b:95:92:86:0a:24:af:29:
2d:b8:ac:67:6c:6d:9d:8a:76:17:4d:a9:46:12:89:
24:e0:19:06:ab:5c:24:c5:47:17:b8:bd:d3:9d:46:
6e:c7:c8:3e:97:52:90:58:f0:7e:e4:d5:d9:e9:50:
e7:f6:04:eb:19:2b:5a:dc:f6:08:65:44:f2:00:e9:
bd:96:b8:38:13:e3:7a:7f:54:dd:42:15:98:71:c0:
fc:a3:8f:95:d4:ce:a3:07:8b:3b:3b:e8:63:8c:7d:
2d:5f:c4:7b:81:d9:f0:39:ac:da:86:d6:dc:ef:d4:
b6:8c:87:3a:9e:ac:69:46:bf:02:53:be:c5:12:2d:
b0:1f:80:42:3f:56:0b:c1:71:37:67:ab:0c:37:1f:
b5:ef:0c:fc:6e:a3:a8:75:01:90:6a:3a:1d:3c:39:
d7:2e:c6:b1:14:b8:29:2f:ad:2e:c4:ff:65:6d:7f:
7e:a5:01:2c:b7:cb:c4:a4:ed:3a:31:09:d8:1a:dc:
8f:32:e6:5f:48:02:87:6f:df:8d:5e:cb:3d:43:02:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:3F:00:19:24:6A:F1:F9:44:B4:11:BF:DF:7A:F8:36:7D:68:35
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bb:b8:b2:c1:e7:f8:fb:68:29:d6:11:2b:d9:c1:62:96:bb:
e9:72:73:76:91:5d:a2:b9:fa:dc:e3:c2:b3:1c:45:88:4a:3e:
32:ad:57:7c:96:a5:6b:11:d3:7b:e5:6b:86:c5:6d:23:28:4d:
85:95:e4:0a:c1:d9:ce:5e:b3:0c:3f:24:26:ec:3d:d9:bc:ad:
5f:59:d9:08:97:56:c5:c7:3c:af:fc:d1:74:f1:45:34:b7:73:
23:95:2a:e8:4f:e0:90:a4:70:46:88:9a:24:53:18:a7:5f:92:
af:37:98:e8:48:83:4e:40:36:47:07:ec:aa:c5:c9:7c:8d:6c:
ca:88:f8:21:7f:6b:62:3c:c9:d0:5f:3c:23:13:35:ee:4c:88:
a2:04:16:24:79:e4:a0:46:49:f3:0f:12:3f:6b:68:d3:34:34:
01:97:c8:c9:07:14:d7:ef:81:84:6c:b7:05:05:29:99:8c:fa:
ec:4a:d4:f1:7c:0f:e9:9e:19:6d:ff:b7:a7:31:2e:f7:af:29:
36:7e:f5:4b:86:e8:a9:cb:44:2b:78:a6:bd:5e:51:2e:b2:3c:
e3:96:94:84:95:7d:6f:fe:18:e3:1c:ba:6d:74:b0:da:4d:0e:
2b:02:b6:39:d6:8d:4e:a1:f2:d6:de:71:11:00:a9:bc:ce:6a:
34:45:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:13:57 2025 by rpki-client