Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json)
Hash identifier: BdvpZ2HT91I18gn6wo+ab4nZUpgt0cMSrhKLlrNrJjQ=
Subject key identifier: B5:29:12:67:BC:8E:6A:80:16:8E:24:1D:8C:FB:E0:43:36:D9:7E:49
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial: 0196AF2016EAAB0829BA8C83EFA180F26B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
Manifest number: 0C4C
Signing time: Thu 08 May 2025 09:00:37 +0000
Manifest this update: Thu 08 May 2025 09:00:37 +0000
Manifest next update: Fri 09 May 2025 09:00:37 +0000
Files and hashes: 1: O0T2HbDDLXToVBgQvakFVm0WBM8.roa (hash: j4M5mhMKjocJHlnRMyKx/Jo55Alu9WqNqQzzA+GKZ+8=)
2: WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa (hash: 1/VFn2v02knd9dSenNmn42s5XXg6Yfw+0bFY3ogbnpY=)
3: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: 0tViEsD23o05yfbBV0+vWBjhjouBYyzx0zplx/z2f7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:16:ea:ab:08:29:ba:8c:83:ef:a1:80:f2:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Validity
Not Before: May 8 09:00:37 2025 GMT
Not After : May 9 09:00:37 2025 GMT
Subject: CN=b5291267bc8e6a80168e241d8cfbe04336d97e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:1a:1f:fc:e1:f5:98:c4:9e:7b:e3:0a:f7:
e3:83:a7:19:60:f5:98:c4:bc:81:97:65:07:69:6e:
66:7b:38:9b:ad:8d:a4:c9:f0:93:23:e8:64:21:6d:
a7:1b:89:48:3d:9c:1a:df:7f:84:ac:e2:1f:37:a6:
08:40:79:45:d1:94:6e:19:a1:c9:c0:2a:af:7a:5a:
54:a4:4f:84:cc:85:68:37:59:a1:89:32:01:02:5b:
92:f7:2f:cd:68:19:50:49:97:3c:91:24:7c:95:2b:
cf:98:14:6a:d8:8e:53:9b:9b:1e:61:bd:10:7a:8a:
bd:86:20:17:6f:23:ba:3d:a9:08:12:d4:d5:31:1f:
ea:06:e5:87:54:18:e7:a1:e7:60:09:9e:ad:4d:6a:
28:47:43:a5:73:5e:7d:3e:f3:da:99:d7:99:e6:bf:
6b:82:46:dc:48:46:9c:73:f0:32:ea:cd:8e:97:36:
a2:bb:c4:79:98:60:b8:2a:31:00:32:94:95:71:e6:
07:85:55:0b:5e:79:c3:c0:76:a2:22:8c:9f:13:61:
eb:66:43:2c:77:b4:94:ab:ea:d1:c0:60:7a:dd:00:
40:be:a5:c4:0e:eb:a6:32:70:19:9a:f2:25:6f:a1:
65:24:02:cd:52:fb:53:de:11:e9:ed:6e:c1:be:5c:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:12:67:BC:8E:6A:80:16:8E:24:1D:8C:FB:E0:43:36:D9:7E:49
X509v3 Authority Key Identifier:
keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:55:95:65:52:3e:87:b2:45:d8:75:a6:48:d9:ae:bd:ea:
90:40:10:85:f2:27:49:df:be:c5:aa:8d:05:09:ae:9b:6d:f8:
3e:d1:c5:1a:f3:30:b7:64:4c:ad:97:28:a6:60:4a:b4:9f:d3:
1a:71:bb:5b:85:c7:9c:f2:05:a4:69:99:d4:2b:8d:ed:9c:d3:
5e:ab:a4:31:ea:c7:96:b6:18:98:d8:ad:be:76:67:61:71:8a:
49:4c:28:c4:7e:a6:6e:22:fc:de:50:82:c8:d9:c3:7a:cb:47:
ab:0f:41:01:a0:50:dc:8c:89:94:7e:95:6f:11:50:6c:61:02:
03:c9:1a:0a:08:0d:da:d1:d1:fa:09:eb:1e:24:9a:29:b5:d5:
58:9a:41:0b:8c:7b:74:aa:70:eb:77:04:9a:6b:dc:51:fe:b8:
79:59:3a:94:71:54:dd:86:df:53:a7:67:62:f2:e8:93:b6:a2:
47:a9:f4:a2:67:98:1b:99:c6:53:d9:42:d3:57:e3:85:c2:a9:
1f:74:b1:13:4b:d4:46:37:66:02:c2:5d:01:31:05:75:25:42:
d8:49:3a:10:d1:a3:ab:58:ec:da:28:2d:ca:64:c7:24:44:2b:
76:e2:ee:91:21:22:94:5a:f9:5b:6b:d5:46:c5:01:d0:a1:43:
73:e7:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:02:33 2025 by rpki-client