Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: d81otLY+tw54wRwnKK5yA3omHwuH+g4BK3UxM7Mzhro=
Subject key identifier: 1C:69:0E:56:90:5A:C6:98:F1:4D:C8:CB:42:4A:41:C2:F6:6B:4B:EF
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 0196B7EC570FEA90982D0D09EA70583D4C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 01B1
Signing time: Sat 10 May 2025 02:00:41 +0000
Manifest this update: Sat 10 May 2025 02:00:41 +0000
Manifest next update: Sun 11 May 2025 02:00:41 +0000
Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: COEIbFRRkSYEb27FKFsahW3Ph0pUMco7Lch/qXNjN84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:57:0f:ea:90:98:2d:0d:09:ea:70:58:3d:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: May 10 02:00:41 2025 GMT
Not After : May 11 02:00:41 2025 GMT
Subject: CN=1c690e56905ac698f14dc8cb424a41c2f66b4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:5f:2d:ce:29:e1:8a:7c:3d:93:59:04:c7:
bc:72:dc:f9:87:96:e0:28:d5:4a:e3:1b:8c:1c:11:
cc:e3:8a:95:1a:1a:7c:b3:96:36:b1:68:f3:49:88:
0f:09:be:ef:2d:e6:69:c8:fd:6f:67:b5:11:34:d3:
11:e8:13:2f:4a:6b:5b:1e:68:57:b5:7e:9a:aa:f2:
7e:9c:de:67:0c:73:80:e0:07:e3:aa:39:62:03:16:
11:92:75:73:8f:93:3b:c0:fc:c3:17:bd:f7:18:38:
77:8c:05:24:be:1f:5d:5d:b0:54:13:d8:5d:f0:17:
39:85:a4:79:32:f2:33:19:77:34:3c:47:8d:e9:df:
f2:69:13:bf:c1:9c:60:9e:1b:6b:f6:c0:06:2c:81:
2d:41:0e:28:b9:0c:84:2d:fc:31:97:8e:1a:3f:a3:
66:d9:a3:65:06:5f:57:34:50:6e:db:43:c8:8f:fd:
8e:b5:8f:a5:9a:48:25:b8:bf:5c:87:fc:39:78:f4:
86:5c:a2:9b:36:eb:29:e1:1d:e7:7f:85:02:10:4d:
53:3f:42:d6:b7:60:95:1a:7a:75:19:a1:15:35:3b:
11:37:62:93:b2:4d:00:40:95:8a:f3:84:56:ba:cd:
b8:83:b3:51:d2:ea:3f:88:1b:7d:9a:5f:fb:4c:40:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:0E:56:90:5A:C6:98:F1:4D:C8:CB:42:4A:41:C2:F6:6B:4B:EF
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:54:05:51:d3:61:f8:86:49:52:64:69:5a:f0:90:a8:d4:0b:
b8:0a:df:de:c6:2a:94:11:60:2e:84:51:f1:8f:a7:93:43:21:
3c:1c:ac:47:d1:6f:20:c2:66:31:c0:f8:99:73:7d:be:24:f1:
1d:df:bb:4d:b2:0d:48:10:f1:0c:bc:1e:c0:6b:0e:73:c1:92:
80:44:31:e1:9f:16:9d:a5:9f:7d:01:c1:b7:8e:f5:45:a5:b0:
4c:06:ef:de:70:4e:8a:f8:50:8b:97:79:b5:2f:a9:b8:68:1e:
76:73:a7:02:c8:42:fe:36:90:f4:8f:91:2e:2d:ef:55:21:c4:
80:f3:2c:1d:a2:52:2c:27:78:e9:bb:e5:6c:87:bc:3b:68:a7:
e7:ac:bc:f5:84:47:dc:6c:04:e0:f6:49:af:38:6b:f4:95:94:
22:6f:d7:08:51:53:b8:54:94:74:d6:5a:84:1e:dc:91:79:ad:
57:b1:42:aa:a5:d7:34:65:bd:66:18:eb:aa:b7:91:cc:4c:2d:
2c:93:e8:25:92:4b:7a:4e:a9:9b:65:5d:97:ca:dd:45:3d:4e:
8a:3e:68:78:af:9b:ef:61:a6:1a:dc:6c:b5:1e:25:73:de:01:
93:d4:f9:3d:0a:6c:d6:74:42:c4:a5:6b:b3:de:4d:40:97:d3:
b0:df:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:18:31 2025 by rpki-client