Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: Jl6h4xqr2FYoe7agjwye7IYc2gmTB3eD+NME9Uoppjk=
Subject key identifier: 69:6F:1F:28:DB:97:52:5F:D8:74:B8:D0:03:74:CA:F3:E1:18:F1:7D
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 0196C9BB36CCC612A5470F510573598DC1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 044B
Signing time: Tue 13 May 2025 13:00:11 +0000
Manifest this update: Tue 13 May 2025 13:00:11 +0000
Manifest next update: Wed 14 May 2025 13:00:11 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: /3gDIXWCSnbvbfj08CfCjF8Bm2tlCoMSiLQmcPVATl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:36:cc:c6:12:a5:47:0f:51:05:73:59:8d:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: May 13 13:00:11 2025 GMT
Not After : May 14 13:00:11 2025 GMT
Subject: CN=696f1f28db97525fd874b8d00374caf3e118f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:d7:e1:db:65:71:b9:46:1a:e4:27:e5:32:
b2:6d:70:f0:8c:e5:fe:c8:9b:19:59:be:c8:20:b8:
c4:ad:a2:98:32:53:b0:37:df:b0:c5:d9:69:4c:71:
39:5c:d3:71:4c:02:6f:53:0e:0d:06:5c:e0:be:73:
e8:26:40:a8:c5:e4:72:a5:3a:6c:4b:65:a7:1f:c7:
46:27:2c:c6:19:e2:66:9b:c7:df:e6:a4:dc:b2:57:
e8:ba:55:d7:b6:b1:dc:21:0e:ef:e6:74:5a:72:27:
cf:a6:5c:e4:8a:70:04:32:ce:65:d6:14:06:30:85:
59:c3:7f:70:cd:52:a6:4b:6e:94:ef:f6:10:eb:36:
91:4b:ed:d0:ab:d6:9e:c6:e5:b9:f7:6d:e1:13:f8:
ca:22:7b:e1:8d:8e:da:ea:38:a9:36:47:5e:e6:1b:
b6:8b:08:2a:6a:30:75:80:d3:bf:ae:52:13:6d:38:
7d:de:c7:12:c8:f3:d5:02:86:00:8c:dd:60:6c:4a:
b7:6e:92:d7:0b:f5:5f:f3:1f:ea:bc:b6:50:ef:06:
4a:19:4c:8c:5f:90:b5:7c:1f:85:81:da:ed:bb:5c:
b2:f7:e5:fd:07:db:8d:e1:5d:06:42:34:bd:24:49:
a0:43:0e:cd:29:c4:eb:bb:f0:14:61:89:1f:00:0a:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:1F:28:DB:97:52:5F:D8:74:B8:D0:03:74:CA:F3:E1:18:F1:7D
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5d:39:93:99:62:9f:54:ee:03:78:32:75:fa:ed:ea:f2:2d:
0e:c1:f6:a3:77:11:6c:dc:fa:37:29:aa:20:7e:c2:fd:1c:2b:
3d:13:cc:a5:77:59:b2:e5:03:d9:ed:04:b4:d8:35:a4:26:b1:
a9:34:1a:70:10:91:f7:e6:1b:a8:84:79:16:32:01:aa:5b:a2:
da:c8:85:f9:34:b1:b4:0f:9a:3b:f7:1d:a4:df:a1:d5:83:48:
10:43:72:a1:a4:1c:da:ef:69:b3:7f:e9:b9:d2:bf:57:ba:6a:
b5:67:fe:b9:0f:28:d9:be:9a:78:8e:b7:d1:cf:dd:e1:2a:8b:
26:43:66:3a:ff:b3:91:fe:98:9f:23:a0:aa:1a:bd:54:b6:20:
55:8a:74:9f:8a:ff:d1:39:2f:08:33:8a:dc:c8:ad:08:39:58:
aa:ba:34:ca:e9:25:78:b6:36:e4:54:0e:dc:8c:e9:40:20:0b:
b0:14:32:da:d2:8a:b4:9c:e5:6c:13:f3:3a:18:9b:cb:05:91:
f3:a7:d5:13:ff:16:4a:bb:60:20:33:5f:af:11:89:89:1b:86:
9f:8c:db:fd:cd:ce:1f:a7:8c:4a:67:05:52:fa:20:6d:e3:74:
9b:cd:68:90:e2:3b:51:4e:e2:86:ab:90:15:96:75:8b:cf:12:
cb:61:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:45:59 2025 by rpki-client