Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: 1uY925AWfvxO1YjJXTyOpH+Qfei6RCoJ8sYY9oSpjfQ=
Subject key identifier: F8:A3:C8:18:37:52:C5:AB:21:6F:C3:1D:0C:23:CC:DD:5E:A8:19:00
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0196A46645868BB11FFA96D90311701D6A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 09E5
Signing time: Tue 06 May 2025 07:01:27 +0000
Manifest this update: Tue 06 May 2025 07:01:27 +0000
Manifest next update: Wed 07 May 2025 07:01:27 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: fSOvSMfvcX3ZPgzpzymjlAUz8KCt7me0e+hcPcU+auI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:45:86:8b:b1:1f:fa:96:d9:03:11:70:1d:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: May 6 07:01:27 2025 GMT
Not After : May 7 07:01:27 2025 GMT
Subject: CN=f8a3c8183752c5ab216fc31d0c23ccdd5ea81900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:4c:e2:ff:6a:7d:ae:55:9a:2d:be:91:f7:
60:9c:5e:b4:87:35:a6:ed:7e:39:19:36:af:a6:c8:
d0:93:c1:7f:08:f5:74:ad:7f:e5:59:4a:eb:e3:97:
b7:94:01:7a:b7:1e:f7:3a:c7:cd:7e:e3:b7:13:40:
c6:74:04:43:dd:9e:e8:cf:bd:08:85:04:4c:93:4f:
32:1c:9e:e5:e9:7c:41:5d:6c:19:8e:f1:33:8e:80:
6c:de:79:64:f9:24:7f:6a:e8:c5:33:32:e2:29:63:
3c:20:5c:36:c2:e6:8f:0e:4a:ad:14:06:40:71:1a:
97:59:e6:e1:ce:af:fb:d0:45:35:df:b1:4a:fe:70:
18:19:33:01:2d:49:1d:40:ab:89:e6:e7:65:e7:4c:
09:2a:2a:61:1f:fa:f2:34:17:11:18:96:54:07:03:
af:e0:d9:3f:24:70:9b:50:01:94:1e:b5:d5:77:71:
99:57:9a:16:65:88:09:1a:52:0d:e3:d2:c6:b2:30:
bf:75:54:13:db:9f:46:24:98:39:f2:cb:62:a2:5c:
26:48:11:b9:8d:73:bf:a3:3a:b8:91:99:21:68:57:
8a:8a:09:e9:03:ae:6f:be:46:a6:eb:1a:6a:e7:31:
50:6e:9a:53:19:b1:c1:a0:88:6d:00:9f:68:eb:55:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A3:C8:18:37:52:C5:AB:21:6F:C3:1D:0C:23:CC:DD:5E:A8:19:00
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:ae:67:33:20:92:f5:05:f5:25:51:93:65:17:13:2f:cd:
14:60:00:4b:7c:f7:d2:cc:19:5c:8b:5b:88:4f:54:56:d7:8c:
ae:a2:4e:a5:d1:bd:94:32:3c:8d:e3:f6:cb:8a:c6:3a:bd:fe:
4d:46:05:c2:33:59:16:12:70:8f:b6:4e:6d:22:4b:4e:10:d8:
07:ff:3e:25:a4:14:4c:92:b1:d8:a7:c6:54:c7:eb:fc:77:20:
2f:29:10:3a:08:31:38:25:b4:e1:a1:e8:89:cc:b8:15:31:66:
6e:2b:22:ce:4a:33:6c:d2:6c:5f:5e:69:51:2b:01:2a:09:f3:
31:e5:72:5f:11:c2:5a:15:42:54:ce:c8:cb:fd:58:12:12:96:
0f:d4:b7:fc:f7:dc:3b:02:47:1c:cb:78:a5:55:d9:cc:65:3c:
69:28:80:99:55:42:3f:c2:e7:00:e7:7a:c8:c7:0d:48:62:06:
06:a8:4b:9f:31:4a:f0:46:ba:ed:8c:1a:38:15:8f:46:36:7d:
10:41:7d:6e:fb:a8:e8:55:56:cf:b2:4d:b1:b7:18:0d:b9:21:
37:63:22:34:6f:c6:a2:27:4b:4c:cd:a3:fb:f8:88:56:1e:02:
71:a1:fd:7b:0d:4f:61:da:b3:42:0c:39:6f:c7:fa:a8:48:19:
30:1b:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:17:18 2025 by rpki-client