Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: HIXwu81CxBsbBKfwSPz9xxoJrDvBWAouDSx7Z2I7Ozo=
Subject key identifier: 0D:10:AB:02:FA:86:29:F3:B2:F9:5F:1E:07:FC:48:6D:D7:47:26:48
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 0196B6350C3BFAC13D298FBE577927724A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 08CD
Signing time: Fri 09 May 2025 18:00:51 +0000
Manifest this update: Fri 09 May 2025 18:00:51 +0000
Manifest next update: Sat 10 May 2025 18:00:51 +0000
Files and hashes: 1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: fKgKLHst62ykd3Qm1ttLTXGuKWf3whAFtAZjeRbX21Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:0c:3b:fa:c1:3d:29:8f:be:57:79:27:72:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: May 9 18:00:51 2025 GMT
Not After : May 10 18:00:51 2025 GMT
Subject: CN=0d10ab02fa8629f3b2f95f1e07fc486dd7472648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:f7:8d:81:39:b3:d1:d0:ec:32:c5:2d:09:
a9:77:0b:74:96:3e:98:2b:d8:33:2e:5a:6e:82:1b:
04:a1:60:a5:ec:94:a8:3d:bc:61:e4:2c:1a:c6:3a:
28:08:ae:46:ed:e2:4c:c1:15:3d:24:ab:b8:ea:ec:
70:03:14:f5:5c:e9:68:0a:b3:5a:9a:3c:68:ed:b6:
a9:92:29:5b:59:1c:0d:91:c3:d1:4c:8d:bd:82:02:
56:0a:12:24:2d:44:c5:8b:8d:82:00:cb:40:84:50:
48:5b:b1:0c:35:72:03:de:ba:50:6b:66:e1:06:04:
d7:e0:4a:81:e3:87:ca:04:b7:6b:86:c7:6e:e7:2d:
a2:d0:7e:e8:63:cb:3b:d4:4f:65:ff:98:c7:a5:79:
1f:5b:c1:15:55:ba:54:21:c1:65:a8:1b:b0:5b:59:
e3:37:bf:a6:32:b9:7c:f2:c0:f6:67:70:06:32:e8:
6a:3a:54:38:ab:71:fd:8b:19:03:1b:cd:9c:46:ec:
d8:95:a9:cd:69:30:28:e0:bd:86:c8:d6:70:60:2f:
24:3a:c5:48:59:70:8a:8a:fc:f3:c4:32:e0:01:91:
7e:ca:a0:07:83:8f:56:ae:fa:cb:ad:25:af:96:b6:
a6:a4:95:36:08:49:3e:f1:fb:29:87:be:a0:a5:08:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:10:AB:02:FA:86:29:F3:B2:F9:5F:1E:07:FC:48:6D:D7:47:26:48
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:08:d2:b5:54:35:ac:5c:3d:a8:ef:ec:65:6b:24:b5:a5:
00:76:3b:16:52:fb:39:86:ec:64:f9:cb:af:8e:75:c8:32:fd:
67:c6:dd:27:2f:f3:97:66:66:d0:d1:7b:dc:ef:2f:2d:6a:7e:
16:a6:a1:02:5f:7a:1b:af:f0:8f:7b:9c:76:15:bd:86:6a:7d:
2f:b4:70:da:2a:92:eb:14:9b:95:97:95:31:bb:2d:7a:ee:5c:
1e:fa:9d:ea:d7:1f:98:fb:83:7d:e3:77:33:80:70:45:8c:e7:
9c:41:18:77:0a:dd:12:14:30:99:b1:98:2e:9f:c0:94:d1:31:
0f:e9:b9:e4:74:3b:32:02:df:4b:a4:8d:ba:62:76:70:e9:80:
62:dd:7c:ac:00:dd:92:c8:e2:1b:f1:b0:37:f5:5a:2f:c5:5b:
6b:dc:61:37:50:64:dc:d3:b7:12:15:ee:39:b6:06:65:06:d0:
5b:e5:8a:f9:31:cc:90:a3:76:e0:7b:b5:d5:70:bd:f2:32:43:
eb:88:4a:90:3e:70:2f:f2:9d:50:91:96:95:a4:54:27:10:e5:
13:e9:a3:a6:fb:6b:d7:04:b1:34:da:a7:00:7d:9d:c5:77:27:
5f:e6:fb:d8:8f:5f:d4:68:83:33:97:5d:5d:5e:1a:e7:63:3f:
c5:eb:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:53:36 2025 by rpki-client