Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: CGm1xTCyAH9tEx8kAB2reGMCuhy5iZw3eyXRfHXD8fg=
Subject key identifier: 68:67:76:D5:2D:E9:D1:DF:FE:CB:27:B2:C4:1B:CD:CD:CD:78:61:72
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 0196B8235D82D483BA266E700149C60BD45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0794
Signing time: Sat 10 May 2025 03:00:47 +0000
Manifest this update: Sat 10 May 2025 03:00:47 +0000
Manifest next update: Sun 11 May 2025 03:00:47 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: 56Atzl+IuhxnT7NrkT4C56oDXMCOUSDmq3ErNfBh4i8=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:5d:82:d4:83:ba:26:6e:70:01:49:c6:0b:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: May 10 03:00:47 2025 GMT
Not After : May 11 03:00:47 2025 GMT
Subject: CN=686776d52de9d1dffecb27b2c41bcdcdcd786172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:0a:fb:a4:41:5d:0d:a7:db:a9:93:4b:f3:
cc:8a:3b:5c:aa:7f:7c:20:6a:7e:6b:05:ba:5c:e8:
b6:49:14:a2:38:81:f1:31:e3:bc:bd:56:a7:a9:2b:
5a:58:0f:7d:e4:79:5b:2f:5a:6a:21:f5:eb:5c:ba:
eb:ad:4d:fc:8c:ff:81:0d:cc:7d:e4:40:cc:c4:3d:
bb:48:f2:cc:62:71:e5:24:06:5c:03:10:52:ca:86:
c7:c9:74:a0:42:17:06:d9:a0:32:4b:1c:f6:51:98:
e8:84:79:04:e8:8d:bb:d0:d7:b9:45:ef:d9:c3:3f:
bd:30:d4:22:aa:0b:9e:0c:4d:a2:53:29:59:9b:71:
d0:8b:ff:5b:a1:ab:25:47:68:11:6d:2a:24:62:17:
3c:06:90:d8:7b:63:2f:db:3f:29:f4:a2:6e:38:6b:
d0:95:0a:32:d0:b6:18:b8:e4:e4:2d:87:c5:e5:24:
8f:6e:2f:57:f9:4e:74:a6:45:c0:e1:b8:0a:41:c5:
13:a2:a3:49:90:28:b9:30:d8:34:dc:6c:9f:4a:5e:
78:94:a8:a7:b8:c5:b5:02:ec:2d:a1:ae:82:05:85:
9f:c3:d4:1f:e5:5e:fb:84:00:6e:84:50:3b:b8:6c:
97:53:27:f0:77:ca:5b:7c:69:b6:6c:85:a6:68:4c:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:67:76:D5:2D:E9:D1:DF:FE:CB:27:B2:C4:1B:CD:CD:CD:78:61:72
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:95:fe:c4:50:55:52:68:31:f7:15:97:d7:da:3b:d7:e2:a9:
ae:0f:4a:82:d9:de:ad:ee:88:56:72:1f:8c:08:fc:de:c6:5c:
18:ce:56:e8:f2:f6:93:1b:9d:67:63:34:4e:87:d4:ea:05:37:
0d:e4:f5:d0:f2:c0:ab:02:de:cf:9d:33:96:f9:0f:b1:85:82:
9a:47:4a:6f:c7:cf:4d:72:6c:50:ab:45:30:a5:dd:bb:be:4c:
d3:18:c9:87:80:71:14:d8:3d:47:56:1c:d1:a8:b9:a3:3d:bb:
08:4a:b1:a9:b7:80:4e:78:24:a8:d1:1e:7a:37:4f:b3:85:ab:
3a:c8:44:66:95:38:d7:e4:90:a1:8e:79:e1:9f:07:3d:e5:56:
f5:f9:75:11:75:50:59:41:05:bb:d5:89:ed:8f:12:cd:e9:8a:
cc:2c:04:39:d8:f4:26:b1:59:93:fd:00:28:fe:7a:21:c8:8b:
35:d4:35:8f:1c:23:fc:6d:a0:95:7d:e2:97:ab:b2:6e:e8:7b:
73:bf:81:35:6c:e9:b1:30:bc:0e:20:fa:9a:69:2f:7e:43:1a:
e7:44:84:80:67:09:9b:a4:52:13:92:be:bb:79:5b:7a:67:a9:
a9:89:a3:3c:28:27:91:bf:7a:a2:e7:3c:5d:d6:d2:a1:2d:a6:
7c:c9:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:53:16 2025 by rpki-client