Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: RJ6Ds0lSytk9IJZW6ggvXFaTtq6vPMoTioMIqYPi4qw=
Subject key identifier: FA:80:43:88:D9:E1:20:66:F6:88:A5:3F:39:3A:1D:DC:31:90:26:1A
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 0196B2C5AEC2E5FFECCF7090F99E2663DCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 035D
Signing time: Fri 09 May 2025 02:00:21 +0000
Manifest this update: Fri 09 May 2025 02:00:21 +0000
Manifest next update: Sat 10 May 2025 02:00:21 +0000
Files and hashes: 1: hzP2EY4V13WQH8d_pNPxVTI0pdE.roa (hash: p8JhkO3NrYZd+pd4+yMBXMa+gMDLxEDL5Q92aazBUYw=)
2: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: /jl+G1ExF0qAZT3yIaRwXbTxsb9Tkas/bhiCNO2fnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:ae:c2:e5:ff:ec:cf:70:90:f9:9e:26:63:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: May 9 02:00:21 2025 GMT
Not After : May 10 02:00:21 2025 GMT
Subject: CN=fa804388d9e12066f688a53f393a1ddc3190261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:b0:75:89:8b:3b:3f:c8:33:05:51:91:08:
61:38:5d:d3:b8:bf:dc:27:8e:b9:29:c1:70:85:b7:
f9:2b:d5:3b:bf:e0:c3:db:56:7e:11:bf:a6:fb:b0:
9a:00:87:41:61:36:c2:00:6a:7b:96:7d:7d:98:d8:
bd:68:7c:09:cf:77:8a:8d:1c:8d:96:be:c0:c9:1a:
7e:91:ef:9c:0b:4e:24:2c:47:94:78:68:c2:11:06:
28:ba:67:9b:57:34:b6:48:b1:d7:70:05:aa:ef:ec:
a7:ed:ee:5e:df:f8:0a:1c:fb:a0:e3:ed:b9:c2:9e:
3e:1e:4f:86:20:6b:72:c8:be:f7:5b:fd:fb:a9:60:
ec:4f:10:b9:1f:0d:7a:1f:aa:d4:fe:66:fd:e1:ea:
35:7b:f2:9a:84:f0:12:b2:b0:68:3f:d0:f8:0c:3b:
4e:ea:20:5a:8a:d9:75:f1:a4:8f:ee:bd:b0:70:fd:
71:0c:de:1b:20:8b:0a:59:63:2f:d5:53:ae:c5:78:
0c:39:c0:9c:c9:87:3d:47:a8:c3:e9:cd:5a:a2:f9:
c1:20:f0:a0:d5:fd:27:a5:29:b0:45:94:23:c0:26:
be:33:33:ed:ed:8b:bb:d5:1a:fe:c2:c5:31:23:ba:
4c:7e:ec:ed:c6:bd:c8:5e:bf:73:97:3d:a7:1e:ba:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:43:88:D9:E1:20:66:F6:88:A5:3F:39:3A:1D:DC:31:90:26:1A
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:76:1a:59:b0:3f:4a:e6:d9:86:b7:ca:e0:16:b4:3d:44:c3:
b4:3e:38:7f:ba:89:f9:4f:54:24:b5:69:3b:b8:5c:bc:d4:5b:
21:3e:a2:ff:d1:9e:d4:ea:3e:81:a5:7f:58:a3:bc:00:3a:77:
27:53:df:e4:87:df:4a:5c:b0:a7:b7:be:83:93:5c:ed:30:52:
85:02:01:26:6d:1c:86:d7:71:46:f3:b8:47:03:44:06:99:c8:
49:56:35:c3:48:66:09:48:db:a5:d8:9c:9c:be:35:51:e3:49:
26:fb:ab:17:3c:5f:f2:ee:cc:69:89:8a:e3:ff:dd:5e:16:98:
8d:b4:bc:ec:a8:58:8e:74:50:7a:35:2f:c6:78:c0:39:22:63:
82:e0:9f:a9:a7:0b:32:f9:c5:7f:4d:d7:03:29:c2:73:c1:86:
e1:64:56:9d:90:87:5f:22:d1:34:43:19:a8:c0:c7:7e:cc:67:
9b:71:fb:1b:94:c5:9a:c1:5b:48:01:33:fe:41:99:8b:ba:56:
06:61:85:3d:0b:df:e1:e9:b9:a5:e9:ad:02:94:6f:cb:b2:eb:
84:22:39:a7:01:b6:bb:de:80:df:96:04:76:d8:a8:6d:56:40:
45:04:2d:d4:e5:45:e8:a2:af:10:d6:fc:0b:b4:08:55:25:5b:
aa:45:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:52:49 2025 by rpki-client