Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: 0vekHzFl4pOCjta0CQ6HwheGu0zE65jZwd53Oe8wx8c=
Subject key identifier: A1:23:11:88:5C:C5:A5:3F:C9:F4:22:24:92:05:06:0E:51:99:E6:14
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0196BA12007DBB46D9968CAD8F3E79938CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 1236
Signing time: Sat 10 May 2025 12:01:04 +0000
Manifest this update: Sat 10 May 2025 12:01:04 +0000
Manifest next update: Sun 11 May 2025 12:01:04 +0000
Files and hashes: 1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: ZZapq/pztJkvldRg5PRcj9szhd+uFHn9LbrA9IAroZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:00:7d:bb:46:d9:96:8c:ad:8f:3e:79:93:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: May 10 12:01:04 2025 GMT
Not After : May 11 12:01:04 2025 GMT
Subject: CN=a12311885cc5a53fc9f422249205060e5199e614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:ea:27:fa:17:fd:48:e2:d1:b4:44:ab:2a:
9b:48:08:0d:74:15:c1:4e:e6:da:80:81:c5:b8:cd:
a5:c2:1c:84:d0:9f:d1:71:5b:9a:ea:97:8a:77:8f:
64:37:d1:27:4a:73:f2:a5:e8:8f:89:87:d3:80:b0:
50:4a:27:01:35:48:c4:a7:9b:24:bf:e6:a1:9d:21:
c8:f1:df:e0:03:ea:c0:42:b3:2c:4e:96:be:c1:72:
e6:f9:f3:24:13:db:7b:e7:9a:0c:01:a5:92:51:e3:
3e:f0:65:2f:5d:26:ee:17:ea:d4:37:1b:6c:6c:65:
58:31:47:ea:59:03:41:61:cd:e0:19:29:9c:62:10:
f6:1d:f1:bb:98:fc:42:e7:77:2b:13:d5:a9:4b:91:
80:77:f7:36:ad:fc:24:57:3b:29:68:02:9f:7f:ef:
63:ed:ef:71:3c:04:d5:d5:7d:8e:5f:17:9b:e0:59:
18:c1:8b:ef:7c:cf:c2:4e:e7:4f:0f:f1:31:8e:fc:
11:6d:3a:3e:55:56:68:dc:7e:c2:fc:6d:0a:d4:03:
bf:bd:f5:80:89:7f:c7:2c:0a:6a:58:5a:64:d4:b7:
1d:8c:3d:0a:1f:47:c3:3d:25:21:48:c1:cb:af:ad:
7a:b5:19:98:4a:7d:1c:f7:6a:57:7e:ea:0f:92:c7:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:11:88:5C:C5:A5:3F:C9:F4:22:24:92:05:06:0E:51:99:E6:14
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e7:d8:54:d2:90:ae:50:0b:fc:60:3d:dc:ce:c1:f0:7b:8d:
e3:48:c0:92:a6:67:41:7f:6d:28:47:16:08:13:46:42:29:e7:
b4:41:a4:b7:e2:8a:92:1c:f7:a9:7b:a5:cd:bb:4b:df:96:41:
94:31:c1:77:f2:10:0d:df:b4:a4:08:47:6c:29:bb:e2:fb:99:
44:ed:83:f4:de:bf:aa:b1:f3:13:70:ab:e3:59:49:89:9c:db:
9a:71:5a:d4:ca:ac:41:7b:93:d6:30:fe:9e:34:17:ee:85:ae:
8d:65:5b:a1:15:43:b0:55:4d:6e:f3:c9:98:46:f5:e3:99:b7:
d9:0d:62:84:bf:90:25:60:97:16:19:9b:c1:f0:e0:22:49:0b:
14:52:ec:80:df:37:41:f1:aa:37:b1:71:87:97:fc:cb:3f:81:
7f:72:59:94:80:b0:88:3c:0a:ab:19:80:05:1b:07:f5:58:0e:
de:ff:86:6c:00:64:8c:b4:1a:1e:4a:c4:37:2e:6f:4e:f4:77:
32:aa:1a:a2:28:a0:40:f1:fb:12:4b:a7:54:a6:e2:ef:26:69:
a2:eb:c5:60:24:2e:7f:ea:e0:82:28:2b:aa:a9:4f:37:15:e9:
ca:47:fb:af:18:e2:9a:21:d4:fa:0c:e1:40:c9:01:19:5a:56:
de:88:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:09:38 2025 by rpki-client