Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: 5B7Z0Ped4bRhSlTXYQi3F/nEf12/CpFmrQDTn0BlOQs=
Subject key identifier: B5:7B:7A:3A:19:08:83:48:B8:28:7C:CF:1C:27:3E:42:2E:44:D4:5E
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0196CA292AC81A2003B1F0E70DE7824A4CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0CD7
Signing time: Tue 13 May 2025 15:00:17 +0000
Manifest this update: Tue 13 May 2025 15:00:17 +0000
Manifest next update: Wed 14 May 2025 15:00:17 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: ts1GS08hVJED15rpmcHEe+Im0/AsGE6LvvOkCqV1g7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:2a:c8:1a:20:03:b1:f0:e7:0d:e7:82:4a:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: May 13 15:00:17 2025 GMT
Not After : May 14 15:00:17 2025 GMT
Subject: CN=b57b7a3a19088348b8287ccf1c273e422e44d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:4e:0a:ac:53:38:8d:48:38:ac:bf:5c:b9:
76:e7:d6:38:72:4e:fa:18:6b:01:e1:c4:8f:e6:74:
6a:c4:a0:c0:ca:d4:7d:22:16:7a:5c:ce:89:9f:8c:
b1:bf:ad:72:42:db:d4:33:77:91:8e:7d:09:b1:14:
69:7d:c6:a1:6e:ee:49:e6:d0:c0:ad:dd:29:d3:01:
6a:7b:09:1c:d2:b3:2b:11:23:e8:5c:36:3c:3b:05:
bf:c1:4d:7e:5c:6d:19:d4:f8:75:26:b6:96:51:99:
79:d2:31:a7:4a:7a:d4:6a:87:ac:dd:e6:05:a9:19:
53:56:9e:f4:67:f1:e8:6e:20:eb:f7:35:6d:6c:0b:
77:ab:22:3d:4f:a1:fb:6a:7f:e3:6e:54:c1:69:af:
1b:5c:81:89:fe:9d:0e:7b:06:95:12:e9:89:89:3e:
3a:f8:c2:3a:83:ab:f0:19:aa:7c:65:71:af:65:50:
95:62:b0:f6:fd:fa:7a:15:76:9b:56:1b:97:05:7b:
35:2c:03:36:75:cc:93:cb:a7:23:1f:70:47:88:e8:
1c:d7:f0:eb:12:83:7d:55:6f:fa:e9:db:6e:f7:d6:
88:ca:91:c7:22:6d:9d:e1:29:8f:e3:f1:3d:91:94:
ee:a3:e3:13:5f:a2:e8:d5:fc:4e:61:22:a5:1b:54:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:7A:3A:19:08:83:48:B8:28:7C:CF:1C:27:3E:42:2E:44:D4:5E
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:4b:0f:ab:74:40:62:bb:3e:11:bd:6a:56:31:ff:26:2f:
59:9c:38:f5:b7:e1:8f:21:24:25:76:20:59:2e:94:f0:07:c4:
55:5e:06:76:13:5a:70:4a:f9:75:1f:ce:f7:4e:ce:ba:80:9d:
89:3d:cd:88:5f:94:a1:73:60:30:e1:1b:d2:e9:1f:9b:a6:0a:
db:b4:82:eb:d4:82:1b:17:f0:15:26:f8:cd:fa:74:a9:ea:fb:
a3:f8:2d:43:a7:e1:c0:c9:86:5b:76:77:bd:f5:dd:bb:0c:74:
b8:e5:f0:3e:94:c2:af:61:bb:40:e2:31:4d:f1:d6:76:02:ff:
b0:21:90:5a:5a:e8:63:05:d4:d0:c6:e9:6e:0c:66:c5:b1:5a:
c9:35:df:d0:5f:2d:85:a8:33:88:2a:a2:be:65:ad:ec:d4:42:
a5:ce:49:18:9a:2b:99:49:60:b0:50:c9:aa:68:07:0c:0f:0a:
5f:8d:0f:f3:c5:7d:83:86:d4:5f:5d:21:fa:76:04:36:c1:1c:
f9:a5:01:ec:5f:65:e1:3c:be:5b:25:26:6d:21:ba:6c:9d:ea:
83:cc:b6:04:4b:ae:0f:81:03:0c:22:8c:a4:c0:3f:65:12:d9:
a3:43:40:90:c1:a9:18:4a:b0:ef:49:6f:59:c0:c1:4b:a4:5c:
3f:b5:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:18:19 2025 by rpki-client