Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: 6JOk9nxQl/TfPwcGTVWcegZoxIBNlBlBeOjHZd0Wbjw=
Subject key identifier: B4:B9:DE:CA:08:E1:13:04:F7:2C:2E:88:D1:50:57:C9:8D:E3:5F:B6
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0196BE936EDF7F7D666D84546CB0354BC51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 11AA
Signing time: Sun 11 May 2025 09:00:55 +0000
Manifest this update: Sun 11 May 2025 09:00:55 +0000
Manifest next update: Mon 12 May 2025 09:00:55 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: BSghT433VBm7s24EbNEWsR6e0O/WK4FfS8p+PQSjVQU=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:6e:df:7f:7d:66:6d:84:54:6c:b0:35:4b:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: May 11 09:00:55 2025 GMT
Not After : May 12 09:00:55 2025 GMT
Subject: CN=b4b9deca08e11304f72c2e88d15057c98de35fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:1e:e8:35:7d:bd:db:c3:2e:cb:d4:2d:17:
ce:3d:4c:41:11:00:f6:f2:04:18:0e:03:46:e5:31:
6f:23:e8:19:ac:17:3a:0c:ee:57:32:c0:41:fe:fc:
9c:b4:61:f9:8c:f2:8d:7d:0c:83:ff:f0:74:b8:bf:
ee:10:a0:48:b7:82:ec:34:7d:15:9b:fd:41:cb:63:
a0:2a:47:a3:e3:27:ab:82:d6:69:ea:90:42:ba:af:
e1:fa:d9:4f:ae:bb:d9:2b:cb:14:c6:d6:21:7d:b6:
63:8d:3e:f7:b3:f4:62:4f:bf:64:5c:77:35:21:b7:
ea:3d:d9:e5:c0:69:65:f6:b0:58:3f:eb:40:58:50:
51:8e:c6:2c:2f:d9:d7:18:f8:96:35:a7:00:0e:3c:
95:77:0d:71:b0:c1:96:ee:49:72:1f:b9:85:81:cc:
17:44:74:b9:2b:e0:f1:db:70:6b:44:28:38:9f:c9:
b7:0a:cc:6c:94:e9:a4:a8:90:af:26:ac:23:9d:72:
32:26:cf:25:8a:4f:54:75:1e:8a:7c:5d:eb:57:50:
09:73:bf:e1:0d:1d:61:63:8a:49:5f:ea:0e:95:7e:
2c:7d:03:aa:c3:bd:05:9c:1f:69:1f:4f:d3:f3:99:
b0:de:03:22:b5:78:f6:3a:3d:a6:3a:43:84:d7:ef:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:DE:CA:08:E1:13:04:F7:2C:2E:88:D1:50:57:C9:8D:E3:5F:B6
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b9:b2:33:c7:e7:1c:b5:54:2d:33:e7:ab:86:ec:23:f1:7c:
20:c4:10:65:24:f2:ca:35:d7:45:e5:d6:a4:15:e6:13:6c:ef:
d6:20:ec:e1:ad:29:36:d9:7f:62:5b:e1:c2:0f:c7:f1:1e:9c:
0a:64:a4:5b:0e:cf:35:01:8d:84:c1:e0:e8:40:47:e7:71:72:
76:c7:94:2a:11:f9:70:f8:65:8f:1f:72:b9:f3:38:7c:2f:1b:
fd:16:a1:72:f3:ef:c7:55:0e:cd:2f:8a:04:61:e5:90:7f:b2:
58:51:98:41:e0:66:cb:3a:9d:ff:19:35:75:8d:f0:b4:1e:da:
d5:63:4a:2a:80:bf:c7:c7:8b:3b:d1:04:98:c4:84:2d:88:cc:
c1:8c:6b:cd:c8:1c:e1:7d:ef:0e:79:14:42:1d:5b:08:3e:1d:
a6:a9:f8:bf:cb:68:59:b5:90:dd:45:2a:49:9f:8f:ab:bb:23:
ad:7f:f2:30:8e:26:df:81:28:6b:a9:52:45:be:dd:b5:86:bb:
35:32:20:df:07:2c:a1:3d:48:f7:e6:1e:80:c0:0e:33:df:17:
5e:ca:9e:70:a6:96:01:59:b3:02:a4:06:fa:d0:3d:b8:b7:38:
e4:32:e1:d5:c8:84:42:87:07:c5:98:fc:f4:26:d6:1a:35:cf:
79:a6:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:47:08 2025 by rpki-client