Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: JB1HUrTg0RIZ8mnjtVPGJkaDHRRIF7XggjgE2SsDJaQ=
Subject key identifier: 7B:2E:99:8B:4C:7C:73:4B:5D:5C:BE:CA:6E:E3:01:5A:7E:00:11:80
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0196CDCF243CCA6D8AE8242444E384E37385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0D4B
Signing time: Wed 14 May 2025 08:00:26 +0000
Manifest this update: Wed 14 May 2025 08:00:26 +0000
Manifest next update: Thu 15 May 2025 08:00:26 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: 8rImumQLHInRO2rVX47FyxDCYSwtKgXMp6N5k/bFmnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:24:3c:ca:6d:8a:e8:24:24:44:e3:84:e3:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: May 14 08:00:26 2025 GMT
Not After : May 15 08:00:26 2025 GMT
Subject: CN=7b2e998b4c7c734b5d5cbeca6ee3015a7e001180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:8e:70:b0:69:0d:86:33:81:ab:11:e1:d1:
e0:2c:5b:87:d7:b1:25:55:77:e3:3e:0e:47:af:30:
f4:e1:3b:99:fe:31:0d:d5:5c:1e:06:67:47:ba:14:
2e:40:2c:bc:bb:a7:f1:a3:da:0a:6c:9d:fb:1e:a2:
59:16:e7:e3:b5:cb:ae:25:1e:f3:a3:54:f3:11:37:
c6:09:81:f7:6d:1f:97:a0:94:e1:fe:d3:d2:39:13:
17:d2:ee:37:0c:be:64:1c:87:58:51:39:79:c7:c4:
01:52:8d:de:ef:04:33:04:b4:a0:b1:2c:04:9b:4e:
b5:7c:4a:0b:e8:e4:68:01:c5:6c:3c:d9:92:09:13:
50:5b:7e:47:f0:fb:95:d0:04:65:bc:c0:df:ab:7c:
c8:d7:58:02:8c:e9:03:02:88:c3:fb:d8:a2:f6:52:
16:af:46:e1:d1:23:90:8f:fe:84:e2:a4:6d:8c:22:
a4:f3:f8:8e:b3:2d:5d:c7:48:31:38:59:03:75:51:
b9:68:a3:4f:21:8e:09:f0:49:35:5e:ca:8f:09:23:
82:13:6f:21:c4:91:87:e9:b3:e9:d9:62:d8:1f:52:
32:97:8e:de:45:77:e7:28:75:70:5c:ec:76:cb:c6:
37:07:f4:93:3b:7b:b1:56:98:53:80:3d:50:ad:42:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:99:8B:4C:7C:73:4B:5D:5C:BE:CA:6E:E3:01:5A:7E:00:11:80
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0a:5b:3e:6b:0c:7e:de:35:72:2e:2d:64:16:67:e7:39:8b:
4b:34:16:d4:70:de:17:d9:ea:45:ec:ae:56:54:3e:aa:93:ff:
9e:a7:20:3c:12:48:a0:be:af:cf:95:8c:fc:7f:e2:13:2e:f8:
2e:ec:88:2f:b7:3b:a0:6d:a1:2c:8c:68:59:16:f2:de:fa:82:
bb:61:12:75:5e:8e:ee:c5:1c:36:cb:37:d7:4e:d8:6b:12:4b:
d6:3e:68:2d:fa:cc:c8:73:6c:54:e8:b3:83:40:b1:93:96:d8:
a5:a6:fe:b3:c5:2c:c8:8a:0f:cd:8c:09:e0:21:49:f1:2b:32:
60:df:1d:16:08:f7:02:35:06:af:0a:39:7d:d7:24:b1:04:5a:
c7:01:d7:09:f9:47:55:19:a6:91:54:89:b7:2d:96:94:08:9d:
b0:f7:a7:7d:37:00:16:ac:52:8e:24:39:de:d2:1a:23:5e:ea:
52:bd:28:56:c4:a4:94:cb:1f:ce:e9:9e:fe:0b:98:fe:e0:8b:
5d:fd:f4:f8:67:27:4f:9e:9e:e8:f9:a1:44:e5:35:ec:fa:61:
47:1b:a8:21:39:96:f6:0f:85:c7:9c:55:ad:c9:9f:f4:93:9d:
81:f3:63:97:78:03:8c:04:a4:9a:4c:04:02:ba:2b:07:e4:93:
b1:66:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:51:43 2025 by rpki-client