Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: TyhjXxfWHzKEPy7gb/33gG2qnOE8VA+YgONwPGKfseU=
Subject key identifier: 22:1C:95:6D:8D:3F:3E:39:2D:EB:C7:52:B9:29:BC:65:36:49:AB:82
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0196BAB6147A55F1F57BA9003E23BA508A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 13B9
Signing time: Sat 10 May 2025 15:00:16 +0000
Manifest this update: Sat 10 May 2025 15:00:16 +0000
Manifest next update: Sun 11 May 2025 15:00:16 +0000
Files and hashes: 1: AYMZsCP_EpMu8RPBLDZVLkCvhu0.roa (hash: Tst8LxSIjyJtf5Ga+lTbCskeG0exVgkIZgLfHnrsrBA=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: SjerZaFy4ccdOjjhhdm6NjaLZqpG2uGLMTfnIKcR0ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:14:7a:55:f1:f5:7b:a9:00:3e:23:ba:50:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: May 10 15:00:16 2025 GMT
Not After : May 11 15:00:16 2025 GMT
Subject: CN=221c956d8d3f3e392debc752b929bc653649ab82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:a3:ed:ea:4e:50:73:32:72:59:74:92:87:
a1:67:69:4c:d2:04:fe:e5:e8:a2:44:03:26:fd:d2:
68:9c:bd:b1:b8:9d:2e:cc:de:1c:de:81:ff:58:52:
81:5e:0b:59:e5:e9:b0:a2:42:df:06:15:76:cf:b7:
ff:90:dc:67:e1:7c:27:17:90:f6:15:ae:16:f1:be:
03:eb:6d:a2:54:e4:1d:37:e3:a6:e6:7f:76:2e:01:
da:0b:f8:71:f8:c0:02:f6:5a:6d:d0:92:a8:6c:27:
f2:02:e6:15:23:a5:92:63:58:9e:fa:fa:c5:03:a4:
ec:90:e3:1a:de:0a:66:00:a9:2e:e9:13:fa:54:09:
98:f6:40:30:a7:b6:f7:75:23:23:df:ca:a6:a2:0c:
4c:96:e6:c3:3e:9e:53:d7:73:4f:42:c1:b4:4f:e8:
d4:3b:36:25:85:3e:5b:79:1d:fa:ca:c5:79:e3:d6:
67:d6:75:86:fd:48:02:2e:2c:60:ce:82:e2:1a:b8:
3f:a9:09:cf:79:1a:22:ea:17:85:f1:dc:70:16:16:
1d:d8:26:24:4f:13:b7:8c:b2:72:4d:de:3b:5f:06:
5e:6a:19:97:d4:cd:b5:ca:84:2d:02:9a:ba:ff:f9:
ee:8f:ae:5c:c3:87:4d:ea:e4:5c:1d:8f:d1:5c:58:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:95:6D:8D:3F:3E:39:2D:EB:C7:52:B9:29:BC:65:36:49:AB:82
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:7b:b6:1d:e0:ef:ce:67:bf:3f:93:cf:21:92:55:fb:17:
a2:d4:da:a5:b1:e7:bb:a3:2b:49:4b:44:2f:8a:3d:95:4e:25:
b4:0f:c3:41:6d:bb:b8:55:75:61:4b:2f:39:93:ab:51:9d:02:
bc:5f:e2:53:c8:ce:9c:7b:fe:e4:8a:54:56:ec:18:1c:85:b3:
dc:6d:5a:97:2c:66:86:51:07:bb:e8:2f:3a:3c:d9:a8:a5:08:
85:cc:14:9f:08:4b:4f:32:61:93:b8:c7:1c:5a:81:df:3e:19:
3c:27:3f:63:1d:36:19:72:78:b3:2e:7f:55:21:20:d6:55:94:
39:54:00:a9:a2:16:62:09:36:7f:16:65:69:f6:ef:52:06:8f:
b6:8a:4b:f4:e0:4c:42:40:4a:b0:32:f1:50:8f:bc:09:35:ec:
73:da:b9:a1:6f:60:e5:45:6b:33:d2:c7:ed:95:f9:c4:23:32:
98:25:e2:2d:29:18:ea:63:72:05:d5:fe:c9:cd:35:29:c1:9f:
6f:ab:41:db:72:ae:d8:82:5c:24:94:ec:65:03:7e:a2:4c:5d:
03:1e:db:18:ac:94:2f:a7:78:47:bd:74:e2:a7:37:63:f9:68:
57:f4:10:e1:ee:74:36:7e:de:94:10:34:0d:9e:88:65:da:86:
67:40:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:29:08 2025 by rpki-client