Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: 5vqniEKIaNIRw4+xGHmD2cRzV8L/PhRN9skFreDPLr0=
Subject key identifier: CB:5B:80:A7:DA:E6:5A:D8:D0:70:FB:CF:A8:C8:EB:C6:7C:14:AD:CE
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0196C2390667AA7384B3E795EC4C64A20343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0414
Signing time: Mon 12 May 2025 02:00:39 +0000
Manifest this update: Mon 12 May 2025 02:00:39 +0000
Manifest next update: Tue 13 May 2025 02:00:39 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: 6dMp1f4BuraAkJZronNtkt7IeJHOXhD/K0RSuFfp2Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:06:67:aa:73:84:b3:e7:95:ec:4c:64:a2:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: May 12 02:00:39 2025 GMT
Not After : May 13 02:00:39 2025 GMT
Subject: CN=cb5b80a7dae65ad8d070fbcfa8c8ebc67c14adce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:16:76:fb:63:2e:36:cf:71:1c:ab:35:fd:
bd:10:af:6d:d9:14:ce:08:b4:bc:7e:e3:6a:cf:13:
6a:27:55:1e:0c:2b:34:69:4b:d5:6d:71:29:85:c0:
87:3f:4a:fc:f4:22:a3:81:e8:e0:1e:5d:7f:cd:c8:
86:e8:bd:3b:dd:22:0a:3f:52:be:87:53:9b:63:b0:
77:c7:ca:69:96:53:45:59:d2:90:9f:70:b1:93:e8:
a9:89:da:00:26:0a:64:b4:80:f9:ee:ca:5f:31:96:
eb:fe:47:6f:ff:c7:ea:42:b1:82:38:c9:46:03:f8:
37:16:7d:3d:e0:1d:4d:ca:2d:b5:63:2b:e1:f4:2e:
b3:69:6a:a9:fa:b1:c0:dc:c8:0a:cb:8c:2d:82:a3:
89:ec:ac:f1:29:08:47:5a:18:ae:f3:2b:bd:d1:36:
3a:d4:d5:50:22:f7:87:b8:25:f5:01:71:8e:1a:0c:
5c:88:42:45:db:48:42:70:04:ce:32:eb:49:06:be:
b5:38:59:30:d0:85:61:84:bc:0d:67:a5:a8:d9:20:
b0:6b:c1:be:34:50:99:c0:dc:52:57:cc:c6:a1:69:
7a:27:e7:2c:b5:44:2f:3d:61:32:24:83:fd:34:4a:
55:cb:9c:8b:27:f0:07:9e:c2:c3:17:70:3b:d9:0c:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5B:80:A7:DA:E6:5A:D8:D0:70:FB:CF:A8:C8:EB:C6:7C:14:AD:CE
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:dd:5d:9b:b6:bd:22:d2:e8:e3:2b:42:4c:da:7d:b5:68:
5e:71:98:21:8e:92:e1:7a:7b:35:00:09:d8:a3:1b:f2:8e:31:
d3:5a:cd:f0:cd:f8:84:16:ba:0f:f4:e4:cb:64:f5:37:24:b7:
b0:6b:5e:50:75:01:52:f2:cf:59:af:4f:e2:ba:60:66:15:a0:
0d:c5:0f:ba:ee:01:dd:f5:43:f1:4f:84:ce:9f:ee:df:6b:32:
a2:01:6f:41:b3:a6:c3:20:6c:3b:90:43:d2:d8:83:99:85:fa:
aa:db:70:bb:09:a9:53:45:b7:52:1e:9b:2c:92:74:a2:da:0e:
6c:d8:e8:4e:1b:97:b6:5e:a4:ef:c3:0f:92:0b:b9:68:fe:e6:
56:82:9f:29:e7:76:0e:07:30:46:01:c8:0a:49:93:13:5b:66:
29:db:95:97:b0:90:05:de:ad:97:98:7a:bf:a6:a7:7d:7f:a8:
8b:71:f7:1f:90:3a:69:e2:cd:55:af:51:9d:5f:47:b4:c0:07:
2b:2d:97:63:41:1a:6c:a0:fc:71:b9:ab:3f:2c:5c:e7:fc:c8:
33:a3:03:6e:8e:11:ec:b4:9c:3c:bf:5b:cc:9c:98:6f:42:32:
4e:30:bd:ad:67:4e:7d:04:a7:94:99:64:85:1e:55:95:74:1a:
22:5b:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:42:24 2025 by rpki-client