Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: 0MV2dDW7XBhWpqqYIzqSBuamYEvGRsDFdMXtiWyj94w=
Subject key identifier: 1E:71:27:0C:85:7E:CD:3B:CF:A1:DC:DF:17:9B:45:AA:98:93:43:AC
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 0196A7D46BD3D9E7C925B7314FD7725408B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0C09
Signing time: Tue 06 May 2025 23:00:38 +0000
Manifest this update: Tue 06 May 2025 23:00:38 +0000
Manifest next update: Wed 07 May 2025 23:00:38 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: 0XvSyJ5ZlLtpyguPse84q5ZfBbCJzDtTE8kCfmhuvWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:6b:d3:d9:e7:c9:25:b7:31:4f:d7:72:54:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: May 6 23:00:38 2025 GMT
Not After : May 7 23:00:38 2025 GMT
Subject: CN=1e71270c857ecd3bcfa1dcdf179b45aa989343ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:09:1b:8a:13:68:e0:79:b1:0d:2d:20:14:
9a:c8:9b:60:14:b3:aa:2d:1d:c8:92:4b:1f:eb:2c:
89:02:79:54:f9:0c:a3:b4:93:7d:7f:49:78:85:dc:
71:0b:1b:8e:e5:7f:c9:38:8a:ff:aa:8d:78:24:4d:
23:6f:a6:30:f4:dd:c1:d4:a6:76:08:ae:f6:22:de:
60:29:20:16:76:2f:5f:fc:40:89:33:99:8c:39:fd:
ca:c4:07:df:98:32:fa:24:ca:e0:e8:86:5e:6a:7d:
04:d6:0e:03:36:e8:81:30:32:60:5e:90:9d:52:3c:
3b:5b:c9:b0:36:d0:c5:bd:9e:6f:40:8a:0b:52:06:
01:68:5e:ca:f7:14:d8:9f:cf:24:3e:aa:c2:18:73:
88:bd:0a:ec:4f:e1:be:68:0a:8d:a3:ad:e1:ee:bb:
b3:e0:db:7c:22:f4:c4:d7:05:7a:9d:bd:ad:2b:57:
34:28:8a:af:ee:f1:2e:e1:57:ed:da:02:04:a6:81:
da:42:12:ca:50:d8:36:fb:48:26:df:a5:18:a1:10:
4d:5b:18:24:a4:0a:8e:78:01:84:f0:68:08:27:50:
7d:0d:9c:33:ab:87:a5:3e:9b:b0:f3:ad:0c:16:05:
c9:01:51:9d:8f:02:bb:9e:1e:cd:56:fc:a8:88:ff:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:27:0C:85:7E:CD:3B:CF:A1:DC:DF:17:9B:45:AA:98:93:43:AC
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fd:f4:7e:32:41:1d:dd:ba:e3:50:45:ba:f6:95:30:db:40:
f3:77:b7:d1:47:f0:b7:59:86:3a:b8:39:c3:37:e1:aa:40:cf:
75:9d:02:da:dd:a8:d1:41:1d:1e:82:43:8f:33:63:87:13:6f:
c6:bb:e3:f0:fb:62:b3:e0:7a:dc:01:10:af:87:7a:e3:ad:f9:
e2:c9:47:87:88:8e:d4:d0:a3:c5:98:e3:10:fd:33:6c:8a:3b:
68:3d:fc:c0:b2:d3:76:df:17:3d:e6:87:8e:10:0d:db:d3:23:
33:8a:a0:fd:a4:ed:14:00:72:26:ff:33:4b:c1:51:ff:f6:53:
94:51:16:4f:a1:b2:49:68:12:d4:8c:88:01:57:df:91:54:c3:
5e:bd:0d:5b:ea:cf:fa:14:19:cc:3c:9c:a2:47:b1:e3:83:71:
14:13:f4:a7:6e:df:32:11:94:b0:2c:12:63:e8:77:db:1a:7f:
be:dc:11:bb:d1:0d:69:6f:d3:fd:f0:74:5a:39:d6:94:f5:26:
aa:35:6c:1d:aa:dc:d1:27:9a:01:81:a7:8d:48:62:1a:85:55:
8b:59:cb:cc:ab:d8:14:70:bb:a1:9e:0e:7b:67:80:6e:5e:40:
23:8f:bc:ba:9d:8d:9d:0b:5a:e1:72:ed:1d:3b:07:12:18:fe:
ef:f5:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:14:27 2025 by rpki-client