Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: aoaiUf7qJ8weKdsGgUp3gXufUwNHGbgIOpHhKGwAJ9g=
Subject key identifier: AF:92:B5:C1:40:26:EB:F5:96:5A:D1:51:6F:35:D5:A1:9C:94:0D:51
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 0196BDB70A71B3759E9B8C152D19845FD539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 10F7
Signing time: Sun 11 May 2025 05:00:11 +0000
Manifest this update: Sun 11 May 2025 05:00:11 +0000
Manifest next update: Mon 12 May 2025 05:00:11 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: OcfTaMucLTLWoJkUKZMbN0eMGq2gO4x3wFPedYwz6Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:0a:71:b3:75:9e:9b:8c:15:2d:19:84:5f:d5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: May 11 05:00:11 2025 GMT
Not After : May 12 05:00:11 2025 GMT
Subject: CN=af92b5c14026ebf5965ad1516f35d5a19c940d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:df:3a:90:e4:fa:40:4e:00:23:86:27:5f:
cc:60:a7:e8:a4:8a:1e:11:68:f3:63:7a:bb:97:da:
18:c4:fc:92:ce:7a:56:9a:d7:3f:91:38:06:c3:61:
b2:50:f3:6d:25:93:51:96:b8:6b:d1:d9:05:76:a4:
1b:1e:86:05:a7:35:1c:c9:b4:41:50:29:55:89:28:
69:23:60:5b:5d:20:f1:9b:00:34:c3:3e:32:bb:a6:
96:08:af:92:f9:29:cf:48:d6:29:3a:a0:89:95:90:
64:ae:a3:38:70:6d:fd:a1:d5:04:ae:53:8c:66:09:
a6:ce:63:2d:e0:81:08:cd:33:b2:a6:63:80:48:5f:
f5:88:86:4b:d8:e7:7a:e1:67:7d:31:02:38:a8:dc:
a5:f5:28:ae:98:7a:3b:15:c6:bd:db:69:14:f0:4c:
62:ba:d5:ad:ff:c8:e9:b9:d9:1a:f5:58:be:2a:f2:
74:c8:82:0f:5d:3c:63:93:f5:4d:f7:db:69:4f:16:
3d:fe:28:eb:a0:ff:f2:12:39:ae:b3:e2:a3:87:6e:
0d:4c:fe:bb:3e:8f:4b:0e:1d:6e:2d:dd:7c:36:66:
45:21:6f:06:35:85:f7:ac:a4:bb:bc:d8:dc:21:52:
91:59:3b:46:1f:67:99:4e:16:5c:4b:66:9a:7b:47:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:B5:C1:40:26:EB:F5:96:5A:D1:51:6F:35:D5:A1:9C:94:0D:51
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:a2:c7:a4:d8:f7:87:29:e1:2c:5f:5d:a7:f8:44:0a:9e:
73:c9:b9:5d:81:ca:6c:56:c1:1a:7d:44:ea:8d:93:fc:80:8d:
cf:52:1f:58:3f:b7:ec:b1:66:67:b2:d0:94:0c:ad:ab:5a:18:
4b:16:a9:54:63:e0:e9:bc:20:29:c2:92:2b:0f:2c:d5:65:39:
9a:6d:5d:29:53:03:29:d8:69:e4:6d:8d:82:90:53:12:50:ae:
54:23:3d:d3:c5:a3:a9:6f:d6:0b:01:20:20:e8:04:16:ae:78:
e2:19:c4:59:87:40:d6:47:df:c1:8a:eb:8c:1d:4d:a1:28:02:
7a:8e:4d:2e:27:4f:00:5a:08:63:49:82:fc:b9:e0:90:2f:c6:
98:af:5c:c4:a9:48:9a:07:72:53:74:93:ab:6d:b5:35:dc:8c:
05:7a:5b:4c:4e:9d:15:96:1c:47:85:41:c8:6f:70:29:e8:44:
14:e9:f8:9f:93:68:b5:b7:1e:33:ef:cc:ff:4a:ec:a5:d7:e5:
fd:1c:40:f4:17:1e:b0:7c:f7:d6:eb:a5:44:6c:f0:dc:8a:0b:
12:a3:21:82:33:e4:06:cf:c2:39:fb:10:4e:cd:49:aa:e7:3e:
b7:1d:9c:b0:b9:4a:ee:ef:3b:07:2e:78:d4:53:5d:76:4b:31:
e4:75:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:43:02 2025 by rpki-client