Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: jIlf8pjeIKy1PbemHp4FKDAMZIF/84Ss0jkyPu4p/i0=
Subject key identifier: 97:D8:A5:FC:96:99:C0:0E:91:8F:D4:40:49:0D:B4:93:D5:9D:F0:F4
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 0196D0994393108CBADC96AE701D8D3D89B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 21:00:27 +0000
Manifest this update: Wed 14 May 2025 21:00:27 +0000
Manifest next update: Thu 15 May 2025 21:00:27 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: kTeqJWDva8y/y7mfe/OatGpEeNS19XNpKAYG15tuS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:43:93:10:8c:ba:dc:96:ae:70:1d:8d:3d:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: May 14 21:00:27 2025 GMT
Not After : May 15 21:00:27 2025 GMT
Subject: CN=97d8a5fc9699c00e918fd440490db493d59df0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:5e:55:8c:ea:e9:c4:d6:4d:a1:f7:5f:1a:
4f:12:9b:b7:ab:73:93:c2:4b:d4:16:df:8e:d4:7a:
e0:16:26:56:dc:5b:70:05:be:31:e1:0a:7c:e0:37:
d0:bb:cb:67:01:82:97:70:75:2e:6a:5e:e4:c1:79:
f0:28:cf:e4:9e:8c:25:13:41:df:7d:58:2c:6b:fe:
96:0b:81:68:47:89:b0:b6:15:db:a3:8c:7d:c8:46:
4d:10:a5:76:eb:70:de:a3:5e:03:06:d5:ab:57:d4:
8e:3c:38:f6:04:29:df:d7:81:76:46:f6:33:e4:dd:
53:86:34:0b:b3:53:d6:67:db:62:a2:4e:94:41:df:
f4:49:0d:bc:e1:db:43:f9:8c:c4:78:94:e3:7a:43:
17:51:57:69:fd:c0:ea:52:87:0a:3d:ac:e5:0e:32:
13:2f:bb:62:9f:f1:00:df:62:c1:18:18:e8:18:ae:
b3:fc:9e:46:2c:eb:59:c3:49:0e:79:69:68:ec:c7:
16:c4:52:08:7c:d1:bd:aa:17:70:45:76:6f:b8:06:
37:19:ec:9b:cc:cb:64:f3:66:07:25:24:d0:21:37:
22:48:78:91:ce:04:a0:6d:98:81:3e:a0:2a:b9:30:
28:20:f7:03:24:4b:72:3b:6e:b5:4e:6c:a8:f2:ca:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:A5:FC:96:99:C0:0E:91:8F:D4:40:49:0D:B4:93:D5:9D:F0:F4
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:a3:7f:e0:4b:1d:93:a5:28:11:be:90:59:7f:3e:21:46:
c0:a7:15:41:1a:e0:81:55:3b:90:14:a5:c4:38:dd:3e:d9:c6:
d6:ee:b3:5f:ec:96:2f:ff:52:16:8f:8e:c4:16:6d:08:36:3d:
c5:92:ad:ce:58:e0:dd:80:dd:2f:35:c8:0d:af:6b:c1:cd:92:
f2:f8:56:37:0b:9d:e6:83:7b:77:fd:cb:89:62:6e:36:2c:97:
0d:07:be:1b:c5:00:94:e1:24:53:11:ba:77:e4:e7:80:6e:38:
d3:75:de:dc:59:b1:ae:17:bf:21:91:ae:e7:14:02:4e:23:a0:
b7:4f:a2:16:db:6a:5f:dc:01:3d:37:c4:5f:b1:53:9e:0e:90:
d6:88:76:b7:12:a9:77:7c:21:43:90:11:ae:94:54:d7:57:98:
f1:10:d4:bb:82:4c:94:c0:3e:6a:d8:47:27:65:5a:05:72:b8:
09:96:27:a8:1b:a1:30:b7:57:59:7a:76:16:41:a2:b8:b3:9e:
31:42:ae:b9:bd:0f:c6:c2:40:42:4a:0e:74:22:5c:ef:16:af:
ab:6a:6c:b9:a6:b0:2f:78:8e:0c:23:9c:e9:b4:04:7d:68:f9:
c2:fc:7b:6e:31:4c:5f:6e:fc:c4:9d:77:66:a5:10:66:59:51:
e7:b9:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:23:04 2025 by rpki-client