Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: EOQ0wOneXej3X2jw7lRFAN2hvUK1zk/SmniQbcOQ1fA=
Subject key identifier: 0E:D0:B1:CA:64:41:51:6A:C9:C9:7A:72:82:C9:77:FE:11:91:58:73
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 0196B17C110ABDEB69E9A08AB6D43DD23A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0C00
Signing time: Thu 08 May 2025 20:00:20 +0000
Manifest this update: Thu 08 May 2025 20:00:20 +0000
Manifest next update: Fri 09 May 2025 20:00:20 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: +M6QF73uTRLvRdl/eq0HQq8yPfkV2JKAFu8nl5p/bo0=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:11:0a:bd:eb:69:e9:a0:8a:b6:d4:3d:d2:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: May 8 20:00:20 2025 GMT
Not After : May 9 20:00:20 2025 GMT
Subject: CN=0ed0b1ca6441516ac9c97a7282c977fe11915873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:86:12:c1:46:05:39:cf:76:bf:43:0b:eb:
36:8a:21:c6:e6:5e:73:0d:31:20:b4:79:5c:50:a3:
12:9b:9f:72:74:12:29:34:f9:40:89:4a:8f:f2:29:
16:20:b2:2c:03:bf:78:9d:57:67:34:6a:76:2d:54:
30:f5:98:92:09:5b:b7:00:15:2c:93:e6:e8:ea:6e:
d8:0f:54:27:c4:53:97:b2:93:15:93:48:6f:a8:36:
8c:78:54:f2:37:14:2e:7a:e1:0a:7b:78:ee:6a:fc:
21:a1:9b:5d:84:d9:30:1c:49:b0:e9:c2:55:8d:1d:
50:ef:df:10:53:33:1e:61:c6:22:af:51:56:72:a1:
c0:c5:d8:e2:4d:8e:be:1d:f1:43:0d:cd:54:51:67:
31:97:c3:fb:56:23:4a:35:f0:58:e7:a8:bd:bc:9e:
c9:a2:a1:b9:ee:13:e5:be:9c:d1:4b:ac:bd:6d:86:
aa:21:38:4e:fc:0f:e9:05:aa:82:6d:04:52:32:51:
be:af:4d:b6:50:66:fc:0e:09:b2:3f:cd:11:00:21:
0a:50:9c:88:65:89:fd:eb:4e:c4:c7:40:3c:5d:0c:
39:d7:d1:41:fd:dd:4b:ac:77:03:7e:a3:7f:d5:48:
d1:90:13:d9:35:65:85:b9:44:2b:58:68:77:d9:30:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:B1:CA:64:41:51:6A:C9:C9:7A:72:82:C9:77:FE:11:91:58:73
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0a:28:76:f5:cd:04:dd:fc:6a:45:75:1f:f7:b2:2e:d9:5f:
1b:4a:76:d7:d9:3d:91:9c:6f:47:c8:ad:4d:be:8f:90:b5:e1:
76:99:fa:36:56:65:7a:ed:cb:17:4e:82:0d:d5:dc:d1:6e:26:
b4:e1:24:3d:00:ee:c3:fa:0c:df:76:57:d2:ab:95:a1:54:72:
53:c2:a4:8d:80:c3:a9:4b:00:d3:81:2b:bb:f1:07:5b:03:8c:
68:43:b9:39:76:1c:71:20:13:21:60:23:ce:ce:aa:7b:7c:c5:
46:c7:fa:db:82:d5:55:60:ed:cd:e3:80:57:1d:97:73:5f:58:
f0:87:91:fa:69:36:4b:87:dc:e5:c8:cc:9f:71:6f:2c:9b:01:
07:9c:91:9e:cb:3a:04:30:da:e2:1f:f3:14:1e:8b:4d:b2:15:
47:c5:bc:13:0f:fd:a7:dc:c4:0b:e8:bc:36:0b:ef:06:da:dd:
12:5f:6e:5d:8d:b6:0d:21:b5:a5:6c:d0:25:00:03:ba:85:db:
68:b8:ae:d2:ba:70:ba:64:81:ba:c0:cc:30:78:8d:eb:6a:67:
d6:8f:22:59:79:cd:66:c0:17:e7:bc:dd:76:a4:28:f6:7f:71:
9a:e8:d5:bb:24:7e:9b:88:0d:ac:a6:31:41:41:81:84:08:13:
cd:90:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:03:23 2025 by rpki-client