Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: pq9VzjcWDjzkmeQUSKizhIk79NrBsaB8gdDygzqKW9k=
Subject key identifier: 5C:DC:97:25:41:9E:5B:6C:B2:EB:E3:E3:D8:13:9A:96:A8:AA:DE:E7
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 0196B40F9B076546D1FC4D42E886FB59C509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 08:00:43 +0000
Manifest this update: Fri 09 May 2025 08:00:43 +0000
Manifest next update: Sat 10 May 2025 08:00:43 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: mp0LW8muhIFFh1L2DFnsHkIz8o9AgGIBsRrHcgqKWXY=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:9b:07:65:46:d1:fc:4d:42:e8:86:fb:59:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: May 9 08:00:43 2025 GMT
Not After : May 10 08:00:43 2025 GMT
Subject: CN=5cdc9725419e5b6cb2ebe3e3d8139a96a8aadee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:97:01:ae:05:f2:e2:49:1d:14:90:f6:94:
19:df:98:b8:33:9b:e7:29:5f:fa:52:71:05:07:43:
11:33:cf:40:83:0a:e7:1d:b6:08:46:e4:2e:4c:1e:
a7:a2:14:db:8a:38:90:43:ec:b3:32:6c:c3:b3:9b:
21:79:21:d9:9e:39:77:7d:4d:c5:19:d3:54:1e:ab:
5a:4a:60:88:a3:2b:5e:bf:a4:f5:6d:c4:2e:4c:16:
68:8a:27:fc:2f:59:e5:9b:c9:58:59:58:56:94:3d:
8f:3a:16:fe:98:1a:68:0d:eb:18:c7:64:89:d3:d9:
a9:e3:fd:1d:02:29:38:3d:67:18:6c:c5:44:81:92:
7b:7a:5c:7e:bb:2a:cd:22:50:29:be:d1:88:8a:45:
9a:ca:6b:96:6c:db:c9:d0:d6:b7:d4:41:71:97:63:
11:83:ab:65:26:20:03:e1:67:5d:86:c2:c9:fb:de:
f8:35:bc:54:3e:5c:91:b9:c7:6e:fd:92:3f:ed:9e:
49:f7:8e:a8:83:3a:eb:7d:cb:5c:93:6d:a5:2c:3d:
f2:92:e4:6f:a1:7c:6d:1e:bb:76:12:15:0e:1c:56:
fd:10:d0:d0:25:70:69:14:79:73:50:b0:a9:74:98:
a4:4e:9a:1f:cd:59:cd:c1:cf:84:c7:ca:99:99:ba:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:97:25:41:9E:5B:6C:B2:EB:E3:E3:D8:13:9A:96:A8:AA:DE:E7
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:33:95:c6:01:33:1d:30:68:96:fa:b5:81:08:6c:01:0a:ca:
02:e5:4e:b8:c2:19:3b:68:38:bd:a7:ed:81:bc:09:97:e7:ef:
6f:f4:39:50:25:a2:90:69:8e:f0:44:54:f0:a9:b9:25:39:12:
5e:77:0a:38:1c:28:c1:9a:c1:45:55:3c:df:e4:f4:9e:0a:e3:
c1:fa:56:27:14:6d:2d:ab:e7:56:14:a6:87:1e:2a:f4:34:a4:
24:fd:9c:41:b1:71:4f:d6:2a:60:86:a0:80:9b:07:16:ae:14:
3f:0f:c5:7b:04:60:36:ae:cf:6e:6f:9c:b2:32:e9:02:54:34:
63:4c:f3:da:a3:56:d6:7d:97:43:65:0b:37:e3:23:3c:2d:9e:
36:e5:0d:7d:db:72:b0:8b:66:ef:4b:42:cc:35:87:8e:c6:cc:
8f:a5:e6:07:30:50:94:74:bd:42:6b:87:13:16:03:11:d3:99:
b1:41:90:c2:80:6c:df:75:d2:53:c8:22:99:fb:bc:e5:c2:d7:
62:37:77:12:07:66:e8:23:79:fd:98:4a:f1:a3:31:52:ef:b9:
75:0e:c5:ed:2c:8e:7f:c7:22:80:9d:9d:31:62:eb:14:40:a8:
86:6c:db:02:e9:db:ba:eb:0c:ab:15:e7:1a:c4:f9:04:a0:19:
91:54:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:07:22 2025 by rpki-client