Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: k0jnDjLF/Mqf7WN4XqI3linQBHp1RGEc/Ot/t8tyl4c=
Subject key identifier: 5A:3E:A6:F3:6E:30:F5:3B:3C:9D:2B:7F:78:12:66:7D:7D:15:0A:95
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0196BCDBD7F9011E09973285A036A1258867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0DF6
Signing time: Sun 11 May 2025 01:00:46 +0000
Manifest this update: Sun 11 May 2025 01:00:46 +0000
Manifest next update: Mon 12 May 2025 01:00:46 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: FSXev+H1Ouvb7tZtLRgnyQVK5+GNJ4OLCx8TftFqNjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:d7:f9:01:1e:09:97:32:85:a0:36:a1:25:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: May 11 01:00:46 2025 GMT
Not After : May 12 01:00:46 2025 GMT
Subject: CN=5a3ea6f36e30f53b3c9d2b7f7812667d7d150a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:3a:d6:bf:1e:1c:26:fc:40:8b:e9:be:19:
64:19:9f:0a:8a:eb:1a:f1:26:d9:9a:ca:a8:2e:03:
8d:92:2c:e0:dd:1c:5c:bd:89:ca:d5:d7:12:ba:e1:
0f:5a:ef:2a:f2:de:1f:cf:9d:c9:16:a5:b3:46:14:
68:42:4b:8c:1b:e1:6c:24:0b:f0:be:46:3a:2f:e8:
be:97:3c:51:8c:16:6a:92:07:cd:60:f6:d9:f8:3b:
7b:e2:d2:39:13:06:21:a8:02:df:47:75:6f:a7:e9:
44:74:4d:2d:54:1e:24:e3:08:52:24:7f:fd:0c:dd:
b9:c6:33:c3:e0:f2:ba:30:bb:b9:a5:b3:00:a8:47:
f9:69:86:70:9a:0c:bc:40:04:ce:44:14:26:36:4a:
a4:b5:74:47:5f:f5:d5:67:f6:1e:6e:06:52:ad:60:
1e:0c:78:8a:ce:96:a8:d4:91:0b:c8:98:fa:ac:78:
d6:0d:6e:7f:2f:b3:42:0e:b4:ec:cd:e5:3c:fc:a8:
07:c4:87:77:f3:76:d9:84:14:6c:b1:cf:05:70:21:
99:4d:61:73:65:33:ab:d6:30:93:bb:47:3a:d8:81:
f0:ac:16:ec:ee:51:d0:cf:d9:27:5d:b8:71:e8:5a:
57:91:45:75:7c:57:45:62:16:e1:ed:29:a3:7a:fb:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:A6:F3:6E:30:F5:3B:3C:9D:2B:7F:78:12:66:7D:7D:15:0A:95
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1a:fd:0e:77:e3:03:7a:e0:7d:03:c0:42:bd:b4:01:4f:e0:
38:c1:97:ee:35:01:d2:02:b3:fd:42:17:8c:bd:2b:86:1d:60:
85:f1:6f:ab:f8:d5:ea:2b:47:26:88:20:ab:55:b5:a0:0c:8e:
4b:06:e4:bc:16:90:d3:e6:1f:04:48:ea:0c:49:b9:dc:24:19:
9c:b5:83:ff:32:c5:76:f9:80:7d:bc:ad:b6:86:55:fa:8a:a1:
8e:a8:9a:ab:e0:a1:ab:47:76:f8:db:90:45:c0:be:63:7e:12:
61:39:dd:40:1e:e7:f1:11:f0:d1:15:f6:f1:31:53:be:b8:35:
cf:86:c5:4d:0e:43:dc:53:58:52:63:e5:a7:1b:15:f8:eb:8f:
b8:76:6f:bd:58:10:ad:43:79:d8:97:4a:ef:bc:64:f2:61:21:
99:be:c5:03:bb:c7:17:5f:a7:bc:18:9b:89:5e:29:bc:77:40:
c8:8f:fe:30:b3:77:40:1d:0b:a2:31:2e:d2:d5:5a:75:e5:0e:
a5:63:a9:09:75:dc:61:fb:1b:5d:9c:35:df:26:49:32:aa:43:
86:4d:09:e4:74:61:70:f9:45:0e:5c:67:3c:83:2e:fa:14:8c:
11:07:f3:f2:6b:10:dd:b0:2f:48:32:ab:6a:92:93:12:95:69:
bc:5e:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:36:35 2025 by rpki-client