Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: Uk7bFlOmmbGGQZBMFbfYJf/nZVQWOhJ6lNVYONPOJn4=
Subject key identifier: 45:E4:1B:87:00:61:32:86:67:03:1E:14:80:86:4E:C1:52:82:CA:ED
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0196BE5C330B000915E1CDAFC1EE984DAF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 08:00:35 +0000
Manifest this update: Sun 11 May 2025 08:00:35 +0000
Manifest next update: Mon 12 May 2025 08:00:35 +0000
Files and hashes: 1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: VknMwygivPCwKfdVhGYQRhZk4elWEko6AedK/JkE16g=)
4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:33:0b:00:09:15:e1:cd:af:c1:ee:98:4d:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: May 11 08:00:35 2025 GMT
Not After : May 12 08:00:35 2025 GMT
Subject: CN=45e41b870061328667031e1480864ec15282caed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:91:87:f9:c8:66:11:1a:c8:a3:ca:48:6a:
f6:25:34:8f:fd:ad:51:d3:e7:03:cd:f7:b9:47:41:
f1:be:b1:8a:2d:c3:c1:5d:af:5f:8d:e8:f2:cc:e3:
50:70:7f:29:8f:33:76:ac:39:5e:24:27:02:aa:ff:
51:ff:3c:a9:94:18:ff:b7:37:d4:f4:7b:f2:34:b6:
85:19:90:cb:40:08:c0:6e:27:41:65:59:a0:14:4f:
36:9c:04:08:23:67:e4:4e:c2:ea:41:e8:b6:d5:bc:
b5:fc:be:e8:3b:91:c8:e5:a6:c3:b6:8c:9b:b3:cc:
b9:3b:d2:21:13:9c:23:52:21:2d:65:b6:da:38:92:
3a:80:b9:fc:06:9a:af:19:28:c1:a1:a6:17:5e:1d:
25:29:a7:34:61:d2:55:1f:1c:0a:70:19:12:f8:3b:
7f:3d:97:24:07:b2:62:bd:32:38:d5:11:c4:7f:75:
35:54:d5:49:9e:02:f4:92:39:89:44:f2:69:fa:f6:
18:b0:4c:ba:22:49:12:23:fa:e7:fd:3d:df:71:b2:
a7:1f:e1:83:af:de:41:c7:f1:bd:9a:5c:55:00:cc:
11:1c:c0:d8:8e:86:fd:01:32:81:04:cf:38:85:f1:
8d:2c:38:81:6b:00:cf:98:6f:47:09:df:65:db:73:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:1B:87:00:61:32:86:67:03:1E:14:80:86:4E:C1:52:82:CA:ED
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:1b:32:25:db:b4:0d:2f:93:2b:b2:45:88:3d:25:86:72:
b5:e0:0a:9f:7b:1d:a6:c9:83:4c:6b:b0:5b:a7:5f:3e:98:ff:
2f:98:9f:41:0e:bf:39:40:2f:f3:9b:83:77:3d:6b:b5:0f:a2:
a6:23:82:15:11:ab:c5:f4:2b:bd:a8:aa:ad:12:76:84:de:22:
d7:8b:c0:2f:53:5a:5a:f0:81:4e:e5:e6:4d:39:9b:9f:6b:e3:
4f:c4:78:c7:25:29:65:da:2e:58:f9:63:95:7e:fa:0b:37:37:
93:18:19:88:03:1d:b4:19:fa:4d:6d:25:98:6f:32:0d:4d:71:
31:42:13:e4:6b:83:63:56:97:a3:d9:2d:ae:90:df:06:e9:6f:
47:c1:bc:2a:e3:24:a9:1a:c0:63:d5:30:45:37:2a:a7:03:62:
58:e3:f0:21:32:e2:b2:b0:1e:78:5d:0c:df:45:87:8a:b9:64:
12:d3:bf:0a:17:f1:80:c7:13:d8:f8:a6:e1:60:4c:80:fd:bd:
c2:e1:15:63:ba:5a:04:c7:24:40:f4:0c:f1:b6:92:56:ff:b4:
bc:df:a9:85:e8:40:f2:53:3e:8c:6f:d7:e4:a5:24:11:b7:af:
e2:6f:0c:b6:33:95:69:80:cd:c3:79:aa:96:c8:17:97:b5:6c:
52:4d:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:47:07 2025 by rpki-client