Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: ACE7G/qNSy1JzNnxgntesoKbc55bbkvcE9FHSc/xZ/Q=
Subject key identifier: EC:AB:20:28:DD:88:68:50:07:A9:A1:F4:E1:36:9E:C0:95:AE:EB:2D
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 0196BA7F6F346402301F40A965AC8CCC76AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 0DF3
Signing time: Sat 10 May 2025 14:00:35 +0000
Manifest this update: Sat 10 May 2025 14:00:35 +0000
Manifest next update: Sun 11 May 2025 14:00:35 +0000
Files and hashes: 1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: SVl251W+6+nhov6cjAZDcYuurlOsu17Bveiv2YFlmSA=)
2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:6f:34:64:02:30:1f:40:a9:65:ac:8c:cc:76:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: May 10 14:00:35 2025 GMT
Not After : May 11 14:00:35 2025 GMT
Subject: CN=ecab2028dd88685007a9a1f4e1369ec095aeeb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:45:f0:1a:a1:22:d0:7c:10:73:40:ea:80:
9a:c7:b3:06:96:04:33:c0:f2:25:d7:ef:f4:46:eb:
d8:9c:b6:a2:f5:b8:a9:11:fe:12:64:6f:64:5f:46:
f1:ca:b6:8d:ca:2e:04:a6:1c:b3:ae:d0:92:74:bf:
d7:7a:8e:38:f3:5b:bc:80:66:f9:07:58:32:88:74:
3b:71:2f:c9:c1:96:e4:98:d1:db:aa:b6:db:63:36:
88:f0:7f:96:5a:a5:28:bb:8b:d5:3a:e1:07:a2:99:
a1:c2:9a:10:d2:f7:eb:7e:32:52:f8:7e:28:fb:af:
74:0f:d5:34:e9:df:9d:57:6c:5d:0b:02:29:7c:93:
52:7d:36:f8:a8:ba:fa:58:28:b1:68:65:68:e8:c1:
df:b4:cf:7a:2f:c5:d8:c5:86:32:75:1a:60:3d:3b:
f9:ab:c8:2b:d6:c7:81:ce:d6:72:0d:f3:7f:a3:19:
7c:82:ee:6e:55:7f:e6:1f:a2:c0:10:30:d1:2f:ed:
9c:3a:74:cb:67:08:ba:31:09:b7:ec:5f:75:7a:7e:
8d:f2:20:f5:cb:c9:ea:c6:29:1c:11:1c:a8:7d:ae:
36:4b:28:61:2c:67:f0:46:77:b9:a2:c0:b5:09:43:
14:8d:7b:81:d5:10:21:88:98:a9:d7:1f:68:20:8d:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AB:20:28:DD:88:68:50:07:A9:A1:F4:E1:36:9E:C0:95:AE:EB:2D
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6d:7e:99:d8:af:66:99:2d:13:ce:1f:e4:cf:ee:4e:8c:58:
1c:ba:46:0e:27:67:8f:e3:97:8a:10:73:f4:7b:fc:9b:fb:b8:
4c:f3:90:1e:93:9a:dd:5e:44:c7:b7:6b:3e:b2:bc:1c:11:42:
ff:e5:55:50:55:d0:8e:82:73:74:b6:a4:a5:ad:44:cf:2f:ef:
06:86:c6:e5:b2:24:3d:bb:ee:fe:f7:0a:41:0c:3f:63:70:aa:
c8:d2:99:01:0e:3e:a0:a6:2e:a4:f8:45:d2:58:63:a4:bc:8e:
e6:67:5c:c8:d1:0b:8c:ae:57:01:36:48:53:ac:a9:d7:7b:6b:
43:6b:22:2c:03:db:48:8b:b2:c5:0d:db:12:72:5e:d9:55:9e:
3a:f2:fa:8c:75:ab:d3:d0:d6:c9:30:da:41:e6:6a:c1:8c:9d:
b3:19:2e:22:84:1f:04:2b:10:b4:74:51:db:29:98:ce:94:e7:
85:89:00:18:d7:4a:6b:1f:8f:b7:d6:71:10:64:16:33:87:13:
ed:9f:04:2e:75:1b:18:51:c0:a8:c7:8e:56:80:dc:31:a8:cd:
13:c3:cf:bf:0c:df:98:ee:07:43:af:52:b2:bd:b4:3d:3a:19:
f0:45:e0:e6:7c:c6:cb:f9:f0:fa:78:32:0d:cb:47:e4:63:c7:
2c:f8:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:23:37 2025 by rpki-client