Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: kZP7/zZouWHIzXTNlMmST3TPNWElUu1OFsuEFcoMgBI=
Subject key identifier: 97:F1:A3:2E:EF:10:77:DB:02:83:DD:9E:C5:F4:89:B8:B6:48:CE:7A
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 0196BCA4A7C3733C3C7DD0034288A12FF853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0D81
Signing time: Sun 11 May 2025 00:00:29 +0000
Manifest this update: Sun 11 May 2025 00:00:29 +0000
Manifest next update: Mon 12 May 2025 00:00:29 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: E726t7/z8HnRjcBNaaXsryRAZz/HXekv7Ypbncnkbrk=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:a7:c3:73:3c:3c:7d:d0:03:42:88:a1:2f:f8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: May 11 00:00:29 2025 GMT
Not After : May 12 00:00:29 2025 GMT
Subject: CN=97f1a32eef1077db0283dd9ec5f489b8b648ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:c5:39:7e:f0:23:56:44:e3:9b:63:bc:dc:
5f:ea:7d:d0:05:c8:80:eb:86:d6:e4:14:4a:0e:7c:
14:56:5e:1c:b6:da:ea:ff:19:1a:cc:75:68:93:11:
09:27:0c:d6:c8:5e:a5:b1:1a:5e:f5:86:20:ee:42:
55:77:ee:c3:06:03:76:8a:16:b0:99:12:ca:b2:13:
50:f2:f5:99:ae:36:af:36:05:43:86:ec:39:4e:89:
2b:da:ce:58:f6:56:4c:ec:94:ce:71:5c:07:81:60:
9b:c0:04:0f:26:55:1f:13:36:5f:81:bd:3d:1f:f9:
39:a5:da:36:36:a0:47:df:11:ca:bf:db:94:07:36:
87:91:a1:86:ee:ed:8e:6a:2e:f1:54:e6:05:a8:6c:
1c:40:89:4d:54:40:6a:3c:da:ba:fd:4a:67:69:97:
73:c4:62:14:05:6f:5a:ae:8c:18:2d:11:63:26:94:
c8:56:83:5b:7d:73:8c:cb:a4:e0:09:5a:3a:9b:a3:
89:07:5e:bb:b3:6c:5f:a9:3a:22:43:c5:b2:05:7d:
02:34:47:ba:ef:4c:eb:6f:dd:10:b1:53:33:3c:ac:
7c:2b:1c:f0:b4:a7:47:6f:22:50:f7:b9:1a:bd:49:
0e:72:d8:f7:94:8e:ad:9a:bf:6c:62:59:db:90:9e:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:A3:2E:EF:10:77:DB:02:83:DD:9E:C5:F4:89:B8:B6:48:CE:7A
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:9c:85:6c:0d:fb:a8:ac:97:0d:21:03:d6:bb:06:5c:99:
58:da:e8:b6:eb:97:97:b8:8f:35:5c:08:a5:2f:60:3e:d5:a2:
4c:87:f5:b2:4f:3e:c1:85:09:79:1e:54:86:4c:5b:09:15:14:
80:11:98:d7:4f:0d:55:ca:eb:03:1f:11:8d:0b:03:99:ee:2c:
5a:6f:10:8a:39:47:b0:74:06:95:c7:f9:45:b4:42:67:1e:40:
63:f3:1d:55:9c:1c:49:08:a1:42:0e:4c:4c:ef:05:15:ff:f3:
ff:0e:cf:82:cc:86:d3:18:6d:48:c2:d4:10:cf:96:cf:72:b5:
e6:e5:ac:d0:56:dd:e9:3b:d0:bb:70:bc:11:f5:ef:f2:a9:41:
1d:ed:a1:72:ac:c4:eb:c1:8a:16:ad:ce:c2:b3:2e:4c:36:0d:
20:4d:5d:c8:71:4b:85:78:a2:87:6b:53:00:3d:37:fa:36:ce:
d1:84:18:e4:10:77:61:83:42:76:da:5f:29:2e:1e:76:d5:b0:
08:29:62:6d:0d:cd:8f:c1:66:96:12:46:3b:7e:49:aa:b5:54:
28:36:cd:0a:b1:c6:a0:20:b8:df:d7:1a:fb:2b:1c:a6:d4:75:
c4:ec:1b:29:cd:81:78:3a:53:df:0e:fc:ea:80:53:f3:30:a3:
c6:32:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:22:51 2025 by rpki-client