Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: v9KBUb2iUd67z0YJ9AvNKxkCENRX/9/8z5UCbEGt3Z8=
Subject key identifier: 08:2A:99:45:17:FA:64:89:3B:30:CA:05:65:95:F0:E2:77:F0:08:3B
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 0196A7662CA3FA753B19BDD0319BC6A474CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 21:00:13 +0000
Manifest this update: Tue 06 May 2025 21:00:13 +0000
Manifest next update: Wed 07 May 2025 21:00:13 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: x0KX3nrKOZI1r/HWuCkNchnRPePvnrzy2zpNlupdFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:2c:a3:fa:75:3b:19:bd:d0:31:9b:c6:a4:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: May 6 21:00:13 2025 GMT
Not After : May 7 21:00:13 2025 GMT
Subject: CN=082a994517fa64893b30ca056595f0e277f0083b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:d5:8e:5f:1c:52:b0:00:70:9f:08:d4:bb:
bb:d3:72:18:e0:14:21:58:62:d5:3c:17:74:32:38:
bb:c2:8c:44:ac:0c:0d:9d:11:35:58:96:db:89:08:
e5:c5:4e:b3:2b:41:d5:da:6a:a5:25:46:2d:a5:03:
ad:31:03:41:88:dc:85:2c:7f:14:b1:66:fe:e7:de:
54:87:e2:96:e1:76:11:f9:04:e3:57:78:1d:b7:44:
77:23:42:ae:e7:fa:1a:60:de:b4:27:46:cc:d1:bf:
e1:ac:2c:42:63:8c:03:a6:39:65:b9:2c:4e:32:93:
3a:58:9e:86:89:07:cd:04:83:2c:ca:90:e4:c0:3a:
6b:37:47:d0:c1:ef:c5:2d:a8:3c:df:9c:e9:ff:46:
6e:91:e6:55:30:91:d0:f2:21:14:f6:a8:92:b6:5d:
17:5f:13:25:73:1c:fc:ee:0b:49:41:a5:74:d4:d0:
f4:bc:61:0e:b7:9e:70:14:ed:91:60:da:a1:ee:5f:
62:29:41:3f:8e:7f:95:82:c9:5b:e3:c7:83:43:b2:
73:f5:f9:69:82:7e:0b:da:b0:0e:6f:24:00:1d:0e:
bb:f6:ac:44:7a:52:39:c0:86:48:30:7d:e7:c0:4f:
d1:d4:a9:23:52:b6:4c:f9:1a:3c:26:dc:f4:1a:ca:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:99:45:17:FA:64:89:3B:30:CA:05:65:95:F0:E2:77:F0:08:3B
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:bc:37:43:a3:d6:55:89:78:8b:53:c7:b5:f8:fc:55:45:
75:77:05:f4:1e:93:1e:30:d8:14:3e:1f:16:db:d7:b2:70:53:
10:83:be:d8:92:55:ca:03:14:b5:7f:1a:8e:97:0f:ad:5b:6a:
88:48:13:60:90:92:b9:10:ef:90:c9:b4:cf:cd:ff:84:81:53:
cc:98:0a:5f:e5:dd:88:5e:c8:2c:d2:77:ef:21:05:ee:db:0c:
ea:03:b0:b6:4e:de:82:d1:80:c7:30:3e:55:38:cf:71:1f:88:
a9:76:5e:9b:cd:1d:4c:c7:bb:92:67:33:97:40:ba:97:10:49:
ac:74:b7:bb:8e:64:99:42:95:70:c2:71:7c:20:7a:d3:33:11:
29:67:74:8d:22:c2:58:6b:d1:74:be:08:88:a4:0d:a7:07:e7:
9b:61:e2:22:6f:54:dd:ce:46:fb:a5:69:f4:50:38:11:25:ba:
43:22:92:31:f2:a0:fa:11:7a:d4:34:be:c7:39:6e:f2:29:ec:
07:55:32:ef:b8:4a:29:22:73:67:c0:27:bf:fd:1f:c2:ec:8a:
78:32:22:48:2c:26:7b:5a:24:15:7b:8f:d1:f8:be:6d:19:db:
22:a0:b4:37:e1:1b:ea:f8:0b:93:67:76:8b:c9:06:7d:e7:b0:
e7:67:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:24:53 2025 by rpki-client