Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: ZidRot7AawnkQYFBH3lgAYYNey94W7+6RSmpDQpACrU=
Subject key identifier: 08:79:17:AD:F1:D2:A7:AD:3B:8A:BE:B8:E1:19:3A:44:6D:FC:53:66
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0196BFDCB273A15DD6A7DBC3D9E3CD357561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 04E0
Signing time: Sun 11 May 2025 15:00:33 +0000
Manifest this update: Sun 11 May 2025 15:00:33 +0000
Manifest next update: Mon 12 May 2025 15:00:33 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: NOtIrs7n9j0/2fWCzw80RnX8bnNOwUkOjwi0u17wCPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:b2:73:a1:5d:d6:a7:db:c3:d9:e3:cd:35:75:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: May 11 15:00:33 2025 GMT
Not After : May 12 15:00:33 2025 GMT
Subject: CN=087917adf1d2a7ad3b8abeb8e1193a446dfc5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:c5:ce:f3:45:da:a1:53:d4:91:02:21:ae:
07:45:2a:8b:f9:f3:7f:75:11:86:35:8c:c1:65:ec:
10:58:71:4e:75:0c:3d:91:ac:ea:46:42:80:7c:2a:
69:29:3c:f2:39:6e:41:de:3c:9b:e6:71:2d:8b:3b:
4c:8d:83:4e:74:87:9e:91:e5:ed:34:8f:23:10:0f:
97:d6:b5:67:88:4a:e9:3b:38:4a:d2:38:67:0d:67:
26:e1:fe:24:49:dd:c7:87:b6:71:f9:0a:f8:20:12:
99:84:66:74:30:71:f6:67:5a:f1:e8:0e:08:4e:46:
61:fc:98:8f:54:40:70:a5:f1:85:77:da:cc:16:2a:
33:07:1b:a9:d9:c2:6b:3d:3e:59:36:58:ae:4f:fe:
83:dd:2c:7d:63:25:24:1d:bd:7a:ec:9c:36:b4:da:
98:16:53:47:2b:6e:22:35:08:08:ab:e1:dd:00:db:
8e:e3:cf:a2:b8:c8:d3:4a:97:34:55:f6:5d:74:49:
4f:b2:d8:66:e6:09:c1:ed:fe:c3:28:0e:f6:61:69:
3a:6a:c1:60:f4:77:f7:62:42:ea:96:c3:61:94:d1:
88:3a:eb:ae:e8:60:1a:30:ad:98:65:4d:c5:87:6d:
3b:7b:17:3f:dc:7b:ba:c2:28:a0:19:e6:37:55:10:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:17:AD:F1:D2:A7:AD:3B:8A:BE:B8:E1:19:3A:44:6D:FC:53:66
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:56:e4:51:77:c0:7b:15:5e:70:c3:19:be:8b:1d:ad:56:a0:
79:05:ab:cf:00:c6:ad:30:00:49:1d:ca:82:2f:3e:9a:bc:7d:
7a:4f:dc:d7:3c:b5:ab:99:37:4e:91:75:3c:b0:8c:5c:b5:92:
40:1c:eb:ed:ae:2e:b9:2b:93:96:54:c4:84:cf:b1:91:51:13:
f7:69:f2:2b:e9:17:c9:63:be:3a:4a:c2:52:c4:60:dc:25:35:
e3:c2:4e:bd:00:c0:16:c1:4d:7a:80:21:c7:78:a0:64:d6:e3:
f2:53:c7:11:80:ea:99:5e:08:77:fd:cb:07:88:bb:36:9b:a1:
18:ac:17:30:33:07:1c:6d:8e:d0:53:e8:88:5e:bc:3b:7c:b8:
ae:61:d5:a0:96:8c:95:4b:5f:a7:37:26:af:7b:94:d2:1f:58:
0c:12:2d:87:2d:a9:ac:cf:d9:c3:54:87:9e:68:eb:4e:cf:21:
8f:d2:b5:33:0d:86:6c:63:2c:29:08:fa:85:54:96:96:ff:ee:
e5:04:1d:e0:fe:f0:bb:a2:37:8a:69:46:17:2e:97:53:7d:88:
ec:84:d1:a5:28:8a:ca:3a:92:12:85:aa:64:19:92:93:1f:b9:
45:34:13:6e:01:86:4b:09:9a:c6:3b:fc:a0:97:a2:1f:a3:a7:
12:95:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:56:11 2025 by rpki-client