Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: ZpUvLbSqMTGb1+MGMGu9hGVz04v1oP1udXY4peUvxwY=
Subject key identifier: BB:02:3A:81:0D:67:A5:B1:BF:61:67:1B:D4:9D:36:06:E4:C2:6F:F3
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 0196BAED2B5BF963F8D8427932406357A8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 10C1
Signing time: Sat 10 May 2025 16:00:27 +0000
Manifest this update: Sat 10 May 2025 16:00:27 +0000
Manifest next update: Sun 11 May 2025 16:00:27 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: V9Dr8LwFV9/woOxn2T0YZBHRM6QmHEy5o+/U4wtNRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:2b:5b:f9:63:f8:d8:42:79:32:40:63:57:a8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: May 10 16:00:27 2025 GMT
Not After : May 11 16:00:27 2025 GMT
Subject: CN=bb023a810d67a5b1bf61671bd49d3606e4c26ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:24:41:b4:9f:99:d9:ef:45:a4:a6:36:8e:
1e:2d:97:b0:3f:02:11:54:74:ef:49:ce:0a:c2:a2:
b6:1e:33:e6:ef:ab:43:b6:50:01:ca:f6:13:78:5e:
bb:8c:c9:97:ba:08:72:8a:7d:46:97:f5:ef:0d:c3:
75:85:29:a0:f2:62:9e:1a:c3:13:64:fc:46:04:e2:
be:38:ee:a7:fc:82:38:20:21:aa:e5:47:d7:94:5a:
c0:d1:ec:50:93:ea:78:15:71:76:89:ed:8a:58:0e:
f9:17:74:27:0a:cd:4a:2a:97:b0:45:a8:5c:b9:13:
6f:61:b1:2c:fb:72:22:26:55:d0:51:d2:11:18:3d:
ea:c5:86:d0:b0:c6:be:eb:d0:87:9e:d0:a6:ab:18:
fb:96:91:6d:f0:12:81:8e:1b:82:3e:c7:3e:e7:59:
72:ca:97:c3:0d:26:a2:c8:a6:a7:1d:bd:44:13:bd:
a1:13:58:f8:50:2d:d4:51:ad:da:45:90:fc:34:da:
46:4e:a4:4b:48:64:e2:18:5a:60:36:9a:15:0f:5f:
8a:2e:72:52:9a:82:fd:bb:ac:31:77:d9:82:db:a5:
30:89:72:f8:7c:93:68:f8:c9:4c:cb:65:51:a8:94:
60:d7:88:6a:08:33:9f:2f:0a:bb:c2:8a:5b:6c:87:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:3A:81:0D:67:A5:B1:BF:61:67:1B:D4:9D:36:06:E4:C2:6F:F3
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b9:d2:55:fc:36:a1:22:a8:40:75:60:49:45:22:e0:86:5e:
ed:8e:6f:7d:ae:a1:f8:29:77:6a:ea:64:6f:33:87:45:5d:24:
dd:8e:91:60:01:0d:95:de:05:11:a4:03:1b:12:db:0c:09:9a:
68:16:da:7d:d9:a9:e1:22:14:a0:37:74:3f:6a:84:63:e2:69:
8d:30:f7:b1:1a:9e:ea:3a:e7:f2:79:d2:de:bd:0e:26:ec:27:
ed:7f:2d:24:b7:7e:9a:c9:c3:82:f1:3c:3f:13:62:a6:a1:b3:
a8:cc:f6:d3:a5:3c:28:da:0e:92:b9:c1:ba:50:79:15:4b:0d:
9e:bf:85:a9:8e:5a:06:7a:49:f9:15:35:bc:e9:82:61:b6:cb:
8d:21:64:5f:a4:bc:1e:ac:7c:d8:1b:4e:32:39:73:84:59:7f:
eb:66:66:94:40:9f:13:ea:b3:12:80:ec:4b:47:88:31:28:68:
4c:42:46:b5:0a:de:ce:e6:71:10:f7:59:83:1c:72:4f:13:cc:
c9:c5:e4:d8:6f:24:ac:51:3f:4a:2c:1b:9b:a9:f2:e8:b5:b4:
b3:a0:e5:db:04:ce:01:d3:79:a5:be:7b:08:50:46:0c:4e:ef:
4f:a4:f1:fe:91:2a:00:d7:27:74:39:69:46:a2:7b:b4:59:fd:
48:bf:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:19:47 2025 by rpki-client